smb.conf example

[Anders Vstling]

Chad Cunningham wrote:

> Does anyone have a smb.conf file for an NT PDC setup I could look at?
> I'm a bit confused about how this needs to be set up. Specifically
> with the security= directive. I'm not sure how this works. All the

        workgroup = INEAB
        security = server
        password server = milou idefix
        preferred master = no

>
> users on our NT machines have accounts on the UNIX machine that will
> be running samba. Can samba use the same passwords for both the unix
> box and the NT machines? Do I have to have two password files, or can
> I use /etc/passwd for both?

Use pam_smb for this. Here is an extract from my file

/etc/pam.d/login

#%PAM-1.0
auth       required     /lib/security/pam_securetty.so
auth       required     /lib/security/pam_smb_auth.so
auth       required     /lib/security/pam_nologin.so
...

/etc/pam.d/ftp

#%PAM-1.0
auth       required     /lib/security/pam_listfile.so item=user
sense=deny file=
/etc/ftpusers onerr=succeed
auth       required     /lib/security/pam_smb_auth.so
auth       required     /lib/security/pam_shells.so
account    required     /lib/security/pam_pwdb.so
session    required     /lib/security/pam_pwdb.so

>
>
> What would be really nice is if when an account was created on the
> unix box, they would then have access to log in on the NT machines.
> Is this a dream, or do I have to create a samba account for everyone
> as well?

Put an asterisk in the /etc/passwd file for the user. This will forward
the authentication
to the named NT server (see smb.conf)


/Anders

--
--------------------------------------------------------
Anders Östling
IKEA Corporate Technology Group
Email: anders dot ostling AT neurope dot ikea dot com
Phone: +46-42-25 73 45
Fax  : +46-42-25 73 70
Mobil: +46-70-753 70 39
--------------------------------------------------------