NT PDC & Samba

Mike Westkamper mjwestkamper at weiinc.com
Mon Nov 8 14:24:37 GMT 1999


Dr. Peter Koehler,

Thanks for the response. Below is my smb.conf   with the IP addresses replaced
by nnn

Your review will be greatly appreciated.

Mike Westkamper



[global]
    workgroup = weiosb
    server string = Samba Server
    hosts allow = localhost, nnn.nnn.nnn. , 127.
    printcap name = /etc/printcap
    load printers = yes
    log file = /var/log/samba/log.%m
    max log size = 50
    security = domain
    password server = weidomosb
    encrypt passwords = yes
    smb passwd file = /etc/smbpasswd
    unix password sync = Yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*pass
wd:*all*authentication*tokens*updated*successfully*
    socket options = TCP_NODELAY
    netbios name = AUXFS
    remote browse sync = nnn.nnn.nnn.nnn/mmm
    remote announce = nnn.nnn.nnn/mmm
    domain controller = weidomosb
    wins support = yes
    dns proxy = no
    encrypt passwords = yes
    password level = 0
    preferred master = no
    os level = 0
    null passwords = no
    dead time = 0
    debug level = 0
    domain master = no
    comment = Auxillary Server - Linux
    password server = weidomosb

[homes]
    comment = Home Directories
    browseable = yes
    writable = yes
    available = yes
    public = yes
    only user = no

[netlogon]
    comment = Network Logon Service
    path = /home/netlogon
    guest ok = yes
    writable = yes
    share modes = no

[Profiles]
    path = /home/profiles
    browseable = no
    guest ok = yes

[printers]
    comment = All Printers
    path = /var/spool/samba
    browseable = no
    guest ok = no
    writable = no
    printable = yes

[archive]
    available = yes
    path = /home/archive
    public = yes
    guest only = no
    writable = yes
    browseable = yes
    only user = no

[public]
    available = yes
    path - /public
    public = yes
    guest only = no
    only user = no
    writable = yes
    browseable = yes



Peter Köhler wrote:

> Mike,
>
> an extract of your smb.conf would have been helpful.
> I assume you have set
>
> security = domain
> password server = <your domain controller>
> encrypt passwords = yes
>
> and followed the procedure to make the Linux box a
> member ot the domain.
>
> This will allow users to connect to the Linux Samba server
> with their NT Domain userid-password combination.
> To gain proper access to the shares, however, you must
> either have matching user accounts on the Linux Box
> (could be a different or illegible password) or you must
> use
>
> force user = <linuxuser>
>
> for your share to map the - authenticated - user to an
> existing Linux user name.
>
> Peter
> ----------------------
> Dr. Peter Koehler +++ IDAS GmbH
> Holzheimer Str. 96 +++ D-65549 Limburg +++ Germany
> Phone: +49-6431-404-14 +++ Fax: +49-6431-404-10
> eMail: koehler at idas.de
>
>
> ----- Original Message -----
> From: Mike Westkamper <mjwestkamper at weiinc.com>
> To: Multiple recipients of list SAMBA-NTDOM <samba-ntdom at samba.org>
> Sent: Friday, November 05, 1999 7:26 PM
> Subject: NT PDC & Samba
>
> > I have set up a Linux box with RH 6.0 & the latest "stable" Samba. It
> > went together fairly well
> > and I left with a couple of problems...
> >
> > I have read the docs and followed the info on Setting Samba up in an NT
> > domain. My two remaining problems are:
> >
> > 1.    I cannot seem to gain write access to an arbitrary share.
> > 2.    I can access the file server from a workstation on the same
> > domain, however only by using my Linux userid & Password.The NT box sees
> > and has identified the Linux box as a server.
> >
> > If I understand the issue, although this Linux box is a member of a
> > domain, the userid/password must exist on the Linux system as well as
> > the PDC to allow Domain logons to the Linux box. If this is correct is
> > there an automated means to cause the Linux box to use the PDC
> > userid/passwords or to synchronize
> > the two?
> >
> > Any help will be appreciated..
> >
> > Mike
> >



More information about the samba-ntdom mailing list