[Fwd: Map to guest and NT user validation]

Teemu Junnila teemu.junnila at era.ericsson.se
Wed Feb 16 14:16:35 GMT 2000


> Anybody got any idea how to fix this?
>
> 1) I must validate the userid/passwd against NT-Domain
> 2) Users with both UNIX and NT-Domain accounts shall have the
> access-rights defined in UNIX
> 3) Users with NT-Domain account but without UNIX account shall be GUESTS
>
> I have no problems if I just apply 1 and 2, but, if I apply 1, 2 and 3
> then something strange happens and
> almost all users will be mapped as GUESTS. Even if they do have valid
> accounts on both UNIX and NT-Domain.
>
> The grand total number of users defined in NT-Domain (there is actually
> a few of them) is about 100000,
> but only a few thousands of these need the GUEST access to my site.
>
> The number of users having UNIX accounts is about 2000.
>
> Here is the head of my smb.conf:
> [global]
>
>         netbios name = ESEKIUX06
>         workgroup = ERSE51
>         server string = KI/ERA/LV/ET Samba Server Home dir a-k
>         wins server = 147.214.10.124
>         announce version = 6.0
>         password server = ESEKINT351, SEKINT58, SEKINT59
>         security = domain
>         encrypt passwords = yes
>         browseable = yes
>         public = yes
>         remote announce = 147.214.192.255/24
>         max log size = 2048
>         interfaces = 147.214.44.4/24
>         socket options = TCP_NODELAY
>         socket address = 147.214.44.4
>         remote browse sync = 147.214.192.37
>         remote announce = 147.214.192.255 147.214.225.255
>         directory mask = 2700
>         create mask = 2700
>         character set = ISO8859-1
>         client code page = 850
>         veto files = /lost+found/
>         admin users = qrapeka qravila qrasern qratorm qramize
>         username map = /home1/samba/private/users.map
>         #deadtime = 15
>         #map to guest = Bad User
>         guest account = smbguest
>         #read only = no
>
> --
> Best Regards,
>
> Teemu Junnila/ Ericsson Radio Systems



More information about the samba-ntdom mailing list