AW: "security = domain" Problem

[Askew Bernard]

Hi
-Did you join the domain? 
	smbpasswd -j <domain> -r <password server>
-Can you see the server on your NT 
	execute c:\winnt\system32\srvmgr, you should see your shares
-Did you make a usermap file?
	make sure that all your NT users who will have access to the shares
exist in this file and that they correspond 1 to 1 to a different UNIX user.
For this you will have (in the normal case) to create as many UNIX users as
NT Users.

Still difficulties? write back. I've done it for about 400 users, and it
works fine. The only problems you might have is the administration (open
users on both environments). But there's no 2nd password control and the
use is transparent. Try finetuning with rights (you can hide where no
rights, which is not possible with NT!)

Rgds
Bernard Askew

> -----Ursprüngliche Nachricht-----
> Von: Horst Lederhaas [mailto:lederhaas.horst at seidel.at]
> Gesendet am: Mittwoch, 10. Oktober 2001 14:56
> An: samba-ntdom at lists.samba.org
> Betreff: "security = domain" Problem
> 
> Hello !
> 
> I would like to put my samba file server in a existing nt 4.0 domain.
> It work's all fine, only the password verification makes some 
> problems.
> 
> I've enabled:
> "security = domain"
> "password server = 10.10.1.2 10.10.1.9"
> "encrypt passwords = yes"
> 
> Now i have the problem that samba only looks in the smbpasswd file for
> the passwords.
> If i enable in smbpasswd that "no password required" an a client does
> not do a domain
> logon to the nt servers, and the user exists on the samba 
> server, he get
> access to the server, even
> also when the password is not correct (to the nt pdc).
> i would'nt like to convert the nt users to a smbpasswd.
> 
> Is this normal that he only look in the smbpasswd? i would like to
> verify the user on my nt domain.
> I've read that only the user must exist, without any password 
> and the nt
> pdc says if the password is correct
> or not.
> 
> I hope you can follow me with my problem, and anybody can help me.
> I use SuSE 7.2 with Samba 2.2.0
> The PDC and BDC are NT 4.0 Srv. SrvPack 6
> 
> Thnx
> Horst
> 
> 
> 
> --
> Horst Lederhaas,  <mailto:lederhaas.horst at seidel.at>
> IT - Management
> 
> SEIDEL Elektronik GmbH.
> Frauentalerstr. 100
> 8530 Deutschlandsberg, Austria
> Phone: ++43 3462 6800 252
> Fax: ++43 3462 6800 165
> URL: http://www.seidel.at/
> 
> 
> 
>