User Manager for Domains / RAS callback problem

Alex Keahan agkeahan at netscape.net
Thu Apr 25 16:43:02 GMT 2002


Jean Francois Micouleau <Jean-Francois.Micouleau at dalalu.fr> wrote:

>
>
>On Thu, 25 Apr 2002, Alex Keahan wrote:
>
>> I have a Samba (post-2.2.3) domain controller and a Win2K RAS server.
>> I want users to be able to log in to the Win2K box (RAS), get
>> authenticated against the Samba PDC, and called back by the RAS
>> server.
>>
>> Unfortunately, the only way to assign a callback number to a domain
>> user is through the "User Manager for Domains", which was written for
>> Windows NT.  I don't have any NT servers around, but I have copied the
>> usrmgr files from another NT server, and it seems to run perfectly
>> under Win2K.
>>
>> There are two problems however:
>>
>> 1) When I run the UMfD as a regular user, I cannot change any user
>> properties and get an "access denied" error
>>
>> 2) When I run the UMfD as "root", I also cannot change any user
>> properties, but this time it claims that "The group name could not be
>> found."
>>
>> According to the UMfD, the only group that the user whose properties I
>> am trying to change belongs to is "Users".
>>
>> Is there a solution to this?  Does samba support the dialin and
>> callback properties?  If so, how can I set the callback number;
>> otherwise, how can I help implementing it?  I am willing to reverse
>> engineer the way NT does this, if need be.
>
>yes there is a start of solution. user manager is fully usuable in samba
>3.0. the backend user database would need to be expanded to store the
>callback number. that's doable.

Ok, Jean-Francois,

I don't think I can run Samba 3.0 on a production machine, and the PDC in
question is a production machine.

For the time being, I am going to implement a temporary solution, but
I would really like to see this fixed in the 2.2 branch.

Can the callback info be easily added to the mix without pulling in the
whole nine yards?   If yes, what are the missing RPC calls that I should
implement, and where do you think the extra info should go -- the
smbpasswd file?   What is the approach taken by the 3.0 / TNG branches?

Thanks

AGK



>
>
>
>    J.F.
>
>
>


__________________________________________________________________
Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop at Netscape! http://shopnow.netscape.com/

Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/





More information about the samba-technical mailing list