Setting up virtual samba servers

[MEwing at berkleyis.com]

Robert,

In my current setup, almost all of the options are defined in the master
smb.conf file.
Following is a listing of the only options that are defined in the two
virtual smb.conf
files that I have setup.


     virtual01.conf

          [global]
                security = server
                password server = local_PDC


     virtual02.conf

          [global]
                security = user
                password file = /opt/samba/etc/smbpasswd



The configuration that I am trying to support is as follows.

     Both virtual servers support the same file shares.   The only
difference
     between the servers is how the user is authenticated.    One virtual
server
     uses the local PDC system to authenticate the users' passwords.   The
     second virtual server uses the local smbpasswd file to provide access
     for a limited number of remote users that are not listed in our local
PDC.

     Including the entries for these remote users in the local PDC is an
option
     that is currently NOT available.

Would either of the following solutions work to resolve this issue?

     1.  Include the Samba server's DNS name in the "netbios alias"
definition
          and setup a configuration file that specifies the local smbpasswd
file.

     2.  Include the   "security =" and the "password file =" definitions
before the
          "include =" statement in the master smb.conf file.   The values
should
          then be reassigned when the virtual server config files are
included.

Or,  is it possible to setup the smb.conf file of a regular samba server to
use multiple
authentication methods?    (ie.  The samba server would first check the
local smbpasswd
file then it would check the PDC.)

Here is a separate question about resource shares.

Is it possible to setup the smb.conf file to NOT have the "user's home
directory" and
"printers" shares visible when using the "Network Neighborhood" utility to
view and
access the shares that are available from the samba server?    I only want
the users
to be able to see the shares that I have been defined for the samba server.
Since I
do not plan to support printing through the samba server, I currently do
not have any
printing options defined.

Thanks for all your help.

Michael Ewing
UNIX System Administrator
Berkley Information Services





                                                                                           
                    "Robert                                                                
                    Dahlem"              To:     "MEwing at berkleyis.com"                    
                    <Robert.Dahle        <MEwing at berkleyis.com>                            
                    m at gmx.net>           cc:     "samba at samba.org" <samba at samba.org>       
                                         Subject:     RE: Setting up virtual samba servers 
                    12/18/00                                                               
                    12:07 PM                                                               
                    Please                                                                 
                    respond to                                                             
                    "Robert                                                                
                    Dahlem"                                                                
                                                                                           
                                                                                           




Michael,

On Mon, 18 Dec 2000 12:01:09 -0600, MEwing at berkleyis.com wrote:

>Thank you for the pointer on using "include =" rather than "config
>file =" in setting up the virtual samba servers. I made this change
>and the client systems are now able to connect to the specified
>virtual servers.
>
>I am now running into a different problem.   This one involves
>changing the user's passwords on the virtual server that is
>configured to use the local password file for authentication.

Perhaps you have vital parts of your config in one of the files for the
virtual servers (/opt/samba/lib/smb.conf.%L). Are you sure that
everything what is needed in cases when no server name is known already
is in the master configuration file?

Regards,
        Robert

---------------------------------------------------------------
Robert.Dahlem at gmx.net           Fax +49-69-432647
---------------------------------------------------------------