[Samba] Samba as BDC in NT domain

[Robert Adkins]

Chris,

	I believe the issue is relating more to the SID (Security IDs) that are   
also transferred for both user and computers. I don't believe that   
dumping the NT SAM into a smbpasswd file would really do the trick as it   
wouldn't include the SID information. (Unless I am seriously mistaken.)

	What you are suggesting sounds like it would work simply for creating a   
Samba server within a Windows NT Domain that uses the domain controller   
to pull its list of users and accounts.

	You would still need to create all of the groups in the *NIX/Linux/*BSD   
groups file and set all the permissions on the drives. I am unfamiliar   
with being able to dump the NT group information into a text file.

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
Ph. 586-254-5800
Fx. 586-254-5804


 -----Original Message-----
From: Chris McKeever [mailto:cgmckeever at prupref.com]
Sent: Thursday, November 21, 2002 4:18 PM
To: Robert Adkins; Pasi Holmström; samba at lists.samba.org
Subject: RE: [Samba] Samba as BDC in NT domain

   

I am trying to work out a work around for this...I have used PWDUMP to
extract the NT SAM into a smbpasswd file.

Theoretically..one could write a script that would then parse that file   
and
run useradd -u RID to create the local accounts....I have done it   
manually
and it works very well (there is some issue with the groups, but I guess
that is a secondary battle)

what I would like to do is just circumvemt the need for the local users   
and
pull the password from the smbpasswd...but as I write this I think the
reason samba needs a local account for local authentication is the   
groups..



 -----Original Message-----
From: Robert Adkins [mailto:raa at impelind.com]
Sent: Thursday, November 21, 2002 2:55 PM
To: Pasi Holmström; samba at lists.samba.org
Subject: RE: [Samba] Samba as BDC in NT domain


I have only read that Samba is able to act as a BDC for another Samba PDC   
    

system. It is unable to act as a BDC for a Windows PDC due to the
secreted method that Microsoft uses to transfer the SAM data to other
Domain Controllers.

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
Ph. 586-254-5800
Fx. 586-254-5804


 -----Original Message-----
From: Pasi Holmström [mailto:pasihol at cedunet.com]
Sent: Wednesday, November 20, 2002 3:14 PM
To: samba at lists.samba.org; Robert Adkins
Subject: [Samba] Samba as BDC in NT domain

     


I have this problem: there is a subnet 192.168.6.0/24 and the gateway is
192.168.6.1 which has also another nic 172.21.13.123 which belongs to
subnet 172.21.13.0  where the PDC of NT-domain is. GW does NAT and it
causes that computers/users in subnet 192.168.6.0 cant logon to
NT-domain.
Is it possible to put Samba in GW machine so that it can be a backup
domain
controller in NT-domain and it uses username:passwd combinations from PDC
and login becames possible?
If so, how can it be done?

pasi h

 --
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

 --
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba