[Samba] security = problems

[Stéphane Purnelle]

You just make the same thing that a windows workstation client.
No password in the client, only is the PDC.

But, I think it's no necessary that you insert the username map and the
smbpasswd file in your smb.conf.


Le jeu 03/04/2003 à 20:49, SPURGEON_MATHEW_D at LILLY.COM a écrit :
> Is there a way to have users of the samba server, but not add them by 
> smbpasswd -a <UserID>?
> 
> I want the samba server to be a domain member and the users to only 
> authentic from the PDC.  These are the steps that I have attempted:
> 
> Users are in both the Windows domain and the UNIX NIS account
> 
> 1.  smbpasswd -j  <Domain> -r PDC -U <admin>
>         Joined the Domain
> 2.  edited the smb.conf file
>         [global]
>         # workgroup = NT-Domain-Name or Workgroup-Name
>         workgroup = AM 
>         netbios name = SUNTST1
>         server string  = SUNTST1
>         max log size = 0
>         security = domain 
>         password server = *
>         encrypt passwords = yes
>         username map = /usr/local/samba/lib/username.map
>         max open files = 30000
>         oplocks = No
>         smb passwd file = /etc/samba/smbpasswd
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         remote browse sync =  40.1.142.11 40.25.17.9 40.25.12.26 
> 40.1.129.224 40.1.129.225
>         remote announce =  40.1.142.11 40.25.17.9 40.25.12.26 40.1.129.224 
> 40.1.129.225
>         wins proxy = yes
>         dns proxy = yes 
> 3.  restarted the samba server
> 4.  From windows "search for computer"  suntst1 unknown
> 
> 4a.  If I add the my userid to the smbpasswd -a <userid>
>         newpasswd = Windows Password
> 4b.  From windows "search for computer"  suntst1 AM samba server
> 
> I want the PDC to do the security, so I do not have to add the users to 
> the smbpasswd file.
> 
> Mathew Spurgeon
> Eli Lilly and Company
> Software Engineering Support Team
> Phone: (317)  276-7436
> Mobile:  (317)  716-7789
> http://mcntstep03.d51.lilly.com/SEST
> mspurgeon at lilly.com