[Samba] security = domain and NetBIOS aliases

[John H Terpstra]

On Mon, 7 Apr 2003, Barry, Christopher wrote:

> Hi everyone,
> 	I rely on about 8 NetBIOS aliases on my samba filer. I have been using security = server, but I have been running to some strange issues where if a user just logs off and then back on, they are denied access to shares. If they reboot, they can then get back in ok. I've set debugging up, and it appears that samba does not recognize the user after a logoff/logon, and uses nobody as the user.
> 	It has been suggested using security = domain to resolve this issue. I had tried this (oh, back about 2 years ago), and I could not get it to work. I searched the web recently, and found another user with this problem, and his resolution was to include in his alias include file(s) a [global] section with:
>
> security = domain
> password server = xxx.xxx.xxx.xxx

In "security = domain" you want the default "password server = *"

> encrypt passwords = yes.
>
> Now to my question:
> Do I need to add each NetBIOS alias to the domain in Win2K?

No.

> AND, maybe more importantly, do I do a smbpasswd -j DOMAIN -r PDC for each as well?

That is how you join the domain. You may need to do:
	smbpasswd -j DOMAIN -r PDC -Uadministrator

- John T.

>
> This is a live production system, so I just want to have my ducks in a row before attempting this.
>
>
> Thanks,
>
> --
> Christopher Barry
> Manager of Information Systems
> InfiniCon Systems
> http://www.infiniconsys.com
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
John H Terpstra
Email: jht at samba.org