[Samba] auth. samba users against Win2K AD

[Buchan Milne]

> Message: 16
> Date: Thu, 16 Jan 2003 20:58:20 -0800
> To: suse-linux-e at suse.com
> From: Bill Parker <dogbert at netnevada.net>
> Cc: samba at lists.samba.org
> Subject: [Samba] auth. samba users against Win2K AD
> 
> Hi All,
> 
> 	We have a mixed Win2K and Linux environment, and we run Samba 2.2.3a on
> SuSE 8.0 Linux.  Assume you have users who have to access a share on Samba of
> say /foo/bar, and the users are part of group 'somegrp' (they have 
> permissions to
> modify stuff in /foo/bar, btw).
> 
> Now, assume said users exist on Win2K AD, is there any way to get Samba to
> authenticate against Win2K when they go for access to the the share, rather 
> than
> have to change passwords on both Samba and Win2k so that they match?
> 

Yes, join the machine to the Win2k domain (as root):
smbpasswd -j <DOMAIN> -U <Domain Admin account> -r <Domain Controller>

You will still have to make the accounts. This you can get around using
Winbind ( try 'man winbindd' for more info).

Buchan


-- 
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7