[Samba] Question about samba servers

[Curtis Vaughan]

I have one samba server as the PDC for our org. Another samba server is 
supposed to permit access to shares based on authentication from the 
aforementioned PDC.  I'll call this second computer "SMB" for simplicity.

PDC has an LDAP and PAM database for authenticating all users.

SMB is setup as follows (smb.conf):

workgroup = NPC-USA
	netbios name = SMB
	server string = %h server (Samba %v)
	security = DOMAIN
	encrypt passwords = Yes
	password server = *
	passwd program = /usr/bin/passwd %u
	log file = /var/log/samba/log.%m
	max log size = 1000
	name resolve order = hosts wins lmhosts bcast
	socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	printcap name = cups
	local master = No
	domain master = False
	dns proxy = No
	wins server = 10.0.1.13
	comment = Printers
	path = /var/spool/samba
	hosts allow = 10.0.1.0/255.255.255.0
	printing = cups
	printer name = lp

Well, unless I add a user to SMB (adduser *****) then that user will not 
have access to any shares on SMB.  This doesn't seem right, or is it? 
 Also, should the userID on the PDC be the same on SMB?  What if I want 
to use groups?  Do I need to make the groups on PDC and SMB?

-- 
Curtis Vaughan
North Pacific Corporation

http://www.angelfire.com/wa/noentry/home.htm
WashTech (CWA Local 37083)
IWW x353203