[Samba] Samba with Domain User accounts

anth jaz antsoundz at eudoramail.com
Fri Nov 7 23:08:45 GMT 2003


I am trying to find an option to M$ file server under Linux. Everything to this point is M$. Whether anybody goes for it or not, I would like to put the option out there for choice. One of the important necessities is that this doesn't become any more complicated for the EU. As soon as you say Linux to the bosses they think more complex for the user and the users have trouble enough logging in to there computers. I am a Linux newbie trying to become more efficient. At present, I am using RH9, Samba 3, and have security = Domain and have joined the domain successfully. I have a user joe created on the Linux/Samba server and when user joe logs onto his Win2k computer on the NT domain he can access the Samba share I have configured like this:

[share]
path = /test
public = no
writable = yes
printable = no
valid users = joe jon art
create mask = 0765

Unless users "joe, jon, and art" are created on the Linux box, the user gets prompted for network authentication:

Connect As:
Password:

I also have set "password server = *" and I still get promted for authentication. I enter a vaild domain user account but not one that I have added to the Linux box and it will not take it. I also tried using 
"password server = x.x.x.x" where x.x.x.x was PDC and BDC and had the same results.

I have also set the following:
unix password sync = Yes
passwd program = /usr/bin/passwd %u

I don't want anybody to have to do this, since they do not have to do this now (all windoze 2k & NT). There are a lot of users and equally a lot of passwords on the domain and it isn't very efficient to add every user to the Linux box. Is there a way to get around this. Have the Linux server communicate with the PDC or BDC since it is a member of the domain? 

If that is even possible can I then give joe "read only", jon & art "read & write", and "deny" everybody else access to the "test dir." 



Need a new email address that people can remember
Check out the new EudoraMail at
http://www.eudoramail.com



More information about the samba mailing list