[Samba] Setup Recommendation Needed

[Ilia Chipitsine]

how You can use single user database. I had an idea, but I didn't have 
a time to test it :-)

a) passwords are stored in kerberos, both samba and AD domain use 
kerberos.

b) users are stored either in samba/ldapsam or AD, and imported/exported 
via LDIF format (AD allows importing/exporting such stuff using LDIF, 
without passwords)

> Here is what I have:
> I have a home office with a Windows 2000 active directory domain.  I
> have a remote office running Samba 3.0.14a connected to the home office
> via a VPN.  All users at the remote office are required to have an
> account on the active directory domain at the home office for several
> reasons, including the use of Exchange Server.  All client machines at
> the remote office run XP Pro.
>
> Required Options:
> *  I need to be able to run logon scripts locally at the remote office,
> from the Samba server at the remote office.
> *  I need for each user to have a single user account and it needs to be
> the one in active directory on the domain controller at the home office.
>
>
> Optional Result:
> *  I would like the XP Pro client machines to still be able to log on if
> the VPN connect gets dropped.  I believe this is taken care of already
> due to the fact that the XP machines will cache the logon credentials,
> but I thought I would mention that in case there is a better way of
> doing this.
>
> General Question:
> How do I go about setting this up?  I have looked at the docs and have
> been messing around with several different settings and can't quite
> figure it out.
>
> Specific Questions:
> 1.)  What samba security mode should I be using?
> 2.)  Should the samba server workgroup setting be unique for the remote
> site or the same as the home office domain?
> 3.)  Should the samba server be joined to the home office domain?
> 4.)  What domain should the XP Pro clients join, the local domain or the
> home office domain?
> 5.)  Does this require winbind to work?
>
> Thanks to all in advance.
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>