[Samba] tdbsam info

[Gary Dale]

I believe that the Windows server validates the username/password 
combination. However, the SWAT help file has this to say about security 
= domain:

/Note/ that a valid UNIX user must still exist as well as the account on 
the Domain Controller to allow Samba to have a valid UNIX account to map 
file access to.

//
I believe this would imply that the account needs to be enabled on your 
Samba server. To do this through SWAT, just click on the PASSWORD icon, 
enter the user name and click on Enable User (assuming you have added 
the user).

The tdbsam is the default Samba database for mapping Windows to Unix 
accounts. The user has be in the database and enabled.


Tim Gessner wrote:
> As I understood it he should be authenticating the logon using the
> windows server (active directory) and not storing users and passwords
> locally (on the linux box).  I didn't recognize the tdbsam entry in the
> config file though.
>
> If what I have said is true, do I still need to enable the account?  If
> so, how?
>
> Thanx!
>
> -----Original Message-----
> From: Gary Dale [mailto:garydale at torfree.net] 
> Sent: Monday, December 18, 2006 4:58 PM
> To: Tim Gessner; samba at samba.org
> Subject: Re: [Samba] tdbsam info
>
> As a new user, did you enable his account? My usual advice is to use 
> SWAT for this.  :)
>
>
> Tim Gessner wrote:
>   
>> I am trying to support our network while the 'IT' guy is on vacation.
>>     
> I
>   
>> have set up samba before, but it has been a few years so I'm very
>>     
> rusty.
>   
>> The problem is a logon failure for a new user.  The smb.conf file has 
>>
>>  
>>
>>         workgroup = DELTA
>>
>>         server string = File Server
>>
>>         security = DOMAIN
>>
>>         obey pam restrictions = Yes
>>
>>         password server = delta.deltacompsys.com
>>
>>         passdb backend = tdbsam
>>
>>         passwd program = /usr/bin/passwd %u
>>
>>         passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
>> *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully*
>>     
> .
>   
>>  
>>
>> I am not familiar with tdbsam.  Can anyone point me to some
>> documentation or give me the 5 second overview?  Where do I go to
>>     
> debug
>   
>> this problem?
>>
>>  
>>
>> The logon works fine for Windows, just fails with samba.  This is
>> running on a debian distro.  Thanx!
>>
>>   
>>     
>
>