[Samba] How to control who can log into the samba box

[Gordon Messmer]

David Shapiro wrote:
>  
> I have samba set up using winbind so that I can ssh into the box with
> my DOMAIN\mylogin.  That's great...kind of.  How do  I control which
> users can login to the box?

I usually do that by reconfiguring sshd for key-only authentication 
(that is, disable password based auth).  Configure samba to hide or veto 
the ssh authorized_keys file, and you alone will have access to add keys 
for the users to whom you want to grant login privileges.