[Samba] Local accounts and AD

[George Farris]

On Thu, 2007-14-06 at 23:33 +0200, Volker Lendecke wrote:
> On Thu, Jun 14, 2007 at 02:29:11PM -0700, George Farris wrote:
> > So has anyone been able to do this?
> > 
> > I have a Samba member server joined to AD on Win2003 server.  I have
> > winXP workstations and one can login with their AD credentials but I
> > also want to allow users with local accounts on the Samba machine to be
> > able to login with winXP.
> > 
> > Is it possible?
> > If so I haven't been able to make it work and would appreciate some
> > pointers.
> > 
> > Ubuntu 7.04 server
> > Samba 3.0.24
> > Kerberos etc etc
> > 
> > I tried storing the local accounts in tdbsam, no go.
> 
> If you need to have the tdbsam-defined users also log on
> locally to XP, you can make your samba box a domain
> controller for a separate domain and establish a trust to
> from you AD to the Samba domain.

I can't establish a trust because AD is running in native mode.  To
establish a trust domain AD must be running in mixed mode.  At least
this is how I understand the problem.