[Samba] Need help in samba configuration

[Gaiseric Vandal]

I have never tried "unjoining" a domain.

I think the approach would be to
      1- update smb.conf to change security to user
     2 - delete the SambaMachine account from your Windows PDC.


You can't me in more than one domain.  however you can set up trusts 
between windows and/or samba domains.    (Although I haven't quite got 
that working properly.)

-Damian






On 11/18/09 02:11, Pankaj.C.Pimple at relianceada.com wrote:
>
> Hi Gaiseric *,*
>
> Thanks for your help.
> I have now joined the domain using smbpasswd -j.
>
> Could you please let me know how can I remove the join created above 
> i.e I want to unjoin the samba server amd domain how to do it and what 
> are its effects.
> Can I join multiple domian from single samba server??
>
>
> Thanks and Regards,
> Pankaj C Pimple
> Software Configuration Management,
> Reliance Tech Services,B Block,DAKC,Navi Mumbai,India
> Direct : +91 022 303 80153
> Mobile : +91 9320023444
>
> For any CC/CQ queries please contact CM.HelpDesk at relianceada.com
>
>
>
> *"Gaiseric Vandal" <gaiseric.vandal at gmail.com>*
>
> 17-11-09 07:30 PM
> Please respond to
> <gaiseric.vandal at gmail.com>
>
>
> 	
> To
> 	<Pankaj.C.Pimple at relianceada.com>
> cc
> 	
> Subject
> 	RE: [Samba] Need help in samba configuration
>
>
>
> 	
>
>
>
>
>
> What happens if you use smbpassword to change a user's password (e.g. from
> MyPassword1 to MyPassword2), and do not change the password via 
> Windows.  If
> the user then logs into a windows PC, does he use "MyPassword1" or
> "MyPassword2?"
>
> What happens if you use "smbpasswd -R 10.8.54.120 ...." instead?
>
> It seems like you have created local "Windows" accounts on the Samba 
> server,
> so that when you connect to the samba share you are using the
> DEVVM\username credentials instead of the RIC_F2M credentials.
>
> The purpose of having a Windows or Samba machine as a member of the domain
> is so that you do NOT need to create accounts for each user on each domain
> member. (Typically a Windows or Samba domain member will still have a 
> local
> Administrator account, and may have a local Users group and local
> Administrators group.)  For Samba, you still need the local unix users and
> groups.  All going well you shouldn't need to have all the domain users in
> the usermap file- but it shouldn't hurt.
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
> On Behalf Of Pankaj.C.Pimple at relianceada.com
> Sent: Tuesday, November 17, 2009 2:20 AM
> To: samba at lists.samba.org
> Subject: [Samba] Need help in samba configuration
>
> We have ClearCase database on unix and users on windows.
> We are creating Unix users locally on that Clearcase server. Samba is 
> also
> installed on that server.
>
> User windows machines are part of domain. Groups,usres are created on
> domain and same users,groups are created on unix server.
>
> Now problem is occuring when a windows user is changing the password for
> his domain login. as soon as user is changing the password user will be
> unable to access the samba share i.e clearcase vobs. So when user changes
> the domain login password we have to manully change samba password for
> that user by running
>
> smbpasswd <userbname>.
>
> Could you please guide me on how to achieve or any configuration need to
> done on samba and on unix server so that I need not have to change
> password manully for every user when user changes his/her windows domian
> login password.
>
> My samba config fiel is as below
>
> # Samba config file created using SWAT
>
>
> # Global parameters
> [global]
>        workgroup = RIC_F2K
>        netbios name = DEVVM
>        interfaces = devvm
>        security = DOMAIN
>        encrypt passwords = Yes
>        password server = 10.8.54.120
>        username map = /usr/local/samba/private/username.map
>        #username map = /usr/local/samba/lib/username.map
>        log file = /var/opt/samba/logs/log.%m
>        os level = 0
>        kernel oplocks = No
>        create mask = 0775
>        directory mask = 0775
>        oplocks = No
>        time offset = 30
> #       time offset = 630
> #       time server = yes
> #[smbshare]
> #       comment = Share Folder of devvm Server
> #       path = /var/smbshare
>
>
>
> The information contained in this e-mail message is intended only for the
> use of the individual or entity to which it is addressed. If you are 
> not the
> intended recipient, you should return it to the sender immediately. Please
> note that while we scan all e-mails for viruses we cannot guarantee 
> that any
> e-mail is virus-free and accept no liability for any damage caused by any
> virus transmitted by this email.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>
>
>
>
> The information contained in this e-mail message is intended only for 
> the use of the individual or entity to which it is addressed. If you 
> are not the intended recipient, you should return it to the sender 
> immediately. Please note that while we scan all e-mails for viruses we 
> cannot guarantee that any e-mail is virus-free and accept no liability 
> for any damage caused by any virus transmitted by this email.