[Samba] Need help in samba configuration

[Kevin Keane]

I haven't tried it, but you should be able to join more than one domain. It's not trivial. Unlike Windows, you can make a Samba server appear as more than one server at the same time. You'd basically have to run multiple instances of Samba completely independent of each other. Each instance would need a different IP address, host name, smb.conf, and directory for the various other files Samba uses.

> -----Original Message-----
> From: samba-bounces at lists.samba.org [mailto:samba-
> bounces at lists.samba.org] On Behalf Of Gaiseric Vandal
> Sent: Wednesday, November 18, 2009 5:50 AM
> To: Pankaj.C.Pimple at relianceada.com; samba at lists.samba.org
> Subject: Re: [Samba] Need help in samba configuration
> 
> I have never tried "unjoining" a domain.
> 
> I think the approach would be to
>       1- update smb.conf to change security to user
>      2 - delete the SambaMachine account from your Windows PDC.
> 
> 
> You can't me in more than one domain.  however you can set up trusts
> between windows and/or samba domains.    (Although I haven't quite got
> that working properly.)
> 
> -Damian
> 
> 
> 
> 
> 
> 
> On 11/18/09 02:11, Pankaj.C.Pimple at relianceada.com wrote:
> >
> > Hi Gaiseric *,*
> >
> > Thanks for your help.
> > I have now joined the domain using smbpasswd -j.
> >
> > Could you please let me know how can I remove the join created above
> > i.e I want to unjoin the samba server amd domain how to do it and
> what
> > are its effects.
> > Can I join multiple domian from single samba server??
> >
> >
> > Thanks and Regards,
> > Pankaj C Pimple
> > Software Configuration Management,
> > Reliance Tech Services,B Block,DAKC,Navi Mumbai,India
> > Direct : +91 022 303 80153
> > Mobile : +91 9320023444
> >
> > For any CC/CQ queries please contact CM.HelpDesk at relianceada.com
> >
> >
> >
> > *"Gaiseric Vandal" <gaiseric.vandal at gmail.com>*
> >
> > 17-11-09 07:30 PM
> > Please respond to
> > <gaiseric.vandal at gmail.com>
> >
> >
> >
> > To
> > 	<Pankaj.C.Pimple at relianceada.com>
> > cc
> >
> > Subject
> > 	RE: [Samba] Need help in samba configuration
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > What happens if you use smbpassword to change a user's password (e.g.
> from
> > MyPassword1 to MyPassword2), and do not change the password via
> > Windows.  If
> > the user then logs into a windows PC, does he use "MyPassword1" or
> > "MyPassword2?"
> >
> > What happens if you use "smbpasswd -R 10.8.54.120 ...." instead?
> >
> > It seems like you have created local "Windows" accounts on the Samba
> > server,
> > so that when you connect to the samba share you are using the
> > DEVVM\username credentials instead of the RIC_F2M credentials.
> >
> > The purpose of having a Windows or Samba machine as a member of the
> domain
> > is so that you do NOT need to create accounts for each user on each
> domain
> > member. (Typically a Windows or Samba domain member will still have a
> > local
> > Administrator account, and may have a local Users group and local
> > Administrators group.)  For Samba, you still need the local unix
> users and
> > groups.  All going well you shouldn't need to have all the domain
> users in
> > the usermap file- but it shouldn't hurt.
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: samba-bounces at lists.samba.org [mailto:samba-
> bounces at lists.samba.org]
> > On Behalf Of Pankaj.C.Pimple at relianceada.com
> > Sent: Tuesday, November 17, 2009 2:20 AM
> > To: samba at lists.samba.org
> > Subject: [Samba] Need help in samba configuration
> >
> > We have ClearCase database on unix and users on windows.
> > We are creating Unix users locally on that Clearcase server. Samba is
> > also
> > installed on that server.
> >
> > User windows machines are part of domain. Groups,usres are created on
> > domain and same users,groups are created on unix server.
> >
> > Now problem is occuring when a windows user is changing the password
> for
> > his domain login. as soon as user is changing the password user will
> be
> > unable to access the samba share i.e clearcase vobs. So when user
> changes
> > the domain login password we have to manully change samba password
> for
> > that user by running
> >
> > smbpasswd <userbname>.
> >
> > Could you please guide me on how to achieve or any configuration need
> to
> > done on samba and on unix server so that I need not have to change
> > password manully for every user when user changes his/her windows
> domian
> > login password.
> >
> > My samba config fiel is as below
> >
> > # Samba config file created using SWAT
> >
> >
> > # Global parameters
> > [global]
> >        workgroup = RIC_F2K
> >        netbios name = DEVVM
> >        interfaces = devvm
> >        security = DOMAIN
> >        encrypt passwords = Yes
> >        password server = 10.8.54.120
> >        username map = /usr/local/samba/private/username.map
> >        #username map = /usr/local/samba/lib/username.map
> >        log file = /var/opt/samba/logs/log.%m
> >        os level = 0
> >        kernel oplocks = No
> >        create mask = 0775
> >        directory mask = 0775
> >        oplocks = No
> >        time offset = 30
> > #       time offset = 630
> > #       time server = yes
> > #[smbshare]
> > #       comment = Share Folder of devvm Server
> > #       path = /var/smbshare
> >
> >
> >
> > The information contained in this e-mail message is intended only for
> the
> > use of the individual or entity to which it is addressed. If you are
> > not the
> > intended recipient, you should return it to the sender immediately.
> Please
> > note that while we scan all e-mails for viruses we cannot guarantee
> > that any
> > e-mail is virus-free and accept no liability for any damage caused by
> any
> > virus transmitted by this email.
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
> >
> >
> >
> > The information contained in this e-mail message is intended only for
> > the use of the individual or entity to which it is addressed. If you
> > are not the intended recipient, you should return it to the sender
> > immediately. Please note that while we scan all e-mails for viruses
> we
> > cannot guarantee that any e-mail is virus-free and accept no
> liability
> > for any damage caused by any virus transmitted by this email.
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba