[Samba] enable client to join domain with no or any password?

Jean-Jacques Moulis jj at isy.liu.se
Tue Aug 17 15:51:12 MDT 2010


On Tue, 17 Aug 2010 13:33:25 -0700 David Mathog <mathog at caltech.edu> wrote:

DM> I am trying to automate W7 joining to our Samba domain. It works fine
DM> through the Windows GUI from the W7 workstations. However, for a script
DM> one would have to store password used for domain access, and since that
DM> is the server's root password, I really don't want to hard code that
DM> into a file.

Grant the right to put a machine in the domain to a special user with
no other privileges on the PDC or on the clients.
it doesn't need to be able to login on the PDC or the clients
the storage of the password of such an account is a lesser problem.

SeMachineAccountPrivilege 
This right controls whether or not the user can join client machines to a Samba-controlled domain

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html


-- 
Jean-Jacques   Moulis                              Tel:  (013) 281684
ISY                                                Fax:  (013) 139282
Linköping University                            E-mail: jj at isy.liu.se
581 83 Linköping


More information about the samba mailing list