[Samba] Samba: read-only remote LDAP + additional local users

[Andrew Bartlett]

On Tue, 2012-07-24 at 10:06 +0200, Arokux B. wrote:
> On Tue, Jul 24, 2012 at 7:55 AM, Daniel Müller <mueller at tropenklinik.de> wrote:
> > Why do not have all users work within samba?
> > What is the reason?
> 
> My server is a small private server of a small subdivision. Now and
> then there are external people that come to us for short time and they
> also need access to our Samba-shares. I cannot change anything on the
> LDAP-Server and so cannot add them to it.

Do you bind directly against the LDAP server as a samba passdb, or do
you join the domain?

It would be more normal to join the domain, and then you can have local
unix users and local Samba users in your local passdb, while connecting
to the main company domain as a domain member. 

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org