[Samba] guess account

Rowland Penny rowlandpenny at googlemail.com
Fri Nov 28 14:55:52 MST 2014


On 28/11/14 20:30, jacek burghardt wrote:
> I had setup samba that I wan to use domain controller. I setup some shares
> on it and now I am struggling to allow guest access to shares. I have other
> samba server that is joined to server 2012 domain controller and I can
> share folder with guest no problem. How do I add guest user to samba domain
> ?
> [global]
>          workgroup = hebe
>          realm = hebe.us
>          netbios name = zafire
>          server string = %h ArchLinux Host
>          security = ads
>          encrypt passwords = yes
>          password server = zafire.hebe.us
>          guest account = guest
>          map to guest = Bad Uid
>          idmap config * : backend = rid
>          idmap config * : range = 10000-20000
>          idmap config SHORTDOMAINNAME:backend = ad
>          idmap config SHORTDOMAINNAME:schema_mode = rfc2307
>          idmap config SHORTDOMAINNAME:range = 500-40000
>
>          winbind use default domain = Yes
>          winbind enum users = Yes
>          winbind enum groups = Yes
>          winbind nested groups = Yes
>          winbind separator = +
>          winbind refresh tickets = yes
>          winbind nss info = rfc2307
>
>          template shell = /bin/bash
>          template homedir = /home/%D/%U
>          domain master = yes
>          preferred master = yes
>          domain logons = yes
>          dns proxy = no
>          wins server = zafire.hebe.us
>          wins proxy = no
>
>          inherit acls = Yes
>          map acl inherit = Yes
>          acl group control = yes
>
>          load printers = no
That smb.conf appears to be half member server and half PDC, If you want 
it to be a member server have a look here:

https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server

If you want it to be a PDC, see here: 
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html

Rowland



More information about the samba mailing list