[Samba] use linux user account information on samba

[David Bear]

On Sat, Mar 12, 2016 at 11:44 PM, Michael Stockenhuber <mcs at catalysis.at>
wrote:

> Hi,
>
> Now if I do:
> smbclient //server/netlogon -U"linux_user" -c 'ls'
> Enter Linux_user's password:
> Domain=[DOMAIN] OS=[Unix] Server=[Samba 4.1.17-Debian]
> tree connect failed: NT_STATUS_ACCESS_DENIED
>

This may be your problem. Running samba as an AD DC means that IT is the
authority for user principals. So you no longer use any 'user principals'
that would have existed in /etc/passwd -- you use the users that exist in
the domain control data base --

>
>                 46672 blocks of size 524288. 20658 blocks available
>
> On question 4, I use a separate ldap server which also serves nfs4.
> Any ides?
>

As long as the username/password used in smbclient exists in the AD DC this
will work.

As for as seaprate ldap -- this will be problem. Since Active Directory was
designed to be THE ONE and ONLY Authentication/Authorization system it
provides its own LDAP and Kerberos. I"m not sure how you would use a
separate LDAP


-- 
David Bear
mobile: (602) 903-6476