[Samba] design question for small environment

[L.P.H. van Belle]

If you make sure the loginnames and password as the same on both domains. 

Then its just. 

net use k: \\FQDN\SHARE /user:DOM1\%username% 
net use l: \\FQDN\SHARE /user:DOM2\%username% 

At least that is what i do here. 
You can do more, open CMD box, run type: set 
You an use all these variables.

net use m: \\FQDN\SHARE /user:%USERDOMAIN%\%username% 
Or
net use n: \\FQDN\SHARE /user:%username%@%USERDNSDOMAIN%

And i've disabled password changes for the time until im able to remove that old domain. 

You can set it with the persistance but i had more problem with that then above. 
If a password changes occurs, then the drive with persistant connections is failing. 

And why VB script, you can set it in you GPO also. 


Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: dinsdag 18 september 2018 15:27
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] design question for small environment
> 
> Am 10.09.18 um 12:35 schrieb Stefan G. Weichinger via samba:
> > Am 10.09.18 um 11:12 schrieb Rowland Penny via samba:
> > 
> >> Hi Stefan, I would set up a small AD domain, one DC, and 
> turn the two
> >> original servers into Unix domain members and then use kerberos.
> >>
> >> I cannot think of any other way of not using passwords.
> > 
> > I won't get a third server for doing so. It could be a VM 
> or container, 
> > though.
> > 
> > For now we discussed simply editing the batchfile to not 
> contain the 
> > passwords and the users have to enter their (strong) pw at 
> connection time.
> > 
> > Maybe set "/persistent: no" as well.
> > 
> > This would improve things, no readable passwords on the 
> client anymore.
> 
> I am currently cut-and-pasting a vbs script together, that 
> prompts for 
> user/password (as the thin client is member in another 
> domain) and maps 
> a network drive using these creds ...
> 
> Good scripts/examples welcome here ;-)
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>