[Samba] SMB share access for machines which are not joined to the domain?

Rowland penny rpenny at samba.org
Tue Jun 25 20:28:36 UTC 2019

On 25/06/2019 21:07, Goetz, Patrick G via samba wrote:
> On 6/25/19 12:57 PM, Gregory Sloop via samba wrote:
>> Hmmm...
>> Use the netbios name, instead of a FQDN, perhaps?
>> i.e.: \\cns-bio-krak1\emtifs
>> [I'm assuming the NB name. If I'm wrong, correct it.]
>> I know I've done this with Windows DC shares, and I'm 99% certain I've done it with FreeNAS acting as a domain member. [Samba domain member.]
> I didn't include these examples, but we tried both the NETBIOS name and
> the IP address of the Samba server; neither worked.
> I am still unclear on this and would love to get clarification:  Forget
> about sssd.  If I run winbind, can I mount SMB shares from a domain
> member to a non-domain machine using a domain user account?  If so, I
> can try setting up a "pure Samba" machine which NFS mounts the
> appropriate directories and then SMB shares them to the non-domain hosts.

yes, lets forget sssd, forever ;-)

No, you cannot mount a share from a domain member to a non-domain 
member, because the domain user will not exist on the non-domain 
machine, but you can connect from a non-domain member to a domain member 
using a domain user & password.

If you setup a standalone server, you can connect to a share on a domain 
member using domain credentials, you can probably do it the other way 
round, but you would have to use credentials from the standalone server.


More information about the samba mailing list