topic Re: samba setup in Operating System - HP-UX

samba setup

Mohd Rasidi Che Mat — Thu, 18 Feb 2010 03:00:01 GMT

Hi,
i've managed to setup samba share in hpux with "security = domain". However I'm not sure if this is correct as i need to manually create samba id & passwd at samba server. shouldn't the id & passwd obtained from domain credentials? if domain passwd changed, will it be reflected at samba?

1. create id in unix the same with windows domain id.
2. add the id in /etc/opt/samba/smb.conf as “valid users”.
3. create samba passwd for the id same with windows domain passwd:
# /opt/samba/bin/smbpasswd –a new_unix_id
4. add “host allow” in smb.conf for workstation used by user to access samba share.

Re: samba setup

Horia Chirculescu — Thu, 18 Feb 2010 06:29:05 GMT

Hello,

From:

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html

I quote:

"Currently, domain security in Samba does not free you from having to create local UNIX users to represent the users attaching to your server. "

Horia.

Re: samba setup

Horia Chirculescu — Thu, 18 Feb 2010 07:58:29 GMT

You had 2 questions:
1: >at samba server. shouldn't the id & passwd obtained from domain credentials? if domain

2: >passwd changed, will it be reflected at samba?

The answer is NO to both of those.
At least not in the current implementation of SAMBA. Re-read the passage I have quoted above.

Horia.

Re: samba setup

Cesare Salvioni — Fri, 19 Feb 2010 00:00:35 GMT

hi there.

1. setting security=domain is not enough, u must also join the domain with command:

/opt/samba/bin/net rpc join

it would ask u the administrator password, as a alternative u can create a host with the name as the hpux box on the domain controller checking the box windows 2000 domain. In this way it will not ask u the password

once u join the domain u can check with same command with argument testjoin

Once u have join the domain, the domain controller will authenticate username and password, so changing the password on the pc will effect also connecting the samba resource BUT u still must map the windows username to a unix username, u can create same username in the passwd file with * password or, if username is longer then 8 char, use the mapping file in smb.conf, in this file put something like:

= \

If u wan to get uid from the domain controller samba is not enough, u must also configure the ldap client on the unix box, but that's another story

hope it helps

Re: samba setup

Mohd Rasidi Che Mat — Fri, 19 Feb 2010 01:20:16 GMT

thanks.
btw, join domain done previously.