CIFS Server- How to make the HP 11.00 Server as Primary Domain Controller ?

[Kat Parkison]

Dear Samba/CIFS Gurus ,

I have a HP-UX server qith OS HP-UX 11.00 and I have loaded the CIFS/9000 Server and Client on that. CIFS/9000 and Samba are one and the same.

I would like to make that HP Server as "Primary Domain Controller". I read that it's possible. But there is very little information on this aspect in the CIFS and Samba Documentation.

Can anybody please provide some useful information on this (i.e Making HP-UX 11.00 Server as Primary Domain Controller).

Thanking you all in advance.
Regards.
-Shashi
Email - shashi.divekar@philips.com

[Rainer von Bongartz]

Samba cannot be a primary domain controller. whatever you have read is wrong.

The only HP product for UNIX that can implement a PDC is ASU/9000 which will not be supported by HP in the future (replacing ASU/9000 with CIFS/9000 is a great drawback).

HP tries to promote an equivalent product which is not equivalent at all but which costs no license fees to Bill Gates.
(AS/U contains official microsoft code)

Thel ASU CIFS migration guide states:

ASU/9000 CIFS/9000

Can assume the role of a PDC in an not
NT domain for Windows NT servers, supported
LAN Manager for Unix servers, LAN
Manager for OS/2 servers


This is one of the reasons why CIFS/9000 isn't a product really.

[John Poff]

Hi,

I use Samba quite a bit, but I haven't (yet) configured it as a PDC. There is some documentation about it, though.

Go to the Samba web site, ( http://samba.org/samba/ ) select your favorite mirror, and go to Documentation. There is a Samba 2.0.7 PDC how to guide, which is kind of old. The newer version of Samba handles being a PDC much better. Here are some notes from the web site:



Version of Samba prior to release 2.2 had marginal capabilities to act as a Windows NT 4.0 Primary Domain Controller (PDC). The following functionality should work in 2.2:


domain logons for Windows NT 4.0/2000 clients

placing a Windows 9x client in user level security

retrieving a list of users and groups from a Samba PDC to Windows 9x/NT/2000 clients

roving (roaming) user profiles

Windows NT 4.0 style system policies

The following pieces of functionality are not included in the 2.2 release:


Windows NT 4 domain trusts

SAM replication with Windows NT 4.0 Domain Controllers (i.e. a Samba PDC and a Windows NT BDC or vice versa)

Adding users via the User Manager for Domains

Acting as a Windows 2000 Domain Controller (i.e. Kerberos and Active Directory)



JP

[Vincent Stedema]

Hi,

The samba version used by CIFS is 2.0.7, so you should look into the documentation for this specific version. Samba 2.0.7 supports domain logons for Win 9x/NT clients, domain logons from Win 2000 clients won't work because Microsoft changed the SMB implementation.

Here are a few parameters that need to be set if you want your system to support domain logons:

os level = 65 # system will win all elections
security = user
domain logons = true
domain master = true
preferred master = yes

Also, you might want to preload the domain master on the client from C:\WINDOWS\LMHOSTS by adding the following entry to the file:

#PRE #DOM:

Replace the <> keywords with the information specific to your configuration.

HTH.

Regards,

Vincent