How can I sync my nt domain password and samba passwords

[wvsa]

Good afternoon, we have samba (cifsclient & cifserver) running on our 11.0 servers. All is working well except for the passwords. Presently the users ntdomain passwords are different than the samba password on the server. Would like to have the nt domain password work on the unix servers as well. Have tried a couple of things but have not been successful. Anybody out there doing something like this? Thankyou in advance for your input.

[Mark Fenton]

Don't know how you have your security scheme set up, but if you set security to DOMAIN, then when a samba user is created and activated, samba will use the nt domain's security services.

hth

Mark

[Jonathan Baker]

If you have security set to user, the users can use the smbpasswd utility to set up their password to be the same as the NT one. For this to work you must also have encrypt passwords set to yes. See the documentation in /opt/samba/swat/using_samba for more complete info.

[Steve Lewis]

See thread

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa57142308663d611abdb0090277a778c,00.html

for potential issues with WINS policies.

You can use NT to do all the authentication if you set your security policy to DOMAIN and add your HPUX server to the domain on the PDC and BDC.

[Bram_2]

Another option is to let SAMBA use a NT domaincontroller to verify passwords. But its required to set the nt user and unix username alike.

Ofcourse when a user connects with telnet/ssh, thats another thing cause then only unix auth is been used.

I've been succesfully experimenting implementing Active Directory with LDAP authentication.
With some minor alterings to AD in win2k ,you can let any *nix box use that AD as an LDAP server to authenticate.
But it's still experimental :-)

[Eric Bursley]

In your smb.conf file, set your workgroup to the same name as your domain, and set authenication type to server, and give it the authenication server ip(which should be your NT Domain controller).
SWAT has a help file that covers how to configure this.

security = domain in Samba 2.x