Samba domain trusting NT domain

[federico_3]

We are new to CIFS/9000. We have our company wide WinNT domain, call it DOMB, and a domain DOMA where our Samba machine is. DOMA should be configured to trust DOMB.

How should I configure my smb.conf for this scenario? What do I do for the long usernames (longer than 8 characters)?"


federico

[Magdi KAMAL]

Hi federico,

1. Configer your samba server to be a member of the NT domain.
2. You may ask your NT doamin guys to build a global group users ( ggUsers ) for you.
3.In samba, create a local group users (lgUsers).
4.Put the global group users ( ggUsers ) into the local group users ( lgUsers ).
5.Define shares and resources for the new added local group users (lgUsers).
6. Assign permissions to the local group ( lgUsers ).


Magdi

[Vibert Hart]

I am asuming you have this long name problem, because you are running in untrusted mode.

The parameters security = server and "password server" = should be set, to allow the authentication to be done by the PDC.

Regards
Vibert

[Vincent Fleming]

According to www.samba.org, the current releases of samba (prior to 3.0) don't support trust relationships between domains. I'm unsure what version CIFS/9000 is, but I do know that HP has tweaked it.

There's lots of really good info on www.samba.org, and it's searchable. You should take a look. There are also USENET groups dedicated to this.

Good luck!