samba setup

[Mohd Rasidi Che Mat]

Hi,
i've managed to setup samba share in hpux with "security = domain". However I'm not sure if this is correct as i need to manually create samba id & passwd at samba server. shouldn't the id & passwd obtained from domain credentials? if domain passwd changed, will it be reflected at samba?

1. create id in unix the same with windows domain id.
2. add the id in /etc/opt/samba/smb.conf as “valid users”.
3. create samba passwd for the id same with windows domain passwd:
# /opt/samba/bin/smbpasswd –a new_unix_id
4. add “host allow” in smb.conf for workstation used by user to access samba share.

[Horia Chirculescu]

Hello,

From:

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html

I quote:

"Currently, domain security in Samba does not free you from having to create local UNIX users to represent the users attaching to your server. "


Horia.

[Horia Chirculescu]

You had 2 questions:
1: >at samba server. shouldn't the id & passwd obtained from domain credentials? if domain

2: >passwd changed, will it be reflected at samba?

The answer is NO to both of those.
At least not in the current implementation of SAMBA. Re-read the passage I have quoted above.

Horia.

[Cesare Salvioni]

hi there.

1. setting security=domain is not enough, u must also join the domain with command:

/opt/samba/bin/net rpc join

it would ask u the administrator password, as a alternative u can create a host with the name as the hpux box on the domain controller checking the box windows 2000 domain. In this way it will not ask u the password

once u join the domain u can check with same command with argument testjoin

Once u have join the domain, the domain controller will authenticate username and password, so changing the password on the pc will effect also connecting the samba resource BUT u still must map the windows username to a unix username, u can create same username in the passwd file with * password or, if username is longer then 8 char, use the mapping file in smb.conf, in this file put something like:

= \

If u wan to get uid from the domain controller samba is not enough, u must also configure the ldap client on the unix box, but that's another story

hope it helps

[Mohd Rasidi Che Mat]

thanks.
btw, join domain done previously.