samba - Jan 2003 - auth. samba users against Win2K AD

Hi All,

	We have a mixed Win2K and Linux environment, and we run Samba 2.2.3a on
SuSE 8.0 Linux.  Assume you have users who have to access a share on Samba of
say /foo/bar, and the users are part of group 'somegrp' (they have 
permissions to
modify stuff in /foo/bar, btw).

Now, assume said users exist on Win2K AD, is there any way to get Samba to
authenticate against Win2K when they go for access to the the share, rather 
than
have to change passwords on both Samba and Win2k so that they match?

-Bill

> Message: 16
> Date: Thu, 16 Jan 2003 20:58:20 -0800
> To: suse-linux-e@suse.com
> From: Bill Parker <dogbert@netnevada.net>
> Cc: samba@lists.samba.org
> Subject: [Samba] auth. samba users against Win2K AD
> 
> Hi All,
> 
> 	We have a mixed Win2K and Linux environment, and we run Samba 2.2.3a on
> SuSE 8.0 Linux.  Assume you have users who have to access a share on Samba
of
> say /foo/bar, and the users are part of group 'somegrp' (they have 
> permissions to
> modify stuff in /foo/bar, btw).
> 
> Now, assume said users exist on Win2K AD, is there any way to get Samba to
> authenticate against Win2K when they go for access to the the share, rather
> than
> have to change passwords on both Samba and Win2k so that they match?
> 
Yes, join the machine to the Win2k domain (as root):
smbpasswd -j <DOMAIN> -U <Domain Admin account> -r <Domain
Controller>

You will still have to make the accounts. This you can get around using
Winbind ( try 'man winbindd' for more info).

Buchan


-- 
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7