I am trying to set up a windows Domain with Samba 2.2.8a and 2.2.7 on
Debian and Redhat systems (respectively). This network has two subnets,
so I have a samba server for each subnet, and they are configured to
pass netbios traffic to each other so both networks can be seen in
network neighborhood. I'm trying to expand this setup and create a
windows Domain that will work like this:
Two samba servers, A and B, that control users that log on to the PCs on
the domain. Each server has half of the users on it along with their
roaming profile and home directory. If a user whose account information
is located on server A logs into a machine in subnet A (which is
controlled by server A), then server A authenticates the user and serves
up his profile and home directory to be mapped. If the user logs into
subnet B (controlled by server B), then server B uses server A for
authentication and the users profile and home directory are served from
server A. Same thing for a user on server B.
I thought this could be accomplished by setting "security = server"
and
setting server A as a "password server" in server B's
configuration file
(and vice versa for server A), but that doesn't seem to work. In fact,
I can't get server B to use server A to authenticate even if server A is
using "security = user" and server B is using "security =
server".
I can see how this could be done with multiple NFS mounts on servers
(each mouthing the other's user's directories), but that seems really
messy and I don't think it would allow for the users to easily maintain
their passwords (they'd have to change their password on each server as
all users would have to exist on each server).
Is what I'm trying to do possible? Can someone help me figure out what
I'm doing wrong? Any help would be much appreciated.
Rob
