Good Morning/Afternoon/Evening.
I'm a bit dejected at the moment as all my googleing / howto reading has
brought me no joy,
Apparently there are people out there who have successfully set up Samba
as member server in M$ 2003 ADS.
However I have miserably failed / given up.
What I want to do is have my people print to a PDF printer on Linux using
cups after which they will be emailed the doc using a package called
Alambic.
It works pretty well however I need a username to send the email to as the
username is mapped to an email address in a config file.
Is there possibly another way of having my users connect to the Samba Box
with their domain user name ?
The requirement is a single sign on to the domain where they will not be
prompted to authenticate again to the Samba box.
Please any help will be appreciated,
Thanks
Nic
Ps. incase anyone is interested maybe I can still save the ADS project
I'm using Samba 3.0.2pre1
Kerberos 1.3.1
Here is Samba Config
[global]
workgroup = domain
realm = domain.co.za
security = ads
password server = 172.28.20.2
winbind use default domain = yes
client use spnego = yes
encrypt passwords = yes
server string = %L Print Server (%v)
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
printcap name = cups
load printers = yes
printing = cups
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins server = 172.28.20.2
dns proxy = yes
krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = DOMAIN.CO.ZA
default_tgs_enctypes = des-cbc-md5 des-cbc-crc
default_tkt_enctypes = des-cbc-md5 des-cbc-crc
permitted_enctypes = des-cbc-md5 des-cbc-crc
kdc_req_checksum_type = 2
checksum_type = 2
ccache_type = 1
forwardable = true
proxiable = true
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
DOMAIN.CO.ZA = {
kdc = server.domain.co.za
admin_server = server.domain.co.za
default_domain = DOMAIN.CO.ZA
}
[domain_realm]
.server.domain.co.za = DOMAIN.CO.ZA
server.domain.co.za = DOMAIN.CO.ZA
Following received in Winbind log
[2004/01/15 14:02:00, 1] libads/ads_ldap.c:ads_name_to_sid(64)
name_to_sid: root not found
[2004/01/15 14:02:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(960)
user 'root' does not exist
Following in Cleint log
