samba - Aug 1998 - Samba and authentication

Hello dear list-members !


Scenario: 
Security is set to server and points to our NT DC's in the domain

a) User A has an account in the Domain and request a share, he will be
authenticated against the NT DC'S, this is ok ....
b) User B has NO account in the Domain and requests a share, he will be
rejected by the DC's

One short question:

Is it possible for samba to fallback to a UNIX account (smbpasswd) for
USER B ?

This question results out of a problem we have in our environment: we
have users migrated in another non-trusted NT Domain which should access
their old files on our Domain ... if there is someone who has another
idea to solve this problem please tell me ...

Regards from Germany

Axel Kunze

Kunze, Axel (Fa. SUN) wrote:
> 
> Hello dear list-members !
> 
> Scenario:
> Security is set to server and points to our NT DC's in the domain
> 
> a) User A has an account in the Domain and request a share, he will be
> authenticated against the NT DC'S, this is ok ....
> b) User B has NO account in the Domain and requests a share, he will be
> rejected by the DC's
> 
> One short question:
> 
> Is it possible for samba to fallback to a UNIX account (smbpasswd) for
> USER B ?
> 
One very vague idea is to use substitution. E.g. put something like

  include = /usr/local/lib/smb.auth/%S

in global section, and put

  security = user

in these files for non-NT users. It *may* even be possible to use

  security = server
  include = ...

so, that the second will override the first if include file exists. You
will have to do it for every user.

greetings

-- 
===========================================================Andrej Borsenkow 	
Fax:   +7 (095) 737 2723
SNI ITS Moscow			Tel:   +7 (095) 737 2747

NERV:  borsenkow.msk		E-Mail: borsenkow.msk@sni.de
============================================================