Greetings, I was reading over the documentation online for using SAMBA as a PDC, and in the section about creating machine trust accounts is talks about having to add machine accounts to the /etc/passwd file. The text also mentions that future versions of SAMBA will remove this requirement: "Because Samba requires machine accounts to possess a UNIX uid from which an Windows NT SID can be generated, all of these accounts must have an entry in /etc/passwd and smbpasswd. Future releases will alleviate the need to create /etc/passwd entries." Since the text was last updated in July of 2001, and there have been several releases of SAMBA since, is the /etc/passwd account for machine trust accounts still required in 2.2.3a? Thanks, Matthew
> Greetings, > > I was reading over the documentation online for using SAMBA as a PDC, and > in the section about creating machine trust accounts is talks about having > to add machine accounts to the /etc/passwd file. The text also mentions > that future versions of SAMBA will remove this requirement: > > "Because Samba requires machine accounts to possess a UNIX uid from which > an Windows NT SID can be generated, all of these accounts must have an > entry in /etc/passwd and smbpasswd. Future releases will alleviate the need > to create /etc/passwd entries." > > Since the text was last updated in July of 2001, and there have been > several releases of SAMBA since, is the /etc/passwd account for machine > trust accounts still required in 2.2.3a?Yes (without being a samba team member) Christian> > Thanks, > Matthew > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >_(_)_ wWWWw _ @@@@ (_)@(_) vVVVv _ @@@@ (___) _(_)_ @@()@@ wWWWw (_)\ (___) _(_)_ @@()@@ Y (_)@(_) @@@@ (___) `|/ Y (_)@(_) @@@@ \|/ (_)\ / Y \| \|/ /(_) \| |/ | \ | \ |/ | / \ | / \|/ |/ \| \|/ jgs|// \\|/// \\\|//\\\|/// \|/// \\\|// \\|// \\\|// ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Since the text was last updated in July of 2001, and there have been > several releases of SAMBA since, is the /etc/passwd account for machine > trust accounts still required in 2.2.3a?Yes. (The account is created for you if you supply the root username and password when prompted by a Windows client that you are joining to a domain.)
At 06:36 PM 2/27/2002 +0000, Steven Mackenzie wrote:> > Since the text was last updated in July of 2001, and there have been > > several releases of SAMBA since, is the /etc/passwd account for machine > > trust accounts still required in 2.2.3a? > >Yes. > >(The account is created for you if you supply the root username and password >when prompted by a Windows client that you are joining to a domain.)I'm confused by your comment. The HOW-TO for using SAMBA as a PDC says that I have to create machine trust accounts either 1. manually, or 2. on the fly by adding something similar to this in my smb.conf: add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u It also says that I must include a "root" user in my smbpasswd file and suggests a password that is different from the real root password. Are you saying that SAMBA takes care of all these details now? Also, if it makes any difference, the client(s) I'm trying to add are XP. Thanks, Matthew
Matthew Hagerty wrote:> > Greetings, > > I was reading over the documentation online for using SAMBA as a PDC, and > in the section about creating machine trust accounts is talks about having > to add machine accounts to the /etc/passwd file. The text also mentions > that future versions of SAMBA will remove this requirement: > > "Because Samba requires machine accounts to possess a UNIX uid from which > an Windows NT SID can be generated, all of these accounts must have an > entry in /etc/passwd and smbpasswd. Future releases will alleviate the need > to create /etc/passwd entries." > > Since the text was last updated in July of 2001, and there have been > several releases of SAMBA since, is the /etc/passwd account for machine > trust accounts still required in 2.2.3a?My 'non unix accounts' feature removes this requirement in HEAD, but 2.2 is still stuck in the stone age :-). Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net
> > Since the text was last updated in July of 2001, and there have been > > several releases of SAMBA since, is the /etc/passwd account for machine > > trust accounts still required in 2.2.3a? > > Yes. > > (The account is created for you if you supply the root username and password > when prompted by a Windows client that you are joining to a domain.)But only if you have set up an approprieate "add user skript" in smb.conf. Other wiese this will only create the machine account in private/smbpasswd an the machine account in /etc/passwd has to exist first. Christian _(_)_ wWWWw _ @@@@ (_)@(_) vVVVv _ @@@@ (___) _(_)_ @@()@@ wWWWw (_)\ (___) _(_)_ @@()@@ Y (_)@(_) @@@@ (___) `|/ Y (_)@(_) @@@@ \|/ (_)\ / Y \| \|/ /(_) \| |/ | \ | \ |/ | / \ | / \|/ |/ \| \|/ jgs|// \\|/// \\\|//\\\|/// \|/// \\\|// \\|// \\\|// ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^