samba - Mar 2005 - Authentication via both domain controller and local Sambapassword file

Try setting auth methods = sam winbind. IIRC when in domain
authentication auth methods does not include users in the local sam, but
my knowledge could be based upon an older version of samba, so you'll
have to try it out.

		-Marc
> -----Original Message-----
> From: samba-bounces+marc_kaplan=adaptec.com@lists.samba.org
[mailto:samba-
> bounces+marc_kaplan=adaptec.com@lists.samba.org] On Behalf Of Juer Lee
> Sent: Tuesday, March 01, 2005 12:46 AM
> To: samba@lists.samba.org
> Subject: [Samba] Authentication via both domain controller and local
> Sambapassword file
> 
> Hi Guys,
> 
> 
> 
> Does anybody know that if Samba is able to authenticate the user via
both
> domain controller and local Samba password file when the Samba is
running
> under 'Domain' mode??
> 
> 
> 
> The test steps:
> 
> 1. Add some Samba users when the Samba is configured running under
'User'
> mode, then the share is accessible by those added users.
> 
> 2. Try to join the Samba a Windows 2000 domain, then the user logs
into
> the
> domain can access the share.
> 
> 
> 
> My question is:
> 
>          Can the user created in step 1 can still access the share?
> 
> 
> 
> I have done the test on Samba 3.0.7 and Samba 3.0.11, the answer is
'No'.
> But I do remember that the share can be accessed by both domain user
or
> local Samba user in this case in earlier Samba 3.0.x than 3.0.
> 
> 
> 
> Thanks in advance,
> 
> Juer
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kaplan, Marc wrote:
| Try setting auth methods = sam winbind. IIRC
| when in domain authentication auth methods
| does not include users in the local sam, but
| my knowledge could be based upon an older
| version of samba, so you'll have to try it out.

your memory is off a little Marc :-)
The default in security = domain is set to
'guest sam winbind:ntdomain'.  This issue is that the
'sam' method will only handle those requests that
match the SERVER\user format.  An explicit

	net use * \\server\share /user:SERVER\user

will connect using a local account from smbpasswd.









cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCJKhHIR7qMdg1EfYRAmLnAJ0f4ShLTJ4fzcScW34tlng4fkojTgCeLDV4
V9IPvagjkqGLNMq4Y5JOhNA=GMv5
-----END PGP SIGNATURE-----