samba - May 2005 - Samba 3.0.14a, Windows 2k3 and ADS

Hi all

Thanks for everyones help so far with trying to get these all working.

I am now at the stage where I can logon to the domain and access a samba
share with out having to enter in a username password (i.e samba is using AD
to authenticate)

My system is setup like so:

Windows 2k3 PDC (so I get group policy features, bad password attempts,
account expiry etc)
Samba 3.0.14a on RH es3 linux FileStore ( peoples Home drive email etc )

Now I have a couple of questions...

1. I can use the net rpc add user command to add users, when I do this they
are disabled in windows AD, and ive been unable to find any documentation of
the -F switch (which is where I assume u can say if they are disabled, what
their home directory is, and where to map it etc)

2. In various howto's docs etc people talk about using samba as the pdc and
open ldap etc. Is the above system using LDAP ? i.e Windows 2k3 AD ? Or is
what I have using kerberos?

3. assuming im not using ldap, I have a script that currently runs every 15
mins and brings out a user,cryptpasswd list of my users and gives it out to
various services (such as .htaccess and squid)
Either by using ldap or another way, how is this possible to do? Since the
users are no longer on the linux box (locally)

Many thanks!

Ross

Ross,

You may find some useful info in the book "Samba-3 by Example" that
answers
your questions. It can be downloaded from:

http://www.samba.org/samba/docs/Samba-Guide.pdf


Cheers,
John T.

On Friday 13 May 2005 04:21, sysrm wrote:
> Hi all
>
> Thanks for everyones help so far with trying to get these all working.
>
> I am now at the stage where I can logon to the domain and access a samba
> share with out having to enter in a username password (i.e samba is using
> AD to authenticate)
>
> My system is setup like so:
>
> Windows 2k3 PDC (so I get group policy features, bad password attempts,
> account expiry etc)
> Samba 3.0.14a on RH es3 linux FileStore ( peoples Home drive email etc )
>
> Now I have a couple of questions...
>
> 1. I can use the net rpc add user command to add users, when I do this they
> are disabled in windows AD, and ive been unable to find any documentation
> of the -F switch (which is where I assume u can say if they are disabled,
> what their home directory is, and where to map it etc)
>
> 2. In various howto's docs etc people talk about using samba as the pdc
and
> open ldap etc. Is the above system using LDAP ? i.e Windows 2k3 AD ? Or is
> what I have using kerberos?
>
> 3. assuming im not using ldap, I have a script that currently runs every 15
> mins and brings out a user,cryptpasswd list of my users and gives it out to
> various services (such as .htaccess and squid)
> Either by using ldap or another way, how is this possible to do? Since the
> users are no longer on the linux box (locally)
>
> Many thanks!
>
> Ross
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.