samba - Jul 2007 - domain or not domain?

Hi all,

that's my first post in this mailing list. I'm looking for a very
special and strange samba configuration (at least from my point of view
and my experience) and I'm not sure it is possible to reach this goal.

Anyway, this is my request:

I'm running a M$ Windows 2003 Serve as PDC with Active Directory and
file server, and I would like to configure in a Linux machine a
directory shared either from some domain's user or from some samba
(only, not domain's user) users. In your opinion is it possible?

 

This request is due to the need to let some files available to some
external agents when they visit our offices, but I don't want to give
them a Domain account to avoid let them able to browse others shares in
the windows file server. So, if it is possible to set up a machine where
I can authenticate either domain's user or not domain's user I solved my
problem in a easy a clean way.

 

Any idea about?

 

Thanks a lot for your help

Roger

Favero Roger skrev:
> Hi all,
> 
> that's my first post in this mailing list. I'm looking for a very
> special and strange samba configuration (at least from my point of view
> and my experience) and I'm not sure it is possible to reach this goal.
> 
> Anyway, this is my request:
> 
> I'm running a M$ Windows 2003 Serve as PDC with Active Directory and
> file server, and I would like to configure in a Linux machine a
> directory shared either from some domain's user or from some samba
> (only, not domain's user) users. In your opinion is it possible?
> 
>  
> 
> This request is due to the need to let some files available to some
> external agents when they visit our offices, but I don't want to give
> them a Domain account to avoid let them able to browse others shares in
> the windows file server. So, if it is possible to set up a machine where
> I can authenticate either domain's user or not domain's user I
solved my
> problem in a easy a clean way.
> 
>  
> 
> Any idea about?
If I understand you correctly, you just need a standalone Samba server? 
Only accounts that are *not* in your PDC will access it?
If that's your goal, it's easy, just set up the Samba server as 
stand-alone, and do not join it in the domain. Then you manage all 
access on that Samba server locally.

Anders.

I think you have 2 alternatives:

1 - configure this samba server out of your ad and create a thrusted
relationship allowing users from you ad domain access to this share.

2 - Configure your samba as a domain member of you ad comain and configure a
user in you ad with restricted access and give him access to this share.
 

Hope it helps,

Bruno Gimenes Pereti

OBS.: Antes de imprimir este e-mail, pense em seu compromisso com o Meio
Ambiente.

"Essa mensagem ? destinada exclusivamente ao seu destinat?rio e pode conter
informa??es confidenciais, protegidas por sigilo profissional ou cuja
divulga??o seja proibida por lei. O uso n?o autorizado de tais informa??es ?
proibido e est? sujeito ?s penalidades cab?veis."

"That information is confidential, protected by a professional privilege or
which disclosure is prohibited by law. Unauthorized use of such information
is prohibited and subject to applicable penalties."
> -----Mensagem original-----
> De: samba-bounces+pereti=ump.edu.br@lists.samba.org [mailto:samba-
> bounces+pereti=ump.edu.br@lists.samba.org] Em nome de Favero Roger
> Enviada em: ter?a-feira, 24 de julho de 2007 07:36
> Para: samba@lists.samba.org
> Assunto: [Samba] domain or not domain?
> 
> Hi all,
> 
> that's my first post in this mailing list. I'm looking for a very
> special and strange samba configuration (at least from my point of view
> and my experience) and I'm not sure it is possible to reach this goal.
> 
> Anyway, this is my request:
> 
> I'm running a M$ Windows 2003 Serve as PDC with Active Directory and
> file server, and I would like to configure in a Linux machine a
> directory shared either from some domain's user or from some samba
> (only, not domain's user) users. In your opinion is it possible?
> 
> 
> 
> This request is due to the need to let some files available to some
> external agents when they visit our offices, but I don't want to give
> them a Domain account to avoid let them able to browse others shares in
> the windows file server. So, if it is possible to set up a machine where
> I can authenticate either domain's user or not domain's user I
solved my
> problem in a easy a clean way.
> 
> 
> 
> Any idea about?
> 
> 
> 
> Thanks a lot for your help
> 
> Roger
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba