Hi all, that's my first post in this mailing list. I'm looking for a very special and strange samba configuration (at least from my point of view and my experience) and I'm not sure it is possible to reach this goal. Anyway, this is my request: I'm running a M$ Windows 2003 Serve as PDC with Active Directory and file server, and I would like to configure in a Linux machine a directory shared either from some domain's user or from some samba (only, not domain's user) users. In your opinion is it possible? This request is due to the need to let some files available to some external agents when they visit our offices, but I don't want to give them a Domain account to avoid let them able to browse others shares in the windows file server. So, if it is possible to set up a machine where I can authenticate either domain's user or not domain's user I solved my problem in a easy a clean way. Any idea about? Thanks a lot for your help Roger
Favero Roger skrev:> Hi all, > > that's my first post in this mailing list. I'm looking for a very > special and strange samba configuration (at least from my point of view > and my experience) and I'm not sure it is possible to reach this goal. > > Anyway, this is my request: > > I'm running a M$ Windows 2003 Serve as PDC with Active Directory and > file server, and I would like to configure in a Linux machine a > directory shared either from some domain's user or from some samba > (only, not domain's user) users. In your opinion is it possible? > > > > This request is due to the need to let some files available to some > external agents when they visit our offices, but I don't want to give > them a Domain account to avoid let them able to browse others shares in > the windows file server. So, if it is possible to set up a machine where > I can authenticate either domain's user or not domain's user I solved my > problem in a easy a clean way. > > > > Any idea about?If I understand you correctly, you just need a standalone Samba server? Only accounts that are *not* in your PDC will access it? If that's your goal, it's easy, just set up the Samba server as stand-alone, and do not join it in the domain. Then you manage all access on that Samba server locally. Anders.
I think you have 2 alternatives: 1 - configure this samba server out of your ad and create a thrusted relationship allowing users from you ad domain access to this share. 2 - Configure your samba as a domain member of you ad comain and configure a user in you ad with restricted access and give him access to this share. Hope it helps, Bruno Gimenes Pereti OBS.: Antes de imprimir este e-mail, pense em seu compromisso com o Meio Ambiente. "Essa mensagem ? destinada exclusivamente ao seu destinat?rio e pode conter informa??es confidenciais, protegidas por sigilo profissional ou cuja divulga??o seja proibida por lei. O uso n?o autorizado de tais informa??es ? proibido e est? sujeito ?s penalidades cab?veis." "That information is confidential, protected by a professional privilege or which disclosure is prohibited by law. Unauthorized use of such information is prohibited and subject to applicable penalties."> -----Mensagem original----- > De: samba-bounces+pereti=ump.edu.br@lists.samba.org [mailto:samba- > bounces+pereti=ump.edu.br@lists.samba.org] Em nome de Favero Roger > Enviada em: ter?a-feira, 24 de julho de 2007 07:36 > Para: samba@lists.samba.org > Assunto: [Samba] domain or not domain? > > Hi all, > > that's my first post in this mailing list. I'm looking for a very > special and strange samba configuration (at least from my point of view > and my experience) and I'm not sure it is possible to reach this goal. > > Anyway, this is my request: > > I'm running a M$ Windows 2003 Serve as PDC with Active Directory and > file server, and I would like to configure in a Linux machine a > directory shared either from some domain's user or from some samba > (only, not domain's user) users. In your opinion is it possible? > > > > This request is due to the need to let some files available to some > external agents when they visit our offices, but I don't want to give > them a Domain account to avoid let them able to browse others shares in > the windows file server. So, if it is possible to set up a machine where > I can authenticate either domain's user or not domain's user I solved my > problem in a easy a clean way. > > > > Any idea about? > > > > Thanks a lot for your help > > Roger > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: lists.samba.org/mailman/listinfo/samba