Pankaj.C.Pimple at relianceada.com
2009-Nov-17 07:20 UTC
[Samba] Need help in samba configuration
We have ClearCase database on unix and users on windows.
We are creating Unix users locally on that Clearcase server. Samba is also
installed on that server.
User windows machines are part of domain. Groups,usres are created on
domain and same users,groups are created on unix server.
Now problem is occuring when a windows user is changing the password for
his domain login. as soon as user is changing the password user will be
unable to access the samba share i.e clearcase vobs. So when user changes
the domain login password we have to manully change samba password for
that user by running
smbpasswd <userbname>.
Could you please guide me on how to achieve or any configuration need to
done on samba and on unix server so that I need not have to change
password manully for every user when user changes his/her windows domian
login password.
My samba config fiel is as below
# Samba config file created using SWAT
# Global parameters
[global]
workgroup = RIC_F2K
netbios name = DEVVM
interfaces = devvm
security = DOMAIN
encrypt passwords = Yes
password server = 10.8.54.120
username map = /usr/local/samba/private/username.map
#username map = /usr/local/samba/lib/username.map
log file = /var/opt/samba/logs/log.%m
os level = 0
kernel oplocks = No
create mask = 0775
directory mask = 0775
oplocks = No
time offset = 30
# time offset = 630
# time server = yes
#[smbshare]
# comment = Share Folder of devvm Server
# path = /var/smbshare
The information contained in this e-mail message is intended only for the use of
the individual or entity to which it is addressed. If you are not the intended
recipient, you should return it to the sender immediately. Please note that
while we scan all e-mails for viruses we cannot guarantee that any e-mail is
virus-free and accept no liability for any damage caused by any virus
transmitted by this email.
Pankaj.C.Pimple at relianceada.com
2009-Nov-18 07:11 UTC
[Samba] Need help in samba configuration
Hi All,
I have now joined the domain using smbpasswd -j.
Could you please let me know how can I remove the join created above i.e I
want to unjoin the samba server amd domain how to do it and what are its
effects.
Can I join multiple domian from single samba server at the same time??
Thanks and Regards,
Pankaj C Pimple
Software Configuration Management,
Reliance Tech Services,B Block,DAKC,Navi Mumbai,India
Direct : +91 022 303 80153
Mobile : +91 9320023444
Pankaj C Pimple/RCOM/RelianceADA
17-11-09 12:50 PM
To
samba at lists.samba.org
cc
Subject
Need help in samba configuration
We have ClearCase database on unix and users on windows.
We are creating Unix users locally on that Clearcase server. Samba is also
installed on that server.
User windows machines are part of domain. Groups,usres are created on
domain and same users,groups are created on unix server.
Now problem is occuring when a windows user is changing the password for
his domain login. as soon as user is changing the password user will be
unable to access the samba share i.e clearcase vobs. So when user changes
the domain login password we have to manully change samba password for
that user by running
smbpasswd <userbname>.
Could you please guide me on how to achieve or any configuration need to
done on samba and on unix server so that I need not have to change
password manully for every user when user changes his/her windows domian
login password.
My samba config fiel is as below
# Samba config file created using SWAT
# Global parameters
[global]
workgroup = RIC_F2K
netbios name = DEVVM
interfaces = devvm
security = DOMAIN
encrypt passwords = Yes
password server = 10.8.54.120
username map = /usr/local/samba/private/username.map
#username map = /usr/local/samba/lib/username.map
log file = /var/opt/samba/logs/log.%m
os level = 0
kernel oplocks = No
create mask = 0775
directory mask = 0775
oplocks = No
time offset = 30
# time offset = 630
# time server = yes
#[smbshare]
# comment = Share Folder of devvm Server
# path = /var/smbshare
The information contained in this e-mail message is intended only for the use of
the individual or entity to which it is addressed. If you are not the intended
recipient, you should return it to the sender immediately. Please note that
while we scan all e-mails for viruses we cannot guarantee that any e-mail is
virus-free and accept no liability for any damage caused by any virus
transmitted by this email.
I have never tried "unjoining" a domain.
I think the approach would be to
1- update smb.conf to change security to user
2 - delete the SambaMachine account from your Windows PDC.
You can't me in more than one domain. however you can set up trusts
between windows and/or samba domains. (Although I haven't quite got
that working properly.)
-Damian
On 11/18/09 02:11, Pankaj.C.Pimple at relianceada.com
wrote:>
> Hi Gaiseric *,*
>
> Thanks for your help.
> I have now joined the domain using smbpasswd -j.
>
> Could you please let me know how can I remove the join created above
> i.e I want to unjoin the samba server amd domain how to do it and what
> are its effects.
> Can I join multiple domian from single samba server??
>
>
> Thanks and Regards,
> Pankaj C Pimple
> Software Configuration Management,
> Reliance Tech Services,B Block,DAKC,Navi Mumbai,India
> Direct : +91 022 303 80153
> Mobile : +91 9320023444
>
> For any CC/CQ queries please contact CM.HelpDesk at relianceada.com
>
>
>
> *"Gaiseric Vandal" <gaiseric.vandal at gmail.com>*
>
> 17-11-09 07:30 PM
> Please respond to
> <gaiseric.vandal at gmail.com>
>
>
>
> To
> <Pankaj.C.Pimple at relianceada.com>
> cc
>
> Subject
> RE: [Samba] Need help in samba configuration
>
>
>
>
>
>
>
>
>
> What happens if you use smbpassword to change a user's password (e.g.
from
> MyPassword1 to MyPassword2), and do not change the password via
> Windows. If
> the user then logs into a windows PC, does he use "MyPassword1"
or
> "MyPassword2?"
>
> What happens if you use "smbpasswd -R 10.8.54.120 ...." instead?
>
> It seems like you have created local "Windows" accounts on the
Samba
> server,
> so that when you connect to the samba share you are using the
> DEVVM\username credentials instead of the RIC_F2M credentials.
>
> The purpose of having a Windows or Samba machine as a member of the domain
> is so that you do NOT need to create accounts for each user on each domain
> member. (Typically a Windows or Samba domain member will still have a
> local
> Administrator account, and may have a local Users group and local
> Administrators group.) For Samba, you still need the local unix users and
> groups. All going well you shouldn't need to have all the domain users
in
> the usermap file- but it shouldn't hurt.
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: samba-bounces at lists.samba.org [mailto:samba-bounces at
lists.samba.org]
> On Behalf Of Pankaj.C.Pimple at relianceada.com
> Sent: Tuesday, November 17, 2009 2:20 AM
> To: samba at lists.samba.org
> Subject: [Samba] Need help in samba configuration
>
> We have ClearCase database on unix and users on windows.
> We are creating Unix users locally on that Clearcase server. Samba is
> also
> installed on that server.
>
> User windows machines are part of domain. Groups,usres are created on
> domain and same users,groups are created on unix server.
>
> Now problem is occuring when a windows user is changing the password for
> his domain login. as soon as user is changing the password user will be
> unable to access the samba share i.e clearcase vobs. So when user changes
> the domain login password we have to manully change samba password for
> that user by running
>
> smbpasswd <userbname>.
>
> Could you please guide me on how to achieve or any configuration need to
> done on samba and on unix server so that I need not have to change
> password manully for every user when user changes his/her windows domian
> login password.
>
> My samba config fiel is as below
>
> # Samba config file created using SWAT
>
>
> # Global parameters
> [global]
> workgroup = RIC_F2K
> netbios name = DEVVM
> interfaces = devvm
> security = DOMAIN
> encrypt passwords = Yes
> password server = 10.8.54.120
> username map = /usr/local/samba/private/username.map
> #username map = /usr/local/samba/lib/username.map
> log file = /var/opt/samba/logs/log.%m
> os level = 0
> kernel oplocks = No
> create mask = 0775
> directory mask = 0775
> oplocks = No
> time offset = 30
> # time offset = 630
> # time server = yes
> #[smbshare]
> # comment = Share Folder of devvm Server
> # path = /var/smbshare
>
>
>
> The information contained in this e-mail message is intended only for the
> use of the individual or entity to which it is addressed. If you are
> not the
> intended recipient, you should return it to the sender immediately. Please
> note that while we scan all e-mails for viruses we cannot guarantee
> that any
> e-mail is virus-free and accept no liability for any damage caused by any
> virus transmitted by this email.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
>
>
>
> The information contained in this e-mail message is intended only for
> the use of the individual or entity to which it is addressed. If you
> are not the intended recipient, you should return it to the sender
> immediately. Please note that while we scan all e-mails for viruses we
> cannot guarantee that any e-mail is virus-free and accept no liability
> for any damage caused by any virus transmitted by this email.