similar to: Replacing a W2K Server?

Hello, my first post here :-), For several years, I are using samba 2.0 with local backend for windows stations and servers. NIS was our used for Linux stations and servers Now, LDAP /KERBEROS is replacing NIS and Samba (with ldap backend) will replace the local backend . My questions : 1- How can I migrate information form server1 (samba 2) to server2 (samba 3) ? I read the official Samba

Hi, i'm looking for this how-to, often referenced but no more available: https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap Is there anywhere an how-to about integrating Heimdal, Kerberos, Samba and OpenLdap? Thank you in advance Marcello

Hello all, We have Samba (2.2.5) running on three servers, each in a different subnet. One of them is a PDC (domain master = yes). The Samba PDC is also the NIS master. The smbpasswd is replicated using rsync to the other machines that act as Samba BDCs (domain master = no). They are also NIS slave servers. The smbpasswd synchronization takes place automatically every time smbpasswd is updated,

Hi, I am in dire need of some help. I have no problems connecting to shares with my W95/98 clients, but big problems with W2K. The same username / password is used on both the PC and SAMBA (and NIS - I am using Soalris 2.7 for my SAMBA server). When I try to connect to a share from the W2K client, I get the message "Access Denied". I have looked set nmbd / smbd to run at debug level 9

So like at least a handful of people before me I have begun the valiant stugle to unify logins at my place of business. I have setup a test LDAP + Kerberos V cluster. And I have Setup a test Samba 3 PDC. What I would like to do is get Samba to handle kerberos ticket granting and authentication to the (LDAP + Kerberos V) Directory. Such that Windows is completely unaware of the existence of

Okay, I'm at wit's end, and am about ready to give up on Samba 3.x as a way to implement single sign-on. I would like to know if there's anyone out there who has the following environment: - Solaris 8 and 9, running NIS (not NIS+) for automount and passwd/group maps - W2K-based Active Directory I'm trying to get Solaris authentication to work using AD user accounts. According to

Hello everyone, Can I use Ldap to authenticate against our W2K PDC? I have winbind working for Samba 2.2.8a - but the boss wants me to see about Ldap. If this is possible could you provide a starting point for me? I can use getent group to get a list of domain groups after I adjusted the /etc/ldap.conf By default Samba found our State Ldap server upon installation - I work for the State

Hello, I've been trying to figure out if it's possible to replace Active Directory with Samba (+ OpenLDAP, Kerberos, DNS etc.) on Linux - but from what I've found I'm not sure. Is it possible, or partially possible (I don't need every feature of AD)? What additional software (besides Samba) will I need? What functionality will I loose? Where can I find any

I might be missing obvious here, but here goes: Samba 2.2.4. Using "winbind use default domain = <DOMAIN>" option usernames map correctly, however, when logging on from an W2K machine I still get the autogenerated UID instead of my NIS (Or /etc/passwd) UID. Both nis and files precede winbind in /etc/nsswitch.conf Commenting out winbind from /etc/nsswitch.conf works, which

Please could a Samba developer or user answer these questions. Background: We use Samba for serving files, and it has worked extremely well in this simple mode for 20,000 plus users in this university for the previous 3/4 years. Thanks to all those involved for this excellent software. We are soon to implement Windows 2K and Active Directory as the university's primary authentication

I need to replace a Windows 2000 Server with a Samba box. The W2K is the only domain controller in the network and it runs Active Directory. I know the Samba-3 limitations as an Active Directory Domain Controller, but I don't need absolutely all the features. What I would ideally need is: * Single Sign On * .adm policy files support (for client security and use restrictions - clients are

Hi all, I got a new assignment today. My task is to install LDAP instead of NIS in our network, consisting of Solaris, Linux and W2k. Our actual setup is like this: Accounts are kept on a Solaris-server and served with samba and NFS. Two PCs serve as PDCs, running NOT samba on unix but a real W2k. Special MS-PAM-modules on the Solaris-server are used to synchronise accounts and passwords with

Hi. As I said... I will bother you. :) I'm wondering if it's possible to make samba as a primary domain controller without having samba passwords, but instead using my two KDCs (MIT K5). Is it possible? What should I use in my smb.conf? The wonderful and less painful thing is samba authenticating via pam... but I don't know how... the documentation is quite misty. -- Sensei

I think I've looked over every post that has acl or sid or winbind in it. I don't think this has been discussed quite this way. The symptom is similar to other posts but the environment is a bit different. We can do perms through samba, and we can see acls that have been set using setfacl, but we can't change the acls (e.g., add a user). We get: [2002/11/15 17:02:17, 0]

... Setting up a Samba PDC with the following: FreeBSD 5.3 Samba 3.0.x OpenLDAP 2.2.x Kerberos (Heimdal) Would like LDAP to take care of both posixAccount(s) and sambaSamAccount(s). Posix account via nsswitch+pam_ldap. Hope to find one complete documentation that describes this setup from scratch, start to finish. A Ports style install of all packages is fine but I can download, compile and

Hello. I am administrating about 30PCs with W2K and users are authenticated in SAMBA running as PDC on Linux. About 16PCs have the possibillity to boot also into Linux. I would like to authenticate also linux users using the samba, because I do not want to copy passwd, group, shadow each time I add a user, or even add the user on each PC. I do not use LDAP a do not know NIS. Is it possible to use

Hi. I use Samba 3.0.2-29 on Server S7. In our network is a W2K Server named S4 running in Native Mode, Domain Name hel.lan. I tried to join the S4-Domain hel.lan. s7:~ # kinit Administrator@HEL.LAN Administrator@HEL.LAN's Password: s7:~ # net ads join [2004/02/27 08:20:54, 0] libads/ldap.c:ads_add_machine_acct(1006) Host account for s7 already exists - modifying old account Using short

Hi. First, i would like to thank samba developers for producing such a good product. Second, i have a few questions/remarks : I have recently replaced a w2k file server running in w2k domain (native mode) with samba 2.2.7a on RH 7.3 with the latest kernel, no acl, configured winbind, and ran into the problem described here :

Hi, I am migrating from WinNT 4 to Samba 3 beta3 in a production environment. It would be nice to have some advice, because I don't know if Samba is ready for assuming this ;-) I never heard about any one that had something like this. This is kind of a big network so it will be 1 PDC (Samba) , 4 BDC's (Samba) and 2 File Servers (w2k). I will have a minimum of 800 machines and 2000 users

Hello- i have a difficult problem and need to solve it (hopefully) before next week when classes start over here. i looked around the lists and couldn't find anything similar to what we're doing. perhaps you can help. our plan in the school of engineering is to let users authenticate with their uci.edu accounts to our school systems on solaris and win2k. we're using pam_krb5 + nis