similar to: Local groups confusion

Hi people: I've been using Samba for a long time with some "basic" features like Samba working as a PDC, integrated with OpenLDAP, being a print server, among others, for a small number of "almost controlled" users (no more than 30 or 50 users). But now I'm interested to implement a Windows domain using Samba for a University with 6000-8000 users distributed through

Andrew Barlett wrote: > > Domain trusts (in terms of us being a PDC trusting other DCs) are > currenetly a work in progress. We hope to have it finished for Samba > 3.0. > > However, why do you need domain trusts? (There are lots of > good answers > to this question, but make sure you do have one of the answers). > > Samba 2.2 has always supported being a member

Yes, this would be possible; 1. Vampire your accounts on to a new Samba DC 2. Disconnect it from network 3. Denote your NT Dc's 4. Rejoin them to the Samba Domain NOTE: As the other person said, while possible, this would be a bitch of a job. You said you need to maintain your NT server anyway, why not just put the files and printers and what not on samba and leave the user accounts to

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that

hi, it's me again =) i'm using openldap v2.2 and samba v3(.0.4) i wonder, if i don't use winbind, do i really need the parameter "idmap backend = " in smb.conf on PDCs/BDCs ??? those machines find their SID/UID/GID via "passdb backend =" don't they? thx -- "Matrix - more than a vision"

hi, until now (about 1 year ago) i was working only with samba3+ldap PDC, but in near future my company enlarge his network with 6 new branchs spreaded all oever the country and i must build a scalable network with Samba-3 PDCs and BDCs, implement LDAP replication and multiple LDAP backends, all this over some VPNs(ipsec) . so, can tell me anyone how work the relationship beetwen a samba3-ldap

Hello, At my school, the Domain logons are handled for all students through a collection of Domain Controllers. Our WebTeam maintains a Linux server, and in the past has had it set up as a Samba PDC through which they can log in and access their files on the webserver through shares. The webteam no longer uses Windows 98 computers, and has moved to XP computers. The problem here is that XP joins a

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

Steven Langasek wrote: > Having one PDC and two BDCs also gives you greater > fault-tolerance than > having three domains with a single PDC each. > > Samba+LDAP can give you this fault tolerance; it can't give you trust > relationships today, without a lot of finagling. > > Steve Langasek > postmodern programmer > Steve: I understand the role of/need for the

I asked the same questions Brian when we upgraded our network from a Novell NDS/Windows NT environment to Windows 2000 a couple of years ago. I thought it overly complex and expensive. Admittedly the Samba PDC emulation was not as advanced as it is now, but I could see nothing wrong with using a simple NT domain model and Samba PDCs as the customer had <100 users. The big arguments for were

Hi: Can anybody point me to some guidelines about SMB network design or give some advice? Samba HOWTOs are very detailed recipes, but I need some general tips, like if we are serving fish or pasta tonight :-) This is the situation: a WAN with 20 offices with 2 to 30 people in each, plus a headquarter with 50 people, plus the databases and central file servers. The organization grew up on a NT4

I apologize if this has been addressed in a past posting, but I couldn't find anything that answered my question in the archives. I'm looking to do a migration from WinNT4.0 Domain controllers to Samba 3.0 servers as Domain Controllers with LDAP. We have 3 NT domains (Red, Black, Green) in 3 separate sites with 2-way trusts between each Domain. We currently don't have LDAP in place

Hey gang, I've managed to get samba servers working as PDCs/BDCs with LDAP backend for replication. Working fine. Here's my problems: 1) A new machine will not join the domain on the first attempt. Apparently samba creates the machine account but can't authenticate it. I have attempt to join a second time for it to authenticate and succeed. This isn't that big of a deal,

I've got a somewhat special domain (servers only, no clients, for unified passwords stored in ldap and unix passwords are in there too), and I'm looking at my directory and there are a few things I don't quite understand, or that I need some clarification on.. 1) these "Domain Admins" and "Domain Guests" and "Domain Computers" groups.. do they NEED

Hi there, I would like to know how Samba / Windows determines which domain controller should handle a logon request, and whether there is a way I can affect the process. Here's the situation: I have a school installation running a Samba domain, with a PDC (1.1GHz Celeron, 256 MB RAM) and one BDC (much smaller, 366 with 64 MB RAM), both with RedHat 7.1 and Samba 2.2.5. There are about 80

Hi Igor, Once again, thanks for keeping up with me. I have been migrating my master ldap server to 2.1 version so to keep it the same with the PDCs version of LDAP. Now they are the same. I have rectified such that "wbinfo -u" on both sides worked now. I am made "net rpc trustdom list" worked. It was not working before. I had to put "stuadmin = root" in the

Dear Help, We are currently running Samba 3.0.22 on a distributed network/domain as a PDC (primary domain controller) and several as BDCs (Backup domain controllers) in our branch offices located around the country. At this point, the PDC is set up in our corporate office (where I'm located) and users have no trouble authenticating (via logging into windows and accessing shares) and also

Hey all, I'm looking to merge multiple NT4 domains into a single infrastructure based on Samba3 and OpenLDAP on Linux of the Debian Sarge flavour (and, Bob willing, Samba4 before long). In order to allow some resources to be shared from a single Linux instance, I'm rather hoping that I can put every domain's information into a single LDAP DIT. The Samba PDCs will use only portions of

Hi List(s) I'm in the process of configuring a new PDC using Samba 2.2.5. At the present time we have 9 other Samba PDCs in nonconnected sites. In the next few months, these sites will become part of a WAN and we're looking to migrate authentication for these servers to a single box, for obvious administration benefits. The client base is primarily Win2k, SP2 & SP3. Now I'm

Hola folks, After a few years of slowly phasing in various Linux and BSD platforms, the company I work for is willing to take a hard look at replacing its existing Windows NT domain controllers with a Linux/Samba combination. We only have about sixty people in our main office, but most of my experience is with smaller deployments. I'm not looking for step-by-step instructions, that's