Sorry, but this is a mixed Linux/Windows question.

I am making a study whether it is feasible to buy and roll out a new accounting software application for our administration dept.

This software needs a Windows 2003 server + MsSQL server to run on. Users who wish to use the client software must belong to the same domain as the server. There are only 5 users who need access to this domain and use the client software.

My main file server is running Linux with Samba though. I want these 5 users to be able to be a member of the new domain NEWDOMAIN, but also be able to access the Linux file server through Samba.

All my other users must be able to be authenticated by the Samba server so they can access the files on the Linux server.

In that case, I could tell Samba to authenticate each other user on the Win 2003 server. But would that require a CAL (Client Access License) on the Win 2003 server for each user? Not sure about it, because the only thing Samba does is asking "is this user/pwd valid?"

Maybe I could also create a separate domain for the Linux environment, and make the Samba server PDC for LINUXDOMAIN. All other users are authenticated by the Samba PDC. Howver, can those 5 users, being member of MYDOMAIN also see the shared drives on LINUXDOMAIN? Is that feasible? I would accept the additional task of maintaining two different logon domains and maintaining dual passwords in both domains for the 5 administrative users.

Sorry to ask the obvious, my experience stops at WinNT 4.0. I am using Samba both as PDC and member of the NT 4.0 domain, but I understand that things like Active Directory have emerged and that Primary Domain controllers etc do not exist anymore. And WinNT 4.0 was not picky about client licences etc.

Thanks for any light.

jlinkels

Hi -

You're actually asking a couple of separate questions here:

a) What are the licensing issues in a mixed Samba/Active Directory environment? Here is a good link (one of many):
http://forums.technet.microsoft.com/...-a6e471181a81/

b) How do I reliably use Samba shares without those annoying "authentication errors" in my mixed Samba/Active Directory environment?

It doesn't sound you've actually run into any specific technical problems yet; it sounds like you're considering network design ideas regarding question "a)". If so, the short answer is: you've got lots of options; I wouldn't worry too much about it. Again, I hope the MS Technet link helps.

Your .. PSM

I'm just curious why you are creating an whole new domain just for 5 people and an accounting application.. why not just join the w2k3 server to the existing domain.. Typically w2k3 includes at least 5 CALs when you purchase it

Paulsm4: Thanks, I'll check that. I hope my browser is able to display Technet pages

Farslayer: I was told that NT4.0 domains and AD Domains were not compatible. It seems that the concept of PDC/BDC doesn't exist anymore. If that had still existed, I would have built a Samba PDC and add the new server simply to that domain. Tell me good news and say that I still can do that

But I have to read that Technet page first before I start assuming things.

jlinkels

It looks like a samba 3.0 machine can be a member server in a 2003 ADS domain, but you are right Samba can not entirely emulate an ADS domain.. Durn proprietary protocols etc... :/

Looks like I was mistaken..