Acccess Samba-3 Share on WinXP

jsun9 · 07-20-2004, 06:51 PM

I setup Winbind using the Samba-3 HowTo Reference book (pg385) and I can get the entire list of Windows 2000 Domain users using the wbinfo -u command.

Now my question is now what do I do to create a share on the linux box using the users from the Windows 2000 domain?

I'm creating a simple file server with which all I want to do is share a simple folder on it and have domain users access it.

I can setup a share, but I can't give it domain\user level permissions. How do I do that?

Finlay · 07-20-2004, 09:44 PM

samba 3 can't participate in an active directory domain yet. it can see it and read it, but not use it.
you have to make sure the workgroup in samba is the same as the domain name. then create linux users with identical names as their windoze names. then 'smbpasswd -a user' and set their password the same as their windoze passwords, after that you can create shares using the user name. There may be another way, but i'm sure it is involved....sql and fun stuff like that.

jsun9 · 07-21-2004, 09:19 AM

Quote:

"We divide the unified logon problem for UNIX machines into three smaller problems:
• Obtaining Windows NT user and group information.
• Authenticating Windows NT users. 342 Winbind: Use of Domain Accounts Chapter 20
• Password changing for Windows NT users.
Ideally, a prospective solution to the unified logon problem would satisfy all the above
components without duplication of information on the UNIX machines and without creating
additional tasks for the system administrator when maintaining users and groups on either
system. The Winbind system provides a simple and elegant solution to all three components
of the unified logon problem.

The Samba HowTo states otherwise.

Finlay · 07-21-2004, 10:01 AM

"As of the release of MS Windows 2000 and Active Directory, this information is now stored in a directory that can be replicated and for which partial or full administrative control can be delegated. Samba-3 is not able to be a Domain Controller within an Active Directory tree, and it cannot be an Active Directory server. This means that Samba-3 also cannot act as a Backup Domain Controller to an Active Directory Domain Controller."
http://us1.samba.org/samba/docs/man/...html#id2520016