Quote:
Originally Posted by jschiwal
Which Windows XP is this? Microsoft removed domain support for XP Home. You will probably want to read the "Samba 3 by Example", "Using Samba" and maybe the "Samba 3 HOWTO & Reference Guide". Using Samba comes with Samba. Install the "samba-doc" package for the others. If you don't run "smbclient" to change a users password on the samba server, after they change it locally, you may need to configure samba as a Domain controller to enable network authentication. Then the users use the samba server for authentication when they log into their computer, rather than logging in locally. The Using Samba and Samba 3 by Example should step you through what you need to do in both Linux and windows.
Part of the equation is where the password hashes are stored for Samba users. If you have fewer than 20 users, you can use the smbpasswd file on the Samba server. This is the default. Other options include a samba password database, an ldap server or Windows AD server. You will porbably need to provide more information on the network you use presently. Are you adding a samba server to an existing network, or setting up a new network? What is used for authentication now?
|
==================================================================================================== =======================
Hi All,
I will crater one Samba Server with AD server 2008. Please check below configure step and it is working fine.......
SUSE Linux 11.3 Version
[global]
workgroup = PIL_EDP
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
logon path = \\%L\profiles\.msprofile
logon home = \\%L\%U\.9xprofile
logon drive = P:
usershare allow guests = No
idmap gid = 10000-20000
idmap uid = 10000-20000
security = ADS
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$
domain logons = No
domain master = Auto
local master = Yes
os level = 65
passdb backend = smbpasswd
preferred master = Yes
wins support = Yes
ldap admin dn = CN=Pilbradmin,OU=Kondivita Server,OU=IT,OU=Kondivita,OU=Pidilite,DC=pidilite,DC=net
# ldap delete dn = No
# ldap group suffix = ou=Groups
# ldap idmap suffix = ou=Idmap
# ldap machine suffix = ou=Machines
# ldap passwd sync = Yes
# ldap replication sleep = 1000
# ldap ssl = Start_tls
# ldap suffix = dc=pidilite,dc=net
# ldap timeout = 5
# ldap user suffix = ou=Users
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind nested groups = Yes
winbind separator = +
realm = PIDILITE.NET
template homedir = /home/%D/%U
template primary group = "Domain Users"
template shell = /bin/bash
usershare max shares = 100
winbind offline logon = yes
path = /home/Fileserver/
winbind refresh tickets = yes
create mask = 0600
directory mask = 0700
writable = yes
read only = no
## Share disabled by YaST
# [homes]
# comment = Home Directories
# valid users = %S, %D%w%S
# browseable = No
# read only = No
# inherit acls = Yes
## Share disabled by YaST
# [profiles]
# comment = Network Profiles Service
# path = %H
# read only = No
# store dos attributes = Yes
# create mask = 0600
# idirectory mask = 0700
## Share disabled by YaST
# [users]
# comment = All users
# path = /home
# read only = No
# inherit acls = Yes
# veto files = /aquota.user/groups/shares/
## Share disabled by YaST
# [groups]
# comment = All groups
# path = /home/groups
# read only = No
# inherit acls = Yes
## Share disabled by YaST
# [printers]
# comment = All Printers
# path = /var/tmp
# printable = Yes
# create mask = 0600
# browseable = No
## Share disabled by YaST
# [print$]
# comment = Printer Drivers
# path = /var/lib/samba/drivers
# write list = @ntadmin root
# force group = ntadmin
# create mask = 0664
# directory mask = 0775
[fileserver]
comment = Fileserver
inherit acls = Yes
path = /home/Fileserver/
read only = Yes
browseable = yes
# write list = @adsleng
writeable = yes
# write = linux
# create mask = 0777
# directory mask = 0777
## Share disabled by YaST
# [netlogon]
# comment = Network Logon Service
# path = /var/lib/samba/netlogon
# write list = root