I am setting up a cluster of 5 Linux (Redhat rel4) nodes which will all mount a common nfs drive. I would like to use the Windows ADS to authenticate users, but the windows userid to map to the same uid on all the nodes so the nfs mount will work properly. Does anyone know a good way to do this? There will only be a few users (20 or so) accessing the cluster, so I wouldn't mind manually creating the accounts. On one link I saw this:

"Prior to Samba 3.0.6, this value had to be set, but in Samba 3.0.6 and later, an
undefined idmap uid causes Winbind to try to map NT domain usernames to
locally defined accounts, which can be useful if you have existing Linux accounts
but want to rely on a domain controller for password authentication."

I haven't been able to get this to work. Does anyone have any ideas?

I have seen a couple of other suggestions:

1) use idmap backend = idmap_rid.... - unfortunately Redhat doesn't include this in their distribution.

2) use idmap backend with LDAP, but that looked like a lot of work.

you could use winbind to authenicate against Active directory. that way you would have the same user names and passwords. If you've already done this or don't want to do this then don't worry, but if you want some information i'll give you some information, just tell me.

As for mapping the home drive of your windows machine i'm only starting to get into the bash scripts and i'm not near my linux box at the moment, but if you had a mount command in your login script ...

mount -t smbfs -o username=$user,password=$password //windows-server/$user /home/$user

then that would give them the same username/password/home drive as in your ADS enviroment.

now i'm really not sure about that script up above, i'll be near my linux box this afternoon and i can figure it out, but for now, if you need some information on winbind just reply to this post.

i made a post on the software forum, after answering this and, 'solveit' got back to me with the script your going to want to put in your login file.

mount -t smbfs -o rw,username=$USR,password=$PASS,workgroup=$GRP //$SVR/$SHR $MNTPOINT

http://www.linuxquestions.org/questi...06#post1920206

so to me, the best way of going about this seams to be, authenticate against ADS using winbind and then use the above script for mapping home directories