Windows AD and samba
Is it possible to do the following.
Connect to a samba share on linux with authentication from the windows AD.And use groups.
example:
on active directory:
Group1: userA userB
Group2: UserX UserY
on linux:
/samba/share/group1
/samba/share/group2
What I want to have UserA and userB to have access to /samba/share/group1 and UserX UserY /samba/share/group2. But when they write files they need to have the smbuser on linux.
Now I already got this working with the valid users and force user option of samba. But I need to create a linux user for every user on the AD (otherwise it doesn't work).
in the long run this is unmanageable. So I would like to use groups.
So a user in a certain AD group connects to the share -> the user is prompted for his domain password -> if the user is in the correct group the share is accessed -> and on linux it shows as the user smbuser.
What do I have to do to get this to work?
|
