This is what I have tried with thier respective outcomes: 1. no local or samba accounts - strictly use winbind to authenticate off NT PDC AUTHENTICATION SUCCESS 2. export NT passwords using pwdump move that to the linux box changing permissions and group to 600 and root, create local users using useradd -u RID AUTHENTICATION SUCCESS 3. changed one username in the pwdump to a user that is not on the PDC, created the respective local account (this was to verify I still wasnt authenticating off the NT PDC) AUTHENTICATION SUCCESS 4. removed that local user AUTHENTICATION FAILURE
Doing number 4 is what brought me to my last email. It would make sense that the smbpasswd file has a username/password and one can just authenticate off that file..but it doesnt seem to want to behave like that out of the box... The reason I am trying this is that I would like to migrate over to strictly Linux backend and am trying to find the most efficient way to create user password files Any other suggestions would be appreciated Chris -----Original Message----- From: Ronan Waide [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 21, 2002 11:20 AM To: Chris McKeever Cc: '[EMAIL PROTECTED]' Subject: RE: [Samba] NT username/password export On November 21, [EMAIL PROTECTED] said: > Thanks for those utiltiies...I knew i saw them somewhere...I was successful > in creating a smbpasswd file using the pwdump utility.. > > Now here is my question (maybe someone know a work around): > > If a username/password pair exists in the smbpasswd file...is there a way > that the corresponding username/UID pair does not need to exist in the > passwd file? I guess what I am hoping for is a way samba can just > autheticate off of the smbpasswd file so I dont have to script out a useradd > based on that pwdump file. Right now, as I understand it, you must have a unix account to correspond to the SMB account. I thought that winbindd might alleviate this in the particular situation I'm dealing with, but it doesn't appear to be the case. Perhaps manually building your smbpasswd obviates the requirement for such accounts. So. I'd suggest you try joining to your domain, then fire up winbindd, and see what happens. And, of course, report back :) Cheers, Waider. -- [EMAIL PROTECTED] / Yes, it /is/ very personal of me. Veep says, "you could scream MY PANTS ARE FULL OF EELS with a big smile or a big grimace on your face. good stuff" -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba