On Sun, 2004-01-25 at 00:44, C.Lee Taylor wrote: > Greetings ... > > Thanks for you reply Andrew, I think I will try and explain again > what I am trying to do, maybe I am just going at this the wrong way ... > > >I'm not sure what you mean here. > > > > > > We have two applications which will be distributed by Citrix. I > would like to have one username and password for all the services ... > Single-Sign-On. Windows2003 has been chosen for our AD. We have a few > remote sites with Linux file/print servers. > > Now if we use winbind, we can't setup the Linux servers as PDC.
This is incorrect. Winbind runs perfectly fine against Samba 3.0. > > That is a limitation of winbind, and with out the Samba servers running > as PDC's I can't get the local workstations as the remote sites to > process login scripts. Logon scripts for their own domain, or logon scripts for trusted domains? > I could give up on the idea of remote sites local workstations > automaticly processing login scripts, because that is the only real > thing I am looking for. I could manually add login scripts to all the > workstations, or I could work out something with trusts. > > I have been trying setuping up a trust both ways between AD and > Samba, but TS will not let any of my users login from Samba. How about you sort out your terminal-services issues first. I think you might be being bitten by generic Samba/TS interactions, and are just making your life more difficult by looking for the most complex solution. In a Samba domain, win2k TS clients need Samba 3.0.1 to store the right extra information. But it sounds like you don't want to run a Samba PDC, except for the fact that it would allow you to serve up a logon script. Can't AD do that as well, if not better? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba