Stephen Carville wrote:
Gary Dale wrote:
Stephen Carville wrote:
OK, I'm stumped.
I have a Samba server (v3.0.20a) with security=DOMAIN and using winbind
to authenticate non-local users against a W2K domain controller. This
setup happily serves out home directories and about six other shares.
I need to add a local UNIX account for a formerly Windows only user.
When I try useradd I get: user <username> exists. This makes sense
becasue of winbind. What I cannot figure out is how 'erase' him so I
can create a local user account. I've read thru the man ages but I
can't see how to do this.
Did you try removing the account from Windows?
No. He needs a Windows account too. If nothing else for email. I
could remove the account and the recreate it afterwards but I was
hoping for a more elegant solution.
Otherwise, what does he need as a Unix user? Does his account exist
in the /etc/passwd file or is it just his "home" directory that
exists locally? If the former, it would seem you don't need to create
his account. If the latter, did you try renaming his old home directory?
There is no account in /etc/passwd. That is what I need to create.
He now needs access to the UNIX systems as well as Windows systems.
I don't see how delteing his home directory will buy me anything.
Thank you for your reply.
The reason useradd won't add the account could be because you already
have a home directory for the username. I don't know. You still haven't
said much about the Unix side of the picture. What is he doing as a Unix
user and how is your Unix security arranged? What services does he need
that he can't get from CIFS?
If he just needs access to the shares, he can still access them through
Unix using CIFS, or you can add an account for him in /etc/passwd with
the same user number as currently owns his home directory. In a simple
setup, if you make his local account number (on his workstation) the
same, you can also give him access via NFS.
However, you specified Unix systems (plural). I gather your Unix setup
might be more complicated and you may have a single Unix sign-on (but
not an integrated single sign-on with Windows or we wouldn't be having
this exchange). Or you may be using some kind of PAM for your Unix
authentication. Without more details, it's difficult to provide advice. :)
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
