[Samba] Samba ads and local users
Hi All, I have a network that's slowly being moved over to Active Directory. Having used samba all this time though, im reluctant to let them go. So I've setup a test Samba server to use the ADS, which allows all my domain users to connect directly to the samba server for the home drives and other shares (working perfect!). However, I have a lot of other users that won't be on the domain for quite some time. Is there anyway to have them still connect to the samba server using the user share access that they've had all along (i.e. their account in the smbpasswd file). If it is one or the other, is there any suggested method I can use to get around this (barring adding all the users to the domain, and still using samba for some ads authentication)? Regards Peter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba ads and local users
However, I have a lot of other users that won't be on the domain for quite some time. Is there anyway to have them still connect to the samba server using the user share access that they've had all along (i.e. their account in the smbpasswd file). If it is one or the other, is there any suggested method I can use to get around this (barring adding all the users to the domain, and still using samba for some ads authentication)? There's probably a better way of doing this, but you could always run two Samba servers - one using AD, one using smbpasswd. You would have to direct your users to connect to a different server depending on their access, but that may not be so bad. Alternatively you can still connect to smbpasswd accounts even if the Samba server is on a domain, provided you use the machine's hostname as if it's another domain, e.g. if most users connect to the machine \\SAMBA as DOMAIN\user then you can also connect to \\SAMBA as SAMBA\localuser and providing localuser is mentioned in smbpasswd it'll let you in. It does mean that you'll have to get everyone to enter their username differently, so this may or may not be a problem. Cheers, Adam. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba ads and local users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 nanou691 wrote: | Hello, | | We have *samba 3.0.2a* server running winbindd and | security=ads in smb.conf. | | The authentication of ads users works fine. | However, our environment requires using *both Domain | and Local* users at the same time. | | Is there a way to make *samba 3.0.2a* authenticate | local users and domain users? Yes. You probably need to set 'auth methods = guest ntdomain:winbind sam_ignoredomain' cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAPg5VIR7qMdg1EfYRAjroAKDaOxlQktY2CFW4vO3Z5WdYxjyJxwCgxNbK reQjdUGuDsacRyks8rih3No= =aqsD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba ads and local users
Hello, We have *samba 3.0.2a* server running winbindd and security=ads in smb.conf. The authentication of ads users works fine. However, our environment requires using *both Domain and Local* users at the same time. Is there a way to make *samba 3.0.2a* authenticate local users and domain users? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
