Re: [Samba] Active Directory - Which Samba version is needed?
hi alexander, On Fri, Feb 07, 2003 at 10:06:43AM +0100, Alexander Skwar wrote: Hi! I'd like to setup a Samba server which should do user authentication against an Active Directory. Our AD admins told me, that we do not have Window NT 4.0 Domains available. What I'm trying to accomplish, is that the users can login with the same username/password they use with the AD. Also, if the password is changed in the AD, this change should be reflected on the Samba server. It doesn't have to be the other way arround - ie. the Samba server doesn't have to be able to do password changes. you should set up samba with winbindd to achieve this. http://de.samba.org/samba/docs/Samba-HOWTO-Collection.html#WINBIND The reason is, that I need a way for the Windows users to access files on NFS shares. maybe you should give us more details on this. how do you plan to restrict access to these shares? bye, guenther -- Guenther Deschner [EMAIL PROTECTED] SuSE Linux AGGnuPG: 8EE11688 Berliner Str. 27 phone: +49 (0) 30 / 430944778 D-13507 Berlin fax: +49 (0) 30 / 43732804 msg13861/pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Active Directory - Which Samba version is needed?
You will need samba-3.0 then. It is in alpha, so it is not recommended for production use right now. But I am using it production w/o any issues. It requires samba to be compiled against kerberos and the openldap libraries. It also requires the use of winbindd. Regards, Errol -- Original Message -- From: Alexander Skwar [EMAIL PROTECTED] Date: Fri, 07 Feb 2003 10:06:43 +0100 Hi! I'd like to setup a Samba server which should do user authentication against an Active Directory. Our AD admins told me, that we do not have Window NT 4.0 Domains available. What I'm trying to accomplish, is that the users can login with the same username/password they use with the AD. Also, if the password is changed in the AD, this change should be reflected on the Samba server. It doesn't have to be the other way arround - ie. the Samba server doesn't have to be able to do password changes. The reason is, that I need a way for the Windows users to access files on NFS shares. All this is supposed to work on a HP-UX 11.00 server, but I also do have a RedHat 8.0 server available. So I'm either looking for a HP-UX solution (preferrable with the HP CIFS server) or a Linux solution. Actually, plain OS independant hints are also VERY much appreciated! Thanks a lot, Alexander Skwar -- How to quote: http://learn.to/quote (german) http://quote.6x.to (en) Homepage: http://www.iso-top.biz | Jabber: [EMAIL PROTECTED] iso-top.biz - Die günstige Art an Linux Distributionen zu kommen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- This message has been scanned for viruses and dangerous content and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Active Directory - Which Samba version is needed?
So sprach Errol Neal am 2003-02-07 um 06:57:45 -0800 : You will need samba-3.0 then. It is in alpha, so it is not recommended Do I need Samba 3.0, because we do not have Windows NT 4.0 Domains? for production use right now. But I am using it production w/o any issues. It requires samba to be compiled against kerberos and the openldap libraries. It also requires the use of winbindd. Which configure options do I need at minimum? Would the following be sufficient? --with-ads \ --with-krb5=/usr \ --with-ldap \ --with-winbind Also, I'm unclear about the following options: --with-afs Include AFS clear-text auth support --with-dce-dfs Include DCE/DFS clear-text auth support Thanks again, Alexander Skwar -- How to quote: http://learn.to/quote (german) http://quote.6x.to (english) Homepage: http://www.iso-top.biz |Jabber: [EMAIL PROTECTED] iso-top.biz - Die günstige Art an Linux Distributionen zu kommen Uptime: 11 days 10 hours 40 minutes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Active Directory - Which Samba version is needed?
So sprach Guenther Deschner am 2003-02-07 um 11:51:42 +0100 : you should set up samba with winbindd to achieve this. http://de.samba.org/samba/docs/Samba-HOWTO-Collection.html#WINBIND Hmm, what's the command I need to type to join the Active Directory? Would it be: smbpasswd -j europe.delphiauto.net -U Administrator europe.delphiauto.net is the tree of the AD that this server needs to be a member of - I suppose. Or rather, all the users that will login to the server are in this AD tree. So I suppose the server should also be in this AD tree. maybe you should give us more details on this. how do you plan to restrict access to these shares? Good question! Well, we're migrating away from a Unix based network to a Windows network (no, I don't particulary like it, but I can't do anything about it...). In Unix, we restricted access based on the machines. Since all the machines had static IPs, that wasn't a problem. We haven't yet decided how to restrict access in the Windows setup. We're thinking about implementing user based restrictions. But that has yet to be decided... Alexander Skwar -- How to quote: http://learn.to/quote (german) http://quote.6x.to (english) Homepage: http://www.iso-top.biz |Jabber: [EMAIL PROTECTED] iso-top.biz - Die günstige Art an Linux Distributionen zu kommen Uptime: 11 days 11 hours 14 minutes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
