On 8/16/06, Kevin Gowan <[EMAIL PROTECTED]> wrote:
To Whom It May Concern: I really admire the dedication and effort your group has. I am glad more and more people aren't buying into the Microsoft licensing schemes. Keep
up
the good work! I would like to add the server I have installed to our Active Directory Domain. We have one Win2003 PDC no subnets very basic stuff. I have read many chapters in the official how to guide and would like to zero in on
the
appropriate section/s that will allow me to configure this appropriately. All my supervisor would like me to do is create a
fileserver
where no one has to type in their user name and password again when they click on any of the shares. I have tried (on the test bed) configurations from different chapters and I still get user name and password when I
click
on the server or share. The Server I have installed is Suse
10.0enterprise.
I would appreciate any help that you can provide. Thank you for your time and I look forward to hearing from you soon! Best regards, Kevin G
Hey Kevin, We are using our Samba server in the same way - File/Print in a W2K3 AD single forest/domain. Definitely look at the AD section. I found the Samba-3 By Example book to be very helpful, too - Section 9.3.3 covers a file server in an AD domain. Here's our config that is working just fine: [global] unix charset = LOCALE workgroup = MYDOMAIN realm = MYDOMAIN.INT server string = Production File Server security = ADS allow trusted domains = No enable privileges = Yes username map = /etc/samba/smbusers log level = 1 log file = /var/log/samba/%m max log size = 50 deadtime = 15 printcap name = cups wins server = 10.0.0.2 ldap ssl = no idmap backend = idmap_rid:MYDOMAIN=10000-50000 idmap uid = 10000-50000 idmap gid = 10000-50000 template shell = /bin/bash winbind separator = + cups options = raw The only thing to be aware of is, for our config, I chose to use the idmap_rid since I will end up having multuple servers and wanted to ensure that the uids remain consistent. For this I needed to rebuild the Suse 10.0RPM to enable this. Make sure the server is correctly listed in DNS (A record in the AD domain) prior to adding it to the domain with the net ads join command. Also ensure that ntp is running and keeping time in sync. Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba