Linux w/ Samba on NT Domain????

[Rogue]

Okay, here's the deal. I have the server showing in Network Neighborhood on the Domain. I even have shared configured in my smb.conf file. However, is there a way to use the PDC's user database for security and/or authenticaton? Currently, I am securing the network shares using local logins created on the Linux server. Help???

 

[rahvin]

Don't know what a PDC is but I'm guessing you mean the NT domain server. Ya, in the smb.conf file there is a section where you can specify an NT domain server for authentication. There are a couple of other options after that dealing with how it authenticates. From what I've heard Win2k won't work with this because M$ modified the kerberos authentication protocol and didn't document it. (This has since been released and will hopefully be corrected soon)

You will also need to set permission on the linux directories to be world readable/writeable. If someone "owns" the directory and you are using the Domain to authenticate the user won't be the unix owner and wont' have rights. Someone correct me if I'm wrong...

 

[Rogue]

Yeah, PDC is a Primary Domain Controller which authenticates users on the Domain. It contains a database of users, passwords, groups, etc that are used to authenticate domain access and resources. I would like Linux/Samba to use this database as it's authenicating authority for all share/resource access.

 

[Sebastian]

You can do tons of stuff with samba. I suggest you visit their site and print out the documentation. Or get a book. There are just tons and tons and tons of options. Most of them quite powerful but you have to find them...

ALso if you really want security you can even use ipchains and block unwanted access from certain ips.

 

[Rogue]

Yeah, I played with the IPchains thing briefly. I did a small amount of search on samba.org, but didn't find what I was looking for too easily. Guess I will keep hunting then.

 

[rahvin]

I'm telling ya, look in the smb.conf file, if you didn't create a new one and still have the default one it has the lines in there you need, they are just commented out.

 

[cot]

Try a "man smb.conf".

cot

 

[Damaged]

The O'Reilly book is online. See this previous post for the links.

http://forums.anandtech.com/messageview.cfm?catid=36&threadid=194379