From 20967627378194121bc48bf387838b8bd7682478 Mon Sep 17 00:00:00 2001
From: Jelmer Vernooij Assume you have a Samba 3.0 server with a NetBIOS name of
- SERV1SERV1 and are joining an or Win2k NT domain called
- DOMDOM, which has a PDC with a NetBIOS name
- of DOMPDCDOMPDC and two backup domain controllers
- with NetBIOS names DOMBDC1 and DOMBDC1 and Firstly, you must edit your Change (or add) your security =security = line in the [global] section
of your smb.conf to read:8.1. Joining an NT Domain with Samba 3.0
8.1. Joining an NT Domain with Samba 3.0DOMBDC2
-
.
You must also have the parameter encrypt passwordsencrypt passwords set to set to yes
-
in order for your users to authenticate to the NT PDC.
Finally, add (or modify) a password server =password server = line in the [global] section to read:
In order to actually join the domain, you must run this command:root# root# net join -S DOMPDC - -UAdministrator%passwordAdministrator%password
as we are joining the domain DOM and the PDC for that domain (the only machine that has write access to the domain SAM database) - is DOMPDC. The Administrator%passwordAdministrator%password is the login name and password for an account which has the necessary privilege to add machines to the domain. If this is successful you will see the message:
Joined domain DOM.Joined domain DOM. - or Joined 'SERV1' to realm 'MYREALM'Joined 'SERV1' to realm 'MYREALM'
Many people have asked regarding the state of Samba's ability to participate in a Windows 2000 Domain. Samba 3.0 is able to act as a member server of a Windows @@ -296,16 +282,16 @@ CLASS="SECT1" >
Currently, domain security in Samba doesn't free you from having to create local Unix users to represent the users attaching - to your server. This means that if domain user DOM\fred - attaches to your domain security Samba server, there needs to be a local Unix user fred to represent that user in the Unix filesystem. This is very similar to the older Samba security mode -- cgit