Samba password server in different subnet

My current situation:

1 Samba server on the 219.x.y.z subnet (DMZ)
1 Samba server on the 192.168.128.x protected subnet

Both Samba servers running Fedora Core 1, Samba is from RPM of FC1.

I setup the 219 Samba server to act as a password server:

        workgroup = ABC
        netbios name = INTERNET
        server string = ABC Internet Server
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        dns proxy = No
        ldap ssl = no
        os level = 33
        preferred master = yes
        domain master = yes
        local master = yes
        security = user
        domain logons = yes

And I want the 192 Samba server to ack as a pass through server to ask for the 219 Samba server to authenticate:

        workgroup = ABC
        netbios name = INTRANET
        server string = ABC Intranet Server
        null passwords = Yes
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        dns proxy = No
        wins support = Yes
        ldap ssl = no
        security = user
        password server = # Host name of 219 Samba server

I know that the "password server" option should be a netbios name, but they are on different subnet and the broadcast should be stopped by the router.

I failed.  Any suggestion?  

Thank you.

William WK Lee
Hong Kong

Who is Participating?
da99rmdConnect With a Mentor Commented:
Are the 2 smb servers on the same server or 2 diffrent ?

on the 192 server you cant have this
>security = user
By specifying the name of another SMB server (such as a WinNT box) with this option, and using
              security = domain or security = server you can get Samba to do all its username/password valiĀ­
              dation via a remote server.

read the man smb.conf

I realy dont know if the password server = ip works
 This option sets the name of the password server to use.  It must be a NetBIOS name, so if the
              machine's  NetBIOS  name is different from its Internet name then you may have to add its NetĀ­
              BIOS name to the lmhosts file which is stored in the same directory as the smb.conf file.

so you can specify the ip in the lmhost file and use a netbios name of your choise.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.