asked on

AD authentication on Samba 3

Hi,

I am trying to set up a samba file server on fedore core. I want to have a shared folder which can be accessed only by win2k AD users and they should be able to change permissions for files they create!
Samba should take account information from AD when needed (I don't want make account duplicates on Linux!)

can you help

Marek

da99rmd

I think this is a good start for you but i sugest that you read the following:
man smb.conf
http://www.tldp.org/HOWTO/SMB-HOWTO.html

#Start
[global]
workgroup = MYGROUP
netbios name = LINUX
interfaces = (ips to listen to f.ex. 192.168.0.0/24)
encrypt passwords = Yes
security = server
password server = (net bios name)
log level = 0
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
hosts allow = (ips of the host to alow)
preserve case = No
short preserve case = No

[Company]
comment = Company share
path = /export/samba/company
writable = yes
printable = no
hosts allow = (ips of the xp host)
create mode = 0755
directory mode = 0755
# End

/Rob

marek100

ASKER

Hi,

I am not sure, but I think a better solution would be to use:
security = ads,
but then I get lost with the installation of kerberos.

can you tell which one is better?

ASKER CERTIFIED SOLUTION

da99rmd

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial