Solved

AD authentication on Samba 3

Posted on 2004-04-26
3
204 Views
Last Modified: 2010-03-18
Hi,

I am trying to set up a samba file server on fedore core. I want to have a shared folder which can be accessed only by win2k AD users and they should be able to change permissions for files they create!
Samba should take account information from AD when needed (I don't want make account duplicates on Linux!)

can you help

Marek
0
Comment
Question by:marek100
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 8

Expert Comment

by:da99rmd
ID: 10917679
I think this is a good start for you but i sugest that you read the following:
man smb.conf
http://www.tldp.org/HOWTO/SMB-HOWTO.html

#Start
[global]
   workgroup = MYGROUP
   netbios name = LINUX
   interfaces = (ips to listen to f.ex. 192.168.0.0/24)
   encrypt passwords = Yes
   security = server
   password server = (net bios name)
   log level = 0
   log file = /var/log/samba/log.%m
   max log size = 50
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   dns proxy = No
   hosts allow = (ips of the host to alow)  
   preserve case = No
   short preserve case = No

[Company]
   comment = Company share
   path = /export/samba/company
   writable = yes
   printable = no
   hosts allow = (ips of the xp host)  
   create mode = 0755
   directory mode = 0755
# End

/Rob
0
 

Author Comment

by:marek100
ID: 10926035
Hi,

I am not sure, but I think a better solution would be to use:
security = ads,
but then I get lost with the installation of kerberos.

can you tell which one is better?
0
 
LVL 8

Accepted Solution

by:
da99rmd earned 125 total points
ID: 10926102
I think ADS is a better choise but i have never used it so i dont realy know how to set it upp but i have a good howto on doing it.
http://de.samba.org/samba/docs/man/unixclients.html#adssdm

/Rob

0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
CPU#7 stuck for 22s! 4 393
Ubuntu VNC server rejects access by client 7 233
Linux DNS problems 23 578
installed old nagios.... 13 167
I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question