Solved

User passwords domain/samba

Posted on 2012-03-15
6
406 Views
Last Modified: 2012-04-23
We have setup a domain in our network and we want the user passwords to expire every X days, however we do not want to have to manually change the samba share passwords for our linux file server.

Is there a way that when a users Windows (domain) password is changed that the new password can be sent to samba so they can still access the file server?
0
Comment
Question by:revo1059
  • 3
  • 2
6 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 37725331
I've worked at a few environment which had the same requirements for password changes, but never did we have to sync passwords to SAMBA.
I'm no *nix specialist but you should look into Windows and SAMBA integration.
That way your SAMBA will use AD for authentication and can query AD directly.

I think they discuss it in this post.
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/0d5620db-8130-4b9b-90c2-2ee4ae367893/
0
 
LVL 5

Expert Comment

by:1ly4me
ID: 37725761
Samba with windows can be configured in two ways.
1. standalone server (Act as main DC)
2. As a domain member (Samba can authenticate users based on main DC in the domain)
However in your scenario the first option will not help, because I assume you have windows as main DC.
In the second option, you can join samba server to domain network, and samba can authenticate users based on windows DC. Whenever Samba try to authenticate, it will contact main DC for username/password match.
(I think you want to setup both windows and samba as domain controllers?)
0
 
LVL 1

Author Comment

by:revo1059
ID: 37725953
Option #2 sounds like a winner, I just need direction on how to implement it.
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 5

Expert Comment

by:1ly4me
ID: 37728878
Are you using command based samba or GUI?
0
 
LVL 1

Author Comment

by:revo1059
ID: 37729482
I can use either.
0
 
LVL 5

Accepted Solution

by:
1ly4me earned 500 total points
ID: 37730160
Run,
#authconfig-tui and select winbind and  kerberos authentication.
In the next step enter appropriate details of your domain
The next step might to be enter details for winbind settings,
select domain as a security model, finally join the domain.
Make sure the samba global configuration is like below,
workgroup = EXAMPLE
   password server = dc.example.com
   realm = example.com
   security = domain
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /sbin/nologin
   winbind use default domain = false
   winbind offline logon = false

Open in new window

0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
schema master 5 27
Application Crash 2 22
Locating a GPO setting 3 29
Additional DC vs Child Domain 12 18
Resolve DNS query failed errors for Exchange
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question