Solved

User passwords domain/samba

Posted on 2012-03-15
6
407 Views
Last Modified: 2012-04-23
We have setup a domain in our network and we want the user passwords to expire every X days, however we do not want to have to manually change the samba share passwords for our linux file server.

Is there a way that when a users Windows (domain) password is changed that the new password can be sent to samba so they can still access the file server?
0
Comment
Question by:revo1059
  • 3
  • 2
6 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 37725331
I've worked at a few environment which had the same requirements for password changes, but never did we have to sync passwords to SAMBA.
I'm no *nix specialist but you should look into Windows and SAMBA integration.
That way your SAMBA will use AD for authentication and can query AD directly.

I think they discuss it in this post.
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/0d5620db-8130-4b9b-90c2-2ee4ae367893/
0
 
LVL 5

Expert Comment

by:1ly4me
ID: 37725761
Samba with windows can be configured in two ways.
1. standalone server (Act as main DC)
2. As a domain member (Samba can authenticate users based on main DC in the domain)
However in your scenario the first option will not help, because I assume you have windows as main DC.
In the second option, you can join samba server to domain network, and samba can authenticate users based on windows DC. Whenever Samba try to authenticate, it will contact main DC for username/password match.
(I think you want to setup both windows and samba as domain controllers?)
0
 
LVL 1

Author Comment

by:revo1059
ID: 37725953
Option #2 sounds like a winner, I just need direction on how to implement it.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 5

Expert Comment

by:1ly4me
ID: 37728878
Are you using command based samba or GUI?
0
 
LVL 1

Author Comment

by:revo1059
ID: 37729482
I can use either.
0
 
LVL 5

Accepted Solution

by:
1ly4me earned 500 total points
ID: 37730160
Run,
#authconfig-tui and select winbind and  kerberos authentication.
In the next step enter appropriate details of your domain
The next step might to be enter details for winbind settings,
select domain as a security model, finally join the domain.
Make sure the samba global configuration is like below,
workgroup = EXAMPLE
   password server = dc.example.com
   realm = example.com
   security = domain
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /sbin/nologin
   winbind use default domain = false
   winbind offline logon = false

Open in new window

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question