SAMBA and W2K Server

[ManagerJay]

The organization I am currently working for has a Windows 2000 controlled domain. Users in our regional offices log into the domain without any problems, but do not save any of their documents to the network because of the slow response time.

In order to make the response time faster, I am rolling out SAMBA servers to each of the regional offices. Each would be their own domain.

Is it possible to setup SAMBA using security=share to allow users from another domain to connect without requiring a username and password? I have been trying to get this to work without any luck. I have used smbpasswd -n to set the SAMBA password to none and I have used passwd -d to delete the password on the Linux side. But, when I attempt to connect to a share, I am prompted for a password.

Basically, if the user has been allowed access to the domain and the user names match, they should have access to the shares on the SAMBA server. Due to the political implications, it is not possible to make the SAMBA servers a member of our present domain.

TIA,



Jay

 

[ifincham]

Hi,

Mostly you get samba machines joining NT domains but it should be possible with all samba servers, i.e. if you set one samba server up as a PDC and the others as member servers to that new domain. You'd need to create machine accounts both ways -->

http://va.samba.org/samba/docs/Samba-HOWTO-Collection.html#AEN1189

and

http://va.samba.org/samba/docs/Samba-HOWTO-Collection.html#AEN400

Hope this helps

 

[630111]

I've dealt with a similar situation in the past. I don't remember it being possible to auto-authenticate your users to their local Linux box without getting a login prompt, even if you make the ids and passwords the same. Not really as bad as it sounds, just one more step for the users.
Hope this helps!
630111

 

[ianf]

You can do it in NT4, but you have to loosen security by setting password transfer to plain text (can't remember the exact registry hack, something like EnablePlainTextPassword)

Don't know if this hack is still valid in 2000 Ian

"IF" is not a word it's a way of life