Samba domain member help (NT4)

[Tricky1234]

# Global parameters
[global]
workgroup = MYDOMAIN
server string = Samba Server %v on %L
security = DOMAIN
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
local master = No
dns proxy = No
wins server = MYWINSERVER
idmap uid = 15000-20000
idmap gid = 15000-20000
winbind use default domain = Yes

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[domain_user]
comment = My Private Share
path = /home/samba/domain_username
valid users = domain_username
read only = No
guest ok = Yes

[public]
path = /home/samba/public
valid users = domain_user
read only = No

[data]
comment = Data Drive
path = /home/samba/data
read only = No
volume = Sample-Data-Drive


Hi

I want to set up a samba domain-member server with shares for office users. I can see the samba server on the NT/Win2000 network. I can access the [data] share above - as it requires no authentication. The public and domain_user shares both ask for a username and password when I try to open them from a windows machine.

As I am using our NT4 domain controller for user authentication I shouldnt have to use encrypted files and create each samba user with smbpasswd should I? Thats the point of telling samba I want to use 'domain' isnt it? If I do wbinfo -u and wbinfo -g on the samba server I see a list of the groups and useraccounts.

Can someone tell me what I am missing from smb.conf?

Thanks for any help

T

 

[mmoonshi]

Hi, did you join the Samba server to the Windows PDC? The command to do that is;

smbpasswd -j <DOMAIN> -r <PDC-Server-NetBIOS-Name>


Regards,
Moonshi

 

[mmoonshi]

I also forgot to add that before you join the domain, you need to create a trust relationship in your Windows NT server first.

Goto "User Manager" and add the Samba server NETBIOS name as defined in the string "netbios name" in the "smb.conf" file.

Regards,
Moonshi