Samba 3.0 (PDC) and windows laptop

nic01

Hi

I have a samba server (PDC) with a number of windows (2000 & XP) clients conneted.

The problem is, that the laptops can't connect to the samba server when they are on the road. On a windows 2000/2003 the client 'caches' the username and password locally, but they don't when connected to the samba server.

Do i have to change something in the smb.conf?

/Nic

moocha · Watchman Joined: 21 Oct 2003 Posts: 5722

Domain user identity != local user identity
http://us1.samba.org/samba/docs/using_samba/ch04.html
_________________
Military Commissions Act of 2006: http://tinyurl.com/jrcto

"Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety."
-- attributed to Benjamin Franklin

nic01 · Posted: Mon May 24, 2004 11:33 pm Post subject:

I don't really get that. Samba doesn't seem to recognize it in smb.conf, and I can't find anything about this on the Samba doc pages?

What exactly did you mean?

/Nic

sak102010 · Tux's lil' helper Joined: 08 Jun 2003 Posts: 82

I think moocha is trying to tell you that a domain user identity is not the same as a local user identity.

You can configure your laptops to use roaming profiles from your samba PDC. There are a number of steps to get this to work. The link that moocha provided is excellent reading on the subject. Here's another one that might help...

http://us1.samba.org/samba/docs/man/howto/samba-pdc.html

Good luck.
_________________
Thanks,
Sak

nic01 · Posted: Tue May 25, 2004 11:11 pm Post subject:

Thanks Sak for explaining moocha's point.

It's just that I'm used to win 2003 server. Here i don't have to use roaming profiles to get the clients to cache the username and password locally on the computer.

Might give the roaming profiles a change.. If that would make it possible to login with domain username even though the PDC isn't availeble.

/Nic

moocha · Watchman Joined: 21 Oct 2003 Posts: 5722

Sorry, my bad for being too terse. That's indeed what I meant.
You need to remember that Samba acts as a NT4 PDC. It's as of yet unable to act as a PDC in an Active Directory environment (only as a BDC). So you're stuck with roaming profiles for now.
_________________
Military Commissions Act of 2006: http://tinyurl.com/jrcto

"Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety."
-- attributed to Benjamin Franklin

sak102010 · Tux's lil' helper Joined: 08 Jun 2003 Posts: 82

From my limited understanding, I believe you can do some ADS stuff in samba, and it's better in v.3. If I remember correctly, you can use kerberos, and security = ADS and your clients will get a kerberos ticket.

I haven't tried any of this, as I've had no call to yet. Be advised, if you want to try ADS with your samba server, make sure you're running the latest 3.0.4, since it fixes a number of problems with winbind. There is mixed emotion on the samba mailing list about how well all of this works though, so your mileage may vary. Here's some reading material if you're interested ...

http://marc.theaimsgroup.com/?l=samba&m=108452616025192&w=2

If you're interested in trying this out, I'd suggest spending some quality time with the samba documentation also. There's a ton of stuff in there about ADS that might come in handy for you.
_________________
Thanks,
Sak