Table of Contents
Advertisement
domain master = No
ldap suffix = dc=example,dc=com
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=Group
ldap idmap suffix = ou=People
ldap admin dn = cn=Manager
ldap ssl = no
ldap passwd sync = yes
idmap uid = 15000-20000
idmap gid = 15000-20000
...
# Other resource shares
...
...
3.3.4. Primary Domain Controller (PDC) with Active Directory
Although it is possible for Samba to be a member of an Active Directory, it is not possible for
Samba to operate as an Active Directory domain controller.
4. Samba Security Modes
There are only two types of security modes for Samba, share-level and user-level, which are
collectively known as security levels. Share-level security can only be implemented in one way,
while user-level security can be implemented in one of four different ways. The different ways of
implementing a security level are called security modes.
4.1. User-Level Security
User-level security is the default setting for Samba. Even if the
not listed in the
smb.conf
username/password, the client can then mount multiple shares without specifying a password
for each instance. Samba can also accept session-based username/password requests. The
client maintains multiple authentication contexts by using a unique UID for each logon.
In
, the
smb.conf
security = user
[GLOBAL]
...
security = user
...
4.2. Share-Level Security
With share-level security, the server accepts only a password without an explicit username from
file, it is used by Samba. If the server accepts the client's
directive that sets user-level security is:
Samba Security Modes
directive is
security = user
261
Advertisement
Table of Contents
