Table of Contents
Advertisement
and passwords in an encryption format that conforms with Windows. Do this with the
command smbpasswd -a name. Create the domain account for the computers, re-
quired by the Windows NT domain concept, with the following commands:
Example 38.4 Setting Up a Machine Account
useradd hostname\$
smbpasswd -a -m hostname
With the useradd command, a dollar sign is added. The command smbpasswd inserts
this automatically when the parameter -m is used. The commented configuration example
(/usr/share/doc/packages/Samba/examples/smb.conf.SuSE) contains
settings that automate this task.
Example 38.5 Automated Setup of a Machine Account
add machine script = /usr/sbin/useradd -g nogroup -c "NT Machine Account" \
-s /bin/false %m\$
To make sure that Samba can execute this script correctly, choose a Samba user with
the required administrator permissions. To do so, select one user and add it to the
ntadmin group. After that, all users belonging to this Linux group can be assigned
Domain Admin status with the command:
net groupmap add ntgroup="Domain Admins" unixgroup=ntadmin
More information about this topic is provided in Chapter 12 of the Samba HOWTO
Collection, found in /usr/share/doc/packages/samba/
Samba-HOWTO-Collection.pdf.
38.6 Samba Server in the Network
with Active Directory
If you run Linux servers and Windows servers together, you can build two independent
authentication systems and networks or connect servers to one network with one central
authentication system. Because Samba can cooperate with an active directory domain,
you can join your SUSE Linux Enterprise Server to Active Directory (AD).
Join an existing AD domain during installation or by later activating SMB user authen-
tication with YaST in the installed system. Domain join during installation is covered
in
Section "Configuring the Host as a Windows Domain Member"
(page 65).
Samba
719
Advertisement
Table of Contents
Troubleshooting
