[TriLUG] Group Samba authentication

[Ryan Leathers]

You can use LDAP for this.  Just get the SAMBA schema and use it on the
server you want as your DC.  The rest of the samba servers will point at
this one.


On Tue, 2003-07-15 at 03:46, Roy Vestal wrote:
> Chris,
>  My understanding is the user authentication is checked against a domain
> with "security=domain" option and the subsequent encrypted password
> options.
> 
> The group permissions are checked against servers groups. This ensures
> the user and group permissions are set correctly.
> 
> I have no experience with LDAP and samba so I cannot give any
> suggestions or information there.
> 
> HTH
> 
> On Mon, 2003-07-14 at 20:18, Chris Bullock wrote:
> > I have a quick question about authentication of samba shares.  If you can tell 
> > samba to look at an NT server for user authentication why can't you tell it 
> > to look at that same server for group authentication or can you?  I have an 
> > NT domain that has serveral groups defined but since we have all our file 
> > sharing on Samba servers the groups serve no purpose.  Everytime you create a 
> > samba share, you have to create a group on the local machine and edit the 
> > group file so that the appropriate people have access to the group files.  I 
> > know that maybe LDAP is possibly an answer but we are not using that for 
> > domain authentication, so does anyone have any suggestions?
> > TIA
> > --cgb
-- 
Ryan Leathers <ryan.leathers at globalknowledge.com>
Global Knowledge
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://www.trilug.org/pipermail/trilug/attachments/20030715/3477c2b6/attachment.pgp>