Member Avatar for topher

So I read the techpost article on setting up samba to be accessed by windows computer (good article for a newbie) by cscgal. However, being new to Linux, the config settings are eluding me to set the share up to be accessed by clients on my win2k AD network. I would like SAMBA to look to my Win2k PDC for user permissions and lock down the share to a specific user group.

The other question I have is, since I installed RH8 without either GUI, how/where do I go to download the RPM for SAMBA 3 via FTP (i do have the NIC working properly). I was trying to get it from the samba.org site, but I can't find the ftp address.

Cheers,
Topher

  • 7 Contributors
  • 6 Replies
  • 423 Views
  • 5 Years Discussion Span
  • Latest Post Latest Post by jbennet

Dani AI

Generated

This thread is old but the goal — have a Linux box authenticate against a Windows domain and lock a share to an AD group — is still common. The pointers already posted are useful: ’s package-source idea and ’s package-manager suggestion are practical, and correctly highlighted domain-aware authentication. Two robust approaches exist today: use Samba/winbind as the domain-member provider (classic Samba method) or use realmd + SSSD to join AD for system authentication and let Samba serve shares. Which one you pick affects smb.conf, id-mapping, and which daemons must run. (wiki.samba.org)

Practical workflow (modern, RHEL/Fedora-style): ensure DNS points at the AD DCs and clocks are synced; install the join/auth packages; discover and join the domain; then configure Samba/winbind or let SSSD provide NSS/PAM and adjust smb.conf for a domain member. A typical package/install + join sequence looks like this (adapt for your distro/version): 

# install the pieces that realmd/SSSD and Samba need
yum install realmd sssd oddjob oddjob-mkhomedir adcli krb5-workstation samba-common-tools samba-winbind

# discover and join an AD domain (example)
realm discover ad.example.com
realm join --user=Administrator ad.example.com

# or join using Samba tools
net ads join -U Administrator

Use the Samba wiki/howto for the exact idmap and winbind details for your Samba version. (docs.redhat.com)

Troubleshooting and gotchas: AD requires working DNS and time (Kerberos), so fix those first. For Samba versions >= 4.8, smbd’s domain-member functionality relies on winbind for id lookups, so if you plan to serve SMB shares from a domain-joined host you’ll likely need winbind running (SSSD can still be used for system logins in many setups, but check your Samba version and distro guidance). Test with NSS/winbind tools (getent/wbinfo) and watch the Samba logs; confirm group membership and filesystem ACLs match the group you intend to restrict the share to. (lists.samba.org)

Notes: if this is the old Red Hat Linux 8 (circa 2003) you’re using, consider moving to a supported distribution or fetching archived RPMs — running a maintained OS will save time and avoid security and compatibility headaches when integrating with AD.

Recommended Answers

All 6 Replies

Member Avatar for alc6379

Just pick your version of Red Hat, and download away! Just be sure that you have all of the required packages needed by the RPM to install Samba with. If you don't have them, the install will fail, and it will bark at you, telling which packages are needed.

Member Avatar for Eduardo

Thanks.

A FTP is a possibility but I don't think a secure one.

Yes, I have space on disk. The machien is an IBM Xeon about 1GHZ and 512 MB RAM.

I'll upgrade Mandrake to version 9.2 and hope the problem is solved.

Thanks again.

Best regards,

Eduardo

Member Avatar for TheOgre

If you want your Linux box to access your Wintel PDC for user authentication, you have to add a line in your smb.conf file pointing to the usermap file:

username map = /etc/samba/smbusers.conf

Also, set security=domain and specify the password server:

security = domain
password server = [Wintel PDC hostname]

To configure the usermap file, simply create a file that lists the Linux usernames and Windows usernames. Example:

# smbusers.conf for mysambamachine.mydomain
# Format is:
# Linux username = Windows username

root = administrator
linuxuser1 = windowsuser1
linuxuser2 = windowsuser2

Member Avatar for ibi001

Roger here,
Have u used yum.... Learn that procedure....There is documentation
that shows how to use this tool... This is a Linux tool... Not all
linux Os's are able to call this application.... Once I found yum, I loved it...
It will save u a lot ot time and trouble.... Have a great day....
yum install samba.....
Yum is a powerful command that finds the RPM's for you and installs
them directly....

So I read the techpost article on setting up samba to be accessed by windows computer (good article for a newbie) by cscgal. However, being new to Linux, the config settings are eluding me to set the share up to be accessed by clients on my win2k AD network. I would like SAMBA to look to my Win2k PDC for user permissions and lock down the share to a specific user group.

The other question I have is, since I installed RH8 without either GUI, how/where do I go to download the RPM for SAMBA 3 via FTP (i do have the NIC working properly). I was trying to get it from the samba.org site, but I can't find the ftp address.

Cheers,
Topher

Member Avatar for nerden

not exactly an elegant solution, but WebMin is realy good when first tinkering with linux, give you a web based CPanel style interface for pretty much everything including SAMBA and its easy to use.

Member Avatar for jbennet

This thread is from 2003, i think its solved

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.