Q. How can I configure Samba to use domain accounts for authentication, so that user will be authenticated?
A. Samba server provides an options that allows authentication against a domain controller. Edit your smb.conf file using vi text editor:
Type the following command as root user
# vi /etc/samba/smb.conf
OR
$ sudo /etc/samba/smb.conf
Make sure parameters are set as follows [global] section of smb.conf file:
workgroup = YOUR-DOMAIN-CONTROLLER
netbios name = YOUR-SAMBA-SERVER-NAME
password server = IP-ADDRESS-OF-YOUR-DOMAIN-CONTROLLER
encrypt passwords = Yes
preferred master = No
domain master = No
Where,
- Workgroup: This controls what workgroup your server will appear to be in when queried by clients.
- netbios name : This sets the NetBIOS name by which a Samba server is known.
- encrypt passwords : This boolean controls (YES or NO value) whether encrypted passwords will be used with the client. Note that Windows NT 4.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed. This is what you need to use for Window XP/2000/2003 systems.
Restart samba serve:
# /etc/init.d/samba restart