Newest version of samba for SuSE 8.1 seems to be based on 2.2 series and there exists no build for 3.0.0 or 3.0.1? The problem is that I need to install a windows application that requires about 10 groups from PDC - and the PDC is Samba 2.2.x on Linux. Samba 2.2.x series does not seem to support the "domain group map" so how do I provide these groups from Linux? What choices do I have and what is the suggested way of doing this? I think options include at least: - changing PDC to windowsNT - obtaining prebuild 3.0.1 samba for SuSE 8.1 - building and installing from 3.0.1 sources - any others/suggestions? So how should I do this? Installing the windows software with only "users" and "administrators" groups breaks its security - and likely the rest of the system security after that. regards, timo
The problem is that I need to install a windows application that requires about 10 groups from PDC - and the PDC is Samba 2.2.x on Linux. Samba 2.2.x series does not seem to support the "domain group map" so how do I provide these groups from Linux?
The Problem is within the rights. I tested this before a year and wanted to set rights for a domain and different groups. I choosed samba/ldap (therefor I used the linux-packages from the following link). If you are familliar with german, here is a useful link for samba/ldap: http://www.bildungsservice.at/technik/netzwerk/samba-domain-mit-win2000.htm You have to obtain the packages provided there. After unpacking all you will have to run the install-script and restart samba and edit /etc/sysconfig/samba: SAMBA_SAM="classic" to "ldap"! The package is preconfigured for ldap and samba. Here you will have the basic groups schueler and lehrer. If you need others the page gives you examples. Samba with ldap can use ldap for users/groups rights. Within swap or webmin you can easyly set rights for your shares. You can set access rules for users: [share] ... write list = martin,philippe,thomas,lorien,sachin ... You can set access rules for groups: [share] ... write list = @users,@schueler,@lehrer ... With poledit you can edit systemprivileges (be cautious with that!!!). There is enough information for that in the german link from the link above! If you got X installed on your server you can administrate users, there will be icons on root's desktop. The same thing you can do under the console.
What choices do I have and what is the suggested way of doing this? I think options include at least: - changing PDC to windowsNT
/etc/samba/smb.conf # Settings for Windows 2000 Server # If there is no line like this it announces itself as nt 4.9 server announce version = 5.0
- obtaining prebuild 3.0.1 samba for SuSE 8.1
There is no prebuild version of which I know.
- building and installing from 3.0.1 sources
./configure --help Look for your desired options and build it with them. Maybe you need some stuff, which is been told while configureing!
- any others/suggestions?
Use samba with ldap support. Philippe
participants (2)
-
Philippe Vogel
-
timo