Configure Samba to use domain accounts for authentication
Q. How can I configure Samba to use domain accounts for authentication, so that user will be authenticated?
A. Samba server provides an options that allows authentication against a domain controller. Edit your smb.conf file using vi text editor:
Type the following command as root user
# vi /etc/samba/smb.conf
OR
$ sudo /etc/samba/smb.conf
Make sure parameters are set as follows [global] section of smb.conf file:
workgroup = YOUR-DOMAIN-CONTROLLER
netbios name = YOUR-SAMBA-SERVER-NAME
password server = IP-ADDRESS-OF-YOUR-DOMAIN-CONTROLLER
encrypt passwords = Yes
preferred master = No
domain master = No
Where,
- Workgroup: This controls what workgroup your server will appear to be in when queried by clients.
- netbios name : This sets the NetBIOS name by which a Samba server is known.
- encrypt passwords : This boolean controls (YES or NO value) whether encrypted passwords will be used with the client. Note that Windows NT 4.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed. This is what you need to use for Window XP/2000/2003 systems.
Restart samba serve:
# /etc/init.d/samba restart
Subscribe to our free e-mail newsletter or RSS feed to get all updates.
You can Email this page to a friend.
Related Other Helpful FAQs:
- Adding a user to a Samba (SMB) share
- Squid NTLM authentication configuration using ntlm_auth
- How do I find the current connections to a Samba server?
- Howto: Adding share in samba server under Linux or UNIX
- Samba mount and access large 2GB+ files from share or NAS device
Discussion on This FAQ
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
February 1st, 2007 at 10:30 pm
I am using a Samba server on a Solaris box with Windows domain controllers for certification. Every file request coming from a pc running XP is resulting in a certification request from the Samba server to the domain controller. Since we deal in thousands of files, this is consuming a bit of time.
Is there a way to configure Samba such that the granted certification is assumed to be valid for some extended period of time — such as 5 minutes?
Thanks for any advice you can give.