On Sat, 2006-04-08 at 18:24 +0100, Steve A wrote: > Craig White wrote: > > OK netlogon, homes and profiles are all special shares. They really > > only mean something to users who log on to the domain via Windows > > computers that have been 'joined' to the domain. > > I can still see my home shares even though I'm not logged onto the domain. > Windows does prompt me for user/password when I access it though, because my > Windows password isn't the same as my Unix one. > > > Have you 'joined' any computers to the domain yet? I would suspect not > > since in the list above created by smbclient -L Samba -U sa, I see 3 > > different computers with 3 different 'workgroups' > > Yes, I've joined a computer called VALIANT. Actually, it joined itself > because of the "add machine script =" line in my smb.conf. > > > I would suggest that you read through the documentation at > > http://www.samba.org/samba/docs (the Official HowTo and By Example) > > I've got the Samba 3 Howto and Reference Guide book here with me. As far as > I can tell, it doesn't provide the answer. > > To recap: > > - The computer called VALIANT is joined to my Samba domain. > - I can log in with any user I've added using pdbedit (I'm using tdbsam) > - These users also have a true Unix account > - I can change password for both Windows/Linux, from Windows because of > "passwd program =" and "passwd chat =" in my smb.conf. > - If I add "valid users = sa" to my smb.conf, I can still access my shares > but cannot log into the domain. > - root can always log into the domain regardless of the valid users options. ---- see Jerry's answer pertaining to valid users = sa in [global] which picked up on something I didn't consider.
also note that 'Valiant' didn't show up in the list when you performed the 'smbclient -L Samba -U sa' command so I'm not convinced it is joined to domain. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba