Topic: SME v5 as a domain controller

[Sidney]

Hello,

  I am running SME v5 and I would like to make it a Primary domain controller. "PDC"
Can this be done?

Also I would like to add a NT 4.0 server as a Backup domain controller. "BDC"
Can this be done?


Any help would be great!

Thanks

[WXP]

PDC is done by tell him to do so

Just go in the manager and somewhere there is an option to let your sme server be the pdc..
If you want to log on nt 4 machines you wont have any trouble.. but if you want to log on win2000 or winxp machine I suggest you take a look at

http://www.myezserver.com/docs/mitel/samba-upgrade-howto.html

See ya

[Rob Hillis]

For info on setting up SMEv5 as a PDC for Win2k machines, see http://www.myezserver.com/docs/mitel/samba-upgrade-howto.html

However, Samba is *not* capable of acting as a BDC.

[Sidney]

Thanks WXP and Rob,

I have couple more questions.

could this be done?
If I set my SME to be a PDC with the domain name as e-smith.
Have a Nt 4.0 server login to the e-smith domain?

Does it see the user accouts that is on the SME?

If I added a user account on the Nt Server "BDC" will it automatical add the account to the PDC?

Here is what I am trying to accomplish.
I want to setup an nt 4.0 server as a BDC
and configure it to be a Dial-in server "RAS"
Use the same accounts on the SME.

[WXP]

Woooa dude.. Many people here didnt try to make work a PDC Linux and a BDC NT...

I didnt so I couldnt tell ya if It could work... But actually it shouldnt..

See you

ps: Please tell us back if you tried something with (didnt) work..

[Dan Brown]

Samba is not currently capable of working as or with a BDC, AFAIK.

[Jochen Hoegerl]

Sidney wrote:
>
> Thanks WXP and Rob,
>
> I have couple more questions.
>
> could this be done?
> Does it see the user accouts that is on the SME?
> If I added a user account on the Nt Server "BDC" will it
> automatical add the account to the PDC?
>
> Here is what I am trying to accomplish.
> I want to setup an nt 4.0 server as a BDC
> and configure it to be a Dial-in server "RAS"
> Use the same accounts on the SME.

Your NT box won't see your SME accounts and vice versa.....different technique.
You can setup your accounts twice, and tell your users that they have to change
passwords on two systems, or you can think about implementing a RADIUS
service (for winnt you find it in the option pack) and authenticate your users
against the accounts on the RADIUS-Server. I haven't done this with Linux yet.
There should be a client/server in the RedHat distro.

Hope this helps

jochen

[Les Mikesell]

If you drop in the contributed dial-in package (or mgetty with a tweak or two) and put the modem(s) on the SME server it should work for dial-ins and let you keep the passwords all in one place.

[Sidney]

Les,

  I have the contributed install but I can't figure out how to get it to require a username and password.

Do you know how to tweak it so it will require this information?

Thanks

[Greg Zartman]

>Your NT box won't see your SME accounts and vice versa.....different technique.
This is an incorrect statement.  The Win NT machine can see and use all accounts on the SME machine via Samba ACL mapping.  To prove this to yourself, right click on a local folder, select security, then the Advanced button.  If you are running Samba 2.2.2 on your SME machine and have it setup correctly, SME user accounts will be mapped as DOMAINNAME/USERNAME.  

On all of my client machines and have one and only one local machine account and thats the admin account.  I manually ditch everything else.

You can also view them with the WIN NT UserManager for Domains admin tool.  The current version of Samba won't allow you to actual edit anything with this tool, which is a good thing as making edits here would really mess up the SME user account structure.

Dan and the others who have stated that Samba can't act as a PDC are 100% correct.  Samba won't have the ability to act as a BDC on a Microsoft network for some time.  Probably not until at least Samba Version 3.0

Greg Zartman