Samba Netlogon

[Willo9]

---

I am using Samba on the lastest CentOS 5 64bit however the netlogon for windows authentication isn't working. Can you help me, where do I start?

[Willo9]

Here is the config file..

[global]
log level = 2
workgroup = WORKGROUP
netbios name = SERV
passdb backend = tdbsam
security = user
hosts allow = 192.168.1. 127.0.0.1
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = \
 /usr/sbin/useradd -s /bin/false -d /dev/null \
 -g machines %u
# The following specifies the default logon script
# Per user logon scripts can be specified in the user
# account using pdbedit
logon script = logon.bat
# This sets the default profile path.
# Set per user paths with pdbedit
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 64
preferred master = Yes
domain master = Yes
idmap uid = 15000-20000
idmap gid = 15000-20000

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
writable = Yes

[netlogon]
comment = Network Logon Service
path = /home/netlogon
admin users = andy.h me
guest ok = No
browseable = No
writable = No

# For profiles to work, create a user directory under the
# path shown. mkdir -p /var/lib/samba/profiles/john
[Profiles]
comment = Roaming Profile Share
path = /home/samba/profiles
read only = No
browseable = No
guest ok = Yes
profile acls = Yes

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = Yes
available = Yes

[signmem]

mabey krb5 + winbind service suit for you.

http://wiki.squid-cache.org/ConfigExamples/WindowsAuthenticationNTLM

http://www.cendio.com/support/tag/winauth.html

[Willo9]

That doesn't really help.

I was told I don't need Kerberos and OpenLDAP before.

I want samba to control netlogon and a shared folder.

[signmem]

you wanna be domain master?
so I have no idea ..

if you done the job. please mail one copy to me. I wanna learn how to setup it.

Thank you very much.

my mail address: signmem at hotmail.com