Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007, Installation Manual

Page: 723 / 982

version 3, this is now the default). In addition, it is necessary to prepare user accounts
and passwords in an encryption format that conforms with Windows. Do this with the
command
smbpasswd -a name
. Create the domain account for the computers, re-
quired by the Windows NT domain concept, with the following commands:
Example 37.4 Setting Up a Machine Account
useradd hostname\$
smbpasswd -a -m hostname
With the
useradd
command, a dollar sign is added. The command
smbpasswd
inserts
this automatically when the parameter
-m
is used. The commented configuration example
(
/usr/share/doc/packages/Samba/examples/smb.conf.SuSE
) contains
settings that automate this task.
Example 37.5 Automated Setup of a Machine Account
add machine script = /usr/sbin/useradd -g nogroup -c "NT Machine Account" \
-s /bin/false %m\$
To make sure that Samba can execute this script correctly, choose a Samba user with
the required administrator permissions. To do so, select one user and add it to the
ntadmin
group. After that, all users belonging to this Linux group can be assigned
Domain Admin
status with the command:
net groupmap add ntgroup="Domain Admins" unixgroup=ntadmin
More information about this topic is provided in Chapter 12 of the Samba HOWTO
Collection, found in
/usr/share/doc/packages/samba/
Samba-HOWTO-Collection.pdf
.
37.6 Samba Server in the Network
with Active Directory
If you run Linux servers and Windows servers together, you can build two independent
authentication systems and networks or connect servers to one network with one central
authentication system. Because Samba can cooperate with an active directory domain,
you can join your SUSE Linux Enterprise Server to Active Directory (AD).
Samba 705