Samba as a Primary Domain controller

samba pdc:-



workgroup = GEOMAT (your workgroup name)
security = user
password encrypted = true

domain logons = yes
domain master = yes
local master = yes
preferred master = yes
os level = 64

"os level = 64" line is explained in "man smb.conf". It will effect whether the server wins browsing elections. You can probably leave it as the default.


enable logon path=\\%N\%U\profile

is storing the profile in the user's home directory ,this is Samba's default


logon drive = H;
add machine script = = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u

every time a machine , joins a domain the server needs to recognize that computers host name

[homes]
comment = Home Directories
browseable = no
writeable = yes

to enable the default home directory shares. This will share each user's home directory as \\server\username



[netlogon]

comment = Network logon services
path = /home/samba/netlogon
guest ok = yes
read only = yes
share modes = no


create the netlogon directory for Domain Logons (you need to configure Samba to act as a domain controller too.)


[profiles]

comment = users profile
path = /home/samba/profiles
guest ok = no
create mask = 0600
directory mask = 0700

=========================================================================================



# groupadd -g 201 machines
# mkdir -m 0775 /home/netlogon

mkdir /home/samba /home/samba/profiles
chmod 1757 /home/samba/profiles

smbpasswd -a root
add the samba users


Windows side:-

WinXP pro required
Samba Primary Domain Controller is ready to accept client requests.
Joining a Windows machine to Samba PDC.

1.Right Click on Mycomputer.
2.Go to Properties select the Computer Name tab.
3.Click Change.
4.Click Domain radio button, enter the Domain name like GEOMAT, then click ok.
5.At the prompt, enter the user name root and root smbpassword and then click OK.
6.Click OK twice to return to the System Properties dialog box.
7.Click OK, and then click Yes to restart the computer.


Windows xp is ready to login with samba user and make sure you should use smbpassword while user login.


NB:- Tested in Ubuntu !0.04