HP-UX HB v13.00 Ch-20 - CIFS

HP-UX Handbook – Rev 13.00 Page 25 (of 40)
Chapter 20 CIFS
October 29, 2013
and realname "Domain guest":
useradd -g guest -c "Domain Guest" -s /usr/bin/sh domguest
Create a user that will be the admin-user which needs to have unix-id "0" to create computer
accounts etc.:
useradd -g sys -c "Samba Admin" -s /sbin/sh -d /home/sambaadm –s /bin/false
sambaadm
You will have to change the uid manually to "0" in /etc/passwd. You need to put this kind of
root-user into the smbpasswd as well!
If you are using NIS, do not forget to publish the new passwd and group file into your
environment.
smb.conf file should look like this:
[global]
workgroup = SAMBADOM
security = user
domain logon = yes
domain master = yes
local master = yes
encrypt passwords = yes
admin users = sambaadm
printer admin = sambadm
domain admin group = sambaadm, @adm
domain guest group = @guest
logon script = \\%N\%U.bat
[netlogon]
comment = The domain logon service
path= /var/opt/samba/netlogon
writeable = no
guest ok = no
The above configuration parameters do significantly show that the HP CIFS Server is configured
as a PDC:
domain logons = yes this parameter indicates that cifs server is acting like a PDC
encrypt passwords = yes if this parameter is set to yes, passwords used to authenticate users
will be encrypted. This parameter must be set to yes when the HP
CIFS Server acts as a PDC. This is as well needed for WinNT-,
WinXP- and Win2k-clients as these send encrypted passwords.
domain admin group this parameter offers a list of users which have permissioins as
domain administrators.
admin users is a share-level option to have users administering a share, all
operations of the listed users will then be performed as root.