HP CIFS Server Administrator's Guide Version A.03.01.01 (5900-1282, May 2011)

domain logon = yes
domain master = yes
encrypt passwords = yes
[netlogon]
comment = The domain logon service
path = /var/opt/samba/netlogon
writeable = no
guest ok = no
[profiles]
comment = profiles Service
path = /etc/opt/samba/profiles
read only = no
create mode = 600
directory mode = 770
2. The smb.conf file is as shown if the HP CIFS Server acting as a PDC uses the LDAP backend
to store UNIX and Samba account databases:
[global]
workgroup = SAMBADOM #Samba Domain
security = user
domain logon = yes
domain master = yes
encrypt passwords = yes
passdb backend = ldapsam:ldap://ldapserver:389
3. /var/opt/samba/netlogon subdirectory for the domain logon service exists.
NOTE: security: Set this parameter to user to ensure that Windows users, client machine
accounts, and passwords are stored and managed in the smbpasswd file or LDAP backend.
domain master: Set this parameter to yes in order for the HP CIFS Server to act as a PDC.
domain logon: Set this parameter to yes to provide netlogon services.
Encrypt passwords: You set this parameter to yes, the passwords used to authenticate users
are encrypted. You must set this parameter to yes when you configure a HP CIFS Server acting
as a PDC.
Configure the HP CIFS Server as a BDC
When configuring HP CIFS Server to act as a Backup Domain Controller (BDC), you need to
configure the relative domain controller parameters in the /etc/opt/samba/smb.conf file by
using the SWAT tool or an editor. The smb.conf file is shown as follows:
• The smb.conf file is as shown if the HP CIFS Server acting as a BDC does not use the LDAP
backend:
[global]
workgroup = SAMBADOM # Samba Domain
security = user
domain logon = yes
domain master = no
56 Windows Style Domains