Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP CIFS Server 2.2g Administrator's Guide: HP-UX 11.0, 11i version 1 and 2 > Chapter 4 Primary Domain Controller (PDC) Support

Configure the HP CIFS Server as a PDC

» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

When configured to act as a Primary Domain Controller (PDC), the HP CIFS Server should create machine accounts for Windows Clients (member servers). To enable this feature, choose “Primary Domain Controller” when executing samba_setup, then verify the following:

  1. The smb.conf file is as shown:

    [global]
    workgroup = SAMBADOM #Samba Domain
    security = user
    domain logon = yes
    domain master = yes
    encrypt passwords = yes

    [netlogon]
    comment = The domain logon service
    path = /var/opt/samba/netlogon
    writeable = no
    guest ok = no

  2. /var/opt/samba/netlogon subdirectory for the domain logon service exists.

NOTE: domain logons: This parameter must be set to “yes” in order for the HP CIFS Server to act as a PDC.

Encrypt passwords: If this parameter is set to “yes”, the passwords used to authenticate users will be encrypted. This parameter must be set to “yes” when a HP CIFS Server is configured to act as a PDC.

Configuration Options

The configurations shown in this section are not required for the basic PDC functionality.

Map an NT Domain Admin Group to a Unix Group

A Samba Server can be configured as a PDC to map a Windows NT domain admin group to the Unix group.

Modify the smb.conf file to set the global parameter named domain admin group to point to the Unix admin group and user. Example:

[global]
domain admin group = root @adm


In this example, a group called “adm” should be created by the user in the /etc/group file.

Map an NT Domain Guest Group to a Unix Group

A Samba Server can be configured as a PDC to map a Windows NT domain guest group to the Unix group.

Modify the smb.conf file to set the global parameter named domain guest group to point to the Unix guest built-in group and user. Example:

[global]
domain guest group = guest @guest

In this example, a group called “guest” should be created by the user in the /etc/group file.

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© Hewlett-Packard Development Company, L.P.