[plug] Samba as NT PDC

[Paul Dean]

good...

At 10:45 PM 8/05/2001 +0800, you wrote:
>Well, I'm using Samba 2.2 on a RH 6.2 box and it serves to mostly Win98
>clients and a couple of Win95 clients.
>
>This is the config for the machine I run:
>
>#======================= Global Settings
>=====================================
>[global]
>
># workgroup = NT-Domain-Name or Workgroup-Name
>    workgroup = GME
>
># server string is the equivalent of the NT Description field
>    server string = Samba Server
>
># This option is important for security. It allows you to restrict
># connections to machines which are on your local network. The
># following example restricts access to two C class networks and
># the "loopback" interface. For more examples of the syntax see
># the smb.conf man page
>    hosts allow = 192.168.0. 192.168.1. 127.
>
># this tells Samba to use a separate log file for each machine
># that connects
>    log file = /var/log/samba/log.%m
>
># Put a capping on the size of the log files (in Kb).
>    max log size = 50
>
># Security mode. Most people will want user level security. See
># security_level.txt for details.
>    security = user
>
># You may wish to use password encryption. Please read
># ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
># Do not enable this option unless you have read those documents
>   encrypt passwords = no
>
>
># Most people will find that this option gives better performance.
># See speed.txt and the manual pages for details
>    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
># Configure Samba to use multiple interfaces
># If you have multiple network interfaces then you must list them
># here. See the man page for details.
>    interfaces = 192.168.0.254/24
>
># Browser Control Options:
># set local master to no if you don't want Samba to become a master
># browser on your network. Otherwise the normal election rules apply
>    local master = yes
>
># OS Level determines the precedence of this server in master browser
># elections. The default value should be reasonable
>    os level = 33
>
># Domain Master specifies Samba to be the Domain Master Browser. This
># allows Samba to collate browse lists between subnets. Don't use this
># if you already have a Windows NT domain controller doing this job
>    domain master = yes
>
># Preferred Master causes Samba to force a local browser election on startup
># and gives it a slightly higher chance of winning the election
>    preferred master = yes
>
># Enable this if you want Samba to be a domain logon server for
># Windows95 workstations.
>    domain logons = yes
>
>    logon script = logon.bat
>
>    dns proxy = no
>
># Network time server
>time server = yes
>
>#============================ Share Definitions
>==============================
>[homes]
>    comment = Home Directories
>    path = /home
>    browseable = no
>    writable = yes
>
># Un-comment the following and create the netlogon directory for Domain
>Logons
>  [netlogon]
>    comment = Network Logon Service
>    path = /home/netlogon
>    guest ok = yes
>    writable = no
>    share modes = no
>
>[public]
>    comment = Public stuff
>    path = /home/samba
>    guest ok = no
>    writable = yes
>    printable = no
>    write list = @staff
>
>******* End of config file.
>
>I'd make a backup of the default config file before copying and pasting
>someone else's.  Because it has some useful info in it if you need to setup
>other things other than what I use above.  Basically I've got it setup to
>share out some directories to certain users (I've editted out some of the
>shares) and have a public share that people can use to share files and which
>anti-virus software can auto-run from.  Its also got a logon script which
>auto mount the drives, set the time to the logon server's clock and also
>autoruns virus updates in the background.  But be very careful with carriage
>returns between Linux and Windows, it can break things, in particular logon
>scripts running from the netlogon share.  Also that config is setup to use
>plain text passwords, by default, Windows uses encrypted passwords.  So to
>enabled plain text passwords in Win9x, do this:
>
>Go into the registry entry and you have to create a new DWORD value in:
>
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VNETSUP
>
>You name the new DWORD value "EnablePlainTextPassword" and give it the value
>of "1".
>
>Once you've done it on one computer, you can simply export that registry
>item and stick it on a disk and import it into all of the workstations.  Oh
>and of course Windows will require a restart (just for something different)
>to read the registry changes.
>
>You can just copy this into a file with the extension *.reg and you can
>import it into the registry:
>
>REGEDIT4
>
>
>
>[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VNETSUP]
>
>"EnablePlainTextPassword"=dword:00000001
>
>
>I've tried using encrypted passwords before, but it didn't seem to work
>properly at all.
>
>Hope that helps.
>
>Regards,
>
>
>Ben Jensz
>
>----- Original Message -----
>From: Brian Tombleson <brian at paradigmit.com.au>
>To: <plug at plug.linux.org.au>
>Sent: Tuesday, May 08, 2001 10:31 PM
>Subject: [plug] Samba as NT PDC
>
>
> > Hello all Samba Gurus :)
> >
> > I'm wondering if anyone can offer the commercial service of replacing an
>NT4
> > PDC with an appropriate Linux/Samba (or alternative) back-end ?
> >
> > I want to get someone's server off NT but not let the users (Win95
> > workstation) see any difference.
> >
> > I know I could do this as well as can be done, but it would take me too
>long
> > as I'd have to be doing a lot of learning, but I simply don't want it to
> > take that long.  Any takers?
> >
> > - Brian.
> >
> >


Regards

Paul Dean
IT Support Officer
Canning College
Computing Centre
Ph: 9350 5430
Mob: 0408 902 206
paul at canningcollege.wa.edu.au