Samba Primary Domain Controller on Ubuntu Dapper Drake
Friday, 25 August 2006
A Samba Primary Domain Controller is useful if you want to secure access for a small business network.
- apt-get install samba
- sudo vim /etc/samba/smb.conf
- comment out
invalid users = root
… otherwise you can’t add machine account from a client computer
- wins support = yes
- security = user (i.e. no anonymous access)
- domain logons = yes (otherwise it won’t be a domain controller)
- domain master = yes (a primary domain controller)
- preferred master = yes (master browser for netbios)
- add user script = /usr/sbin/useradd -m %u
- add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null -g machines %u
- uncomment [netlogon] section
- uncomment [profiles] section
Troubleshooting
- XP Explorer crashes twext.dll http://support.microsoft.com/kb/903234/
- Samba 3 supports sign-and-seal. No need to tweak any registries to support Windows XP or Windows 2000.
- smbclient is your friend in troubleshooting.
- smbclient -U root //yourserver/sharename
- smbclient -L yourserver
- Terpstra’s Samba-3 by Example
- Troubleshooting samba checklist, Troubleshooting and here. I wish someone would turn this into a script. It’ll save a lot of troubleshooting.
