Red Hat Enterprise Linux 5 Administration Unleashed

Samba File Sharing 307FIGURE 13.6Samba Server Settings13On the Security tab, configure the following:. Authentication Mode: Select one of the following:. ADS: The Samba server acts as a domain member in an Active DirectoryDomain (ADS) realm. Kerberos must be installed and properly configured onthe server for this authentication mode to work. In addition, use the netutility to make Samba a member of the ADS realm. The net utility can beinstalled with the samba-common package. Refer to the man page for net (usethe command man net) for details. Be sure to also set the Kerberos Realm,which must be in all uppercase letters, such as EXAMPLE.COM.NOTEThis option does not configure Samba to be an ADS Controller.. Domain: Authentication is achieved by passing the username and passwordcombination to a Windows NT Primary or Backup Domain Controller just likea Windows NT Server. A valid Linux system account must exist on the Sambaserver so the Windows Domain Controller account can be mapped to it. Setthe Authentication Server field to the NetBIOS name of the Primary or BackupDomain Controller that will perform the authentication.If this option is selected, the Samba server must be added to the Windows NTDomain with the net utility provided by the samba-common package. Also,Encrypted Passwords must be set to Yes.. Server: Account verification is passed to another Samba server. If that fails, theserver tries to authenticate locally using the User mode. Set the AuthenticationServer field to the NetBIOS name of the remote Samba server that will performthe authentication. Encrypted Passwords must be set to Yes if the remoteserver used for authentication supports it.