I'd like to create a Samba server with some shares that have access controlled via accounts on the domain, but without joining the machine to the domain? Is this possible?
Asked
Active
Viewed 771 times
3
-
I don't think this is possible. – Zoredache Jun 28 '10 at 04:31
2 Answers
3
This is possible, but kind of backwards. In order to do it you need to configure PAM on the server to use an LDAP store, then use AD as the LDAP store. That way accesses to the server via Samba (or any other PAM-compatible service for that matter) will run through PAM, which in turn will check against LDAP, which is actually AD. All you need is a user-account in AD to allow the LDAP bind, no need to join the domain.
![](../../users/profiles/3038.webp)
sysadmin1138
- 131,083
- 18
- 173
- 296