What is the Samba Administrator User?

English Network/Internet
#1

Hello everyone,

I just my Samba + LDAP (primary domain controller) working and all the regular users can browse the shares just fine, but I can’t figure out what the Administrator user is. I’ve looked in /etc/samba/smb.conf and YaST, but I can’t find what the Administrator user name is. When I first set up the Samba server, I was asked to enter a password for the Administrator.

Basically, I’m trying to find out what the Administrator username is, so I can join computers to the domain.

Thanks in advance

PS: Here’s my smb.conf: # smb.conf is the main Samba configuration file. You find a full commented # ve - Pastebin.com](http://pastebin.com/zpy5YKjh)

#2

  1. Chapter

  2. Chapter

On-the-Fly Creation of Machine Trust Accounts

The third (and recommended) way of creating Machine Trust Accounts is simply to allow the Samba server to create them as needed when the client is joined to the domain.

Since each Samba Machine Trust Account requires a corresponding UNIX account, a method for automatically creating the UNIX account is usually supplied; this requires configuration of the add machine script option in smb.conf. This method is not required; however, corresponding UNIX accounts may also be created manually.

Here is an example for a Red Hat Linux system:

[global]
add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u

Windows 200x/XP Professional Client

When the user elects to make the client a domain member, Windows 200x prompts for an account and password that has privileges to create machine accounts in the domain.

A Samba administrator account (i.e., a Samba account that has root privileges on the Samba server) must be entered here; the operation will fail if an ordinary user account is given. The necessary privilege can be assured by creating a Samba SAM account for root or by granting the SeMachineAccountPrivilege privilege to the user account.

For security reasons, the password for this administrator account should be set to a password that is other than that used for the root user in /etc/passwd.

The name of the account that is used to create domain member machine trust accounts can be anything the network administrator may choose. If it is other than root, then this is easily mapped to root in the file named in the smb.conf parameter username map = /etc/samba/smbusers.

The session key of the Samba administrator account acts as an encryption key for setting the password of the machine trust account. The Machine Trust Account will be created on-the-fly, or updated if it already exists.

#3

isemionov: Thanks! Got it working :slight_smile: