DansGuardian Documentation Wiki

You are here: Main Index » using_ntlm_for_user_identification


|

Wiki Information

Differences

This shows you the differences between the selected revision and the current version of the page.

using_ntlm_for_user_identification 2010/04/04 17:14 using_ntlm_for_user_identification 2010/04/04 17:17 current
Line 208: Line 208:
Be sure you have the __Samba__ "root" //<user>// and //<password>// to substitute in on the command line of any Samba executable that needs them. You must specify a __Samba__ account, __not a *nix account__; it's likely that you will not be able to use any *nix account --not even 'root'-- anyplace where <user> and <password> are separated by a percent sign. You probably already have the Samba superuser account from the process of installing Samba. Be sure you have the __Samba__ "root" //<user>// and //<password>// to substitute in on the command line of any Samba executable that needs them. You must specify a __Samba__ account, __not a *nix account__; it's likely that you will not be able to use any *nix account --not even 'root'-- anyplace where <user> and <password> are separated by a percent sign. You probably already have the Samba superuser account from the process of installing Samba.
-If for some reason Samba does not already have a satisfactory superuser account, you can construct one. Use Samba procedured to create a user (usually just a regular user, but some versions of Samba may have special procedures), except with a)\ name 'root', b)\ uidNumber "0" c)\ sambaSID "//<domainSID>//-500" and d)\ sambaPrimaryGroupSID "//<domainSID>//-512". (The very last short portion of a full SID -typically the part after the last dash- is called the RID [Relative ID]. Many RIDs in the 5xx range have hard-coded meanings to Windows. Note a common documentation error specifies the Domain Admins RID as 200 [decimal] rather than 0x200 [hex], making it seem it's not really 512. Disregard any effects of this documentation error.)+If for some reason Samba does not already have a satisfactory superuser account, you can construct one. Use Samba procedures to create a user (usually just a regular user, but some versions of Samba may have special procedures), except with a)\ name 'root', b)\ uidNumber "0" c)\ sambaSID "//<domainSID>//-500" and d)\ sambaPrimaryGroupSID "//<domainSID>//-512". (The very last short portion of a full SID -typically the part after the last dash- is called the RID [Relative ID]. Many RIDs in the 5xx range have hard-coded meanings to Windows. Note a common documentation error specifies the Domain Admins RID as 200 [decimal] rather than 0x200 [hex], making it seem it's not really 512. Disregard any effects of this documentation error.)
==Details Option #1 - Samba-Only == ==Details Option #1 - Samba-Only ==