HP CIFS Server 2.2i Administrator's Guide version A.01.11.01

Primary Domain Controller (PDC) Support
Join a Windows Client to a Samba Domain
Chapter 4 95
Join a Windows Client to a Samba Domain
1. Verify the following parameters in the smb.conf file:
Set the security parameter to “user.”
Set the workgroup parameter to the name of the domain.
Set the encrypt passwords parameter to “yes.”
[global]
security = user
workgroup = SAMBADOM #SAMBA Domain name
domain logon = yes
encrypt passwords = yes
2. Create the UNIX or POSIX account for a Windows Client:
• Use the following command to create the POSIX account for a
Windows client in the /etc/passwd file if LDAP is disabled:
$ useradd -c NT_workstation -d /home/temp -s \
/bin/false client1$
As an example, the resulting entry in the /etc/passwd file for a
client machine named “client1” would be:
client1$:*:803:808:NT_Workstation: \
/home/temp:/bin/false
where 803 is a uid and 808 is the group id of a group called
“machines.” A uid or group id can be any unique number. You
may find that uid values 0 through 100 are considered special,
and/or server specific. This may, or may not apply to your system.
The machine account is the machine’s name with a dollar sign
character (“$”) appended to it. The home directory can be set to
/home/temp. The shell field in the /etc/passwd file is not used
and can be set to /bin/false.
• Use the following command to create the posixAccount entry for
a Windows client in the LDAP directory if LDAP is enabled:
$ /opt/samba/LDAP/smbldap-tools/smbldap-useradd.pl \
client1$