HP CIFS Server 3.0f Administrator's Guide verison A.02.03

Limitations

The following is a list of limitations for the BDC support:

• HP CIFS Server can only function as a BDC to an HP CIFS PDC.

• HP CIFS Server and MS Windows server can each function as a BDC to its own type of PDC.

• HP CIFS Server cannot create Security Account Management (SAM) update delta files. It cannot

interoperate with a PDC to synchronize the SAM from delta files that are held by a BDC.

• The Samba 3.0 BDC does not support replication to a PDC. Running a Samba 3.0 BDC with a non-LDAP

backend can have the difficulty in synchronizing the SAM database. Refer to

Table 5.1

, Domain

Backend Account Distribution Option, in the

Official Samba HOWTO and Reference Guide

for more

information on possible design configuration for a PDC/BDC infrastructure.

Domain Members

• The following member servers are supported:

Windows NT•

• Windows 2000 and Windows 2003

• HP CIFS Server

• Users on a domain member machine can access network resources within the domain. Some examples

of these resources are file and printer shares and application servers

• Domain members do not perform the user authentication for user logons. Instead, the member sends

the credentials to a domain controller via a secure channel. The domain controller checks the credentials

against those in its database and returns the results to the member server. Access is granted based on

the results returned

Configure the HP CIFS Server as a PDC

When configured to act as a Primary Domain Controller (PDC), the HP CIFS Server should create machine

accounts for Windows Clients (member servers). To enable this feature, choose "Primary Domain Controller"

when executing samba_setup, then verify the following:

1. The smb.conf file is as shown if the HP CIFS Server acting as a PDC does not use the LDAP backend:

[global]

workgroup = SAMBADOM #Samba Domain

security = user

domain logon = yes

domain master = yes

encrypt passwords = yes

[netlogon]

comment = The domain logon service

path = /var/opt/samba/netlogon

writeable = no

guest ok = no

[profiles]

comment = profiles Service

path = /etc/opt/samba/profiles

read only = no

create mode = 600

58 NT Style Domains