Configure the HP CIFS Server as a PDC

When configured to act as a Primary Domain Controller (PDC), the HP CIFS Server should create machine accounts for Windows Clients (member servers). To enable this feature, choose "Primary Domain Controller" when executing samba_setup, then verify the following:

The smb.conf file is as shown if the HP CIFS Server acting as a PDC does not use the LDAP backend:
[global]
workgroup = SAMBADOM #Samba Domain
security = user
domain logon = yes
domain master = yes
encrypt passwords = yes
[netlogon]
comment = The domain logon service
path = /var/opt/samba/netlogon
writeable = no
guest ok = no
[profiles]
comment = profiles Service
path = /etc/opt/samba/profiles
read only = no
create mode = 600
directory mode = 770
The smb.conf file is as shown if the HP CIFS Server acting as a PDC uses the LDAP backend to store UNIX and Samba account databases:
[global]
workgroup = SAMBADOM #Samba Domain
security = user
domain logon = yes
domain master = yes
encrypt passwords = yes
passdb backend = ldapsam:ldap://ldapserver:389
/var/opt/samba/netlogon subdirectory for the domain logon service exists.




	NOTE: `security`: Set this parameter to `user` to ensure that Windows users, client machine accounts, and passwords are stored and managed in the `smbpasswd` file or LDAP backend. `domain master`: Set this parameter to `yes` in order for the HP CIFS Server to act as a PDC. `domain logon`: Set this parameter to `yes` to provide netlogon services. `Encrypt passwords`: You set this parameter to `yes`, the passwords used to authenticate users are encrypted. You must set this parameter to `yes` when you configure a HP CIFS Server acting as a PDC.

Configure the HP CIFS Server as a PDC

Technical documentation

» Table of Contents

» Glossary

» Index