samba-users August 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] enable client to join domain with no or

Re: [Samba] enable client to join domain with no or any password?

From: Jean-Jacques Moulis <jj_at_nospam>
Date: Tue Aug 17 2010 - 21:51:12 GMT
To: David Mathog <mathog@caltech.edu>, samba@lists.samba.org

On Tue, 17 Aug 2010 13:33:25 -0700 David Mathog <mathog@caltech.edu> wrote:

DM> I am trying to automate W7 joining to our Samba domain. It works fine
DM> through the Windows GUI from the W7 workstations. However, for a script
DM> one would have to store password used for domain access, and since that
DM> is the server's root password, I really don't want to hard code that
DM> into a file.

Grant the right to put a machine in the domain to a special user with
no other privileges on the PDC or on the clients.
it doesn't need to be able to login on the PDC or the clients
the storage of the password of such an account is a lesser problem.

SeMachineAccountPrivilege
This right controls whether or not the user can join client machines to a Samba-controlled domain

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html

-- Jean-Jacques Moulis Tel: (013) 281684 ISY Fax: (013) 139282 Linköping University E-mail: jj@isy.liu.se 581 83 Linköping -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba