Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to create a Samba server with some shares that have access controlled via accounts on the domain, but without joining the machine to the domain? Is this possible?

share|improve this question
I don't think this is possible. – Zoredache Jun 28 '10 at 4:31

This is possible, but kind of backwards. In order to do it you need to configure PAM on the server to use an LDAP store, then use AD as the LDAP store. That way accesses to the server via Samba (or any other PAM-compatible service for that matter) will run through PAM, which in turn will check against LDAP, which is actually AD. All you need is a user-account in AD to allow the LDAP bind, no need to join the domain.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.