I'm using Beyond Trust to integrate with active directory on a CentOS 5.6 server. I'm using the interop-install that comes with Beyond Trust to configure SAMBA, which works fine. However, I have some local accounts that I want to still work & for policy reasons, I can't create them in AD. Is there a way to configure SAMBA to use both authentication methods, or use ADS as primary & fall back on SMBPASSWD?
In your smb.conf you can specify the 'auth methods' parameter, listing which authentication methods you want to use, such as:
The parameters are read left to right; with the example above, Samba will try to match the username with the local smbpasswd first before going trying to match AD.
Note that you may want to replace sam with sam_ignoredomain depending on your version of Samba and the format of your username. Play around with what works for you.
Got it working with:
Everything else is vanilla SAMBA config.