Home / server / Questions / 145852
In Process
arathorn
Asked: 2010-05-28 05:13:04 +0800 CST

Can I set up Samba shares that are authenticated against a domain *without* being joined to a domain?

  • 772

I'd like to create a Samba server with some shares that have access controlled via accounts on the domain, but without joining the machine to the domain? Is this possible?

active-directory authentication samba ntlm

2 Answers

  1. This is possible, but kind of backwards. In order to do it you need to configure PAM on the server to use an LDAP store, then use AD as the LDAP store. That way accesses to the server via Samba (or any other PAM-compatible service for that matter) will run through PAM, which in turn will check against LDAP, which is actually AD. All you need is a user-account in AD to allow the LDAP bind, no need to join the domain.

    • 3
    • 0