HP ProLiant DL380G5-WSS 3.7.0 HP StorageWorks HP Scalable NAS File Serving Sof - Page 415

Changes for ADS level security Set these parameters: • Workgroup = [short Domain Name] • security = ads • password server = [IP of the KDC, then other DCs] • realm = [WINDOWS DOMAIN] See the Samba Official HOWTO for more information about using net ads join to join Samba to the domain using ADS level security. Use net ads testjoin to test the join after the join has completed successfully. NOTE: All VHOSTs need to be kept active and running even if they are not serving any virtual servers. This is necessary to keep the member computer account secrets up-to-date with the Windows domain. This is done by default as long as the VHOST is not disabled. If a node is down for a prolonged time, Samba will need to be rejoined to the domain. Access should be tested on nodes that have been down for a period of time to be sure Samba is properly joined to the domain in case of a failover that causes Virtual Servers to be migrated to another node. Other windbind information HP Scalable NAS currently does not provide custom service monitors to monitor winbind daemons. Once configured, winbind can be started manually. See the Samba Official HOWTO for more information about winbind models and configuration variables. Either the RID model or the LDAP idmap backend needs to be used to assure that UIDs and GIDs are consistent across all cluster nodes. For more information about setting up winbind and the available winbind and idmap parameters, see the Samba Official HOWTO and use the man smb.conf command. Be sure to specify values for the following: • uid= [10000-20000] • gid=[10000-20000] There are no default ranges. These ranges must be outside the UIDs and GIDs assigned in other name services. HP Scalable NAS File Serving Software administration guide 415