Samba authentication when AD is down

active-directoryfreebsdsamba

I have succesfully added my Freebsd 9 to a Windows server 2008 R2 AD Domain.
Using samba 3.6.

The problem is that i want to be able to connect to the shares when the AD server is down.

Because the backup of the AD server is placed onto the BSD 9 system, so when booting the windows server CD repair i cannot connect to the share because of

session setup failed: NT_STATUS_NO_LOGON_SERVERS,

How to make samba use AD and if needed fail over to local passwords only?

EDIT:

The setup is the following.

machine1 Windows Server 2008 R2.
machine2 Freebsd amd64 9.0.

machine1 is Active Direcotory Domain Controller.
machine1 is PDC WITHOUT any BDC.

machine2 is hosting samba 3.6 and a samba share called backup.

machine2 has joined the AD domain "DOMAIN" using kerberos.

on machine2
getent passwd shows both AD users and local users.

on machine1
\machine2\backup IS accesable with AD user account.

Problems
\machine2\backup IS NOT accesable with machine2 unix user account.

machine2's role is to be a NAS to store the Windows Server Backup for machine1.
I can succesfully make a windows server backup to the share.

Considering this scenario.

machine1 crashes and needs bare bore restore.
machine1 gets booted from win2k8 DVD repair mode.

machine1 cannot get access to \machine2\backup because the AD is down.

Best Answer

Try This

2011/11/08 10:22:40.604819, 2] auth/auth.c:304(check_ntlm_password) check_ntlm_password: authentication for user [xxx.yyy] -> [xxx.yyy] -> [xxx.yyy] succeeded

[2012/01/11 09:09:00.430424, 2] auth/auth.c:314(check_ntlm_password) check_ntlm_password: Authentication for user [xxx.yyy] -> [xxx.yyy] FAILED with error NT_STATUS_WRONG_PASSWORD

Related Topic