On Mon, 2004-01-05 at 20:04, Craig White wrote:
> that's what winbind is for - to bind users & groups from the Windows
> domain to the local unix system so that they are recognized. Otherwise
> only local users will work and that ain't gonna happen.

Thanks for the tip.  Unfortunately, it looks like winbind still requires
a M$ domain.  From Chapter 21 of the samba manual
(http://us1.samba.org/samba/docs/man/winbind.html):

"Winbind unifies UNIX and Windows NT account management by allowing a
UNIX box to become a full member of an NT domain. Once this is done the
UNIX box will see NT users and groups as if they were ´nativeĦ UNIX
users and groups, allowing the NT domain to be used in much the same
manner that NIS+ is used within UNIX-only environments."

I have no M$ servers here, so I can't join the samba/winbind box to an
existing M$ domain.  I'll have to create a pseudo-domain with a samba
PDC.  However, it sounds like I will still need winbind to make the
integration happen between the samba PDC box and the worm2K boxen
joining the pseudo-domain.

I think I'm making this too confusing.  My new gentoo box should be
finished installing by the time I get home tonight.  I'll emerge the
latest samba on there tonight and see if I can get the wormden to join
the pseudo-domain with (and without) winbind.

If anyone is interested, I'll post a summary.

...Kevin