On-the-Fly Creation of Machine Trust Accounts
The third (and recommended) way of creating Machine Trust Accounts is simply to allow the Samba server to
create them as needed when the client is joined to the domain.
Since each Samba Machine Trust Account requires a corresponding UNIX account, a method
for automatically creating the UNIX account is usually supplied; this requires configuration of the
add machine script option in smb.conf . This method is not required; however, corresponding UNIX
accounts may also be created manually.
Here is an example for a Red Hat Linux system:
|
[global]
|
add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u
|
|