HI

I was trying to use samba to treat the smbpassword database
as separate to the unix user accounts database.

I came across a forum which stated that this was impossible.
I would like to confirm this as it is difficult to change the way the
users log on to there pcs and it would be much easier to add
a separate samba user without having to make a mess ot the
unix passwd database.

basically i would like to be able to run
smbpasswd -a username
without having to first add the local unix accout
Can this be done?

Thanks

I don't know exactly, but I think it is imposibble.

I have a problem that appears to be the reverse. I have samba set up on my Debian box so that I can now login to it using my user name and password from accounts in my Windows 2000 Active Directory network. I thought this was quite impressive as samba is configured to create the home folder for these users automatically. The challenge is is that these Active Directory users (and groups) don't appear as local users on the Debian box therefore they can't mount or make use of any devices and there access is denied to all components in '/dev' !!!
Is there something I'm missing as by the sound of things this is meant to be impossible you say. There is no entry in passwd but I can still logon and surf the net, run apps etc. Getent shows all the accounts local and AD including the accounts from a separate trusted NT Domain too.

How can I get it so that AD users are part of the the Linux 'users' group with manually adding things?

Unfortunatly I know nothing about active directory on Micro$oft systems. One thing is certain if you try to add or remove users with "smbpasswd" which are NOT in "passwd" or in "shadow" it says that first you must add a linux user to grant him rights via samba. This is logic becouse any folder must have an owner and a group ...
In your case I suggest to look at those misterouse user directories and see the owner and group and maybe you'll figure out what is realy happening.
Good luck.