<html><body>Hi Detlev If I have understood you correctly, you want to let Windows users access Samba "shares" using their IPA username/passwords? If so it is possible. We have both Windows and OSX workstations accessing unix fileshares like that. We did it more or less along the lines described here: <a href="http://techslaves.org/2011/08/24/freeipa-and-samba-3-integration/">http://techslaves.org/2011/08/24/freeipa-and-samba-3-integration/</a> If you search the archives of this forum with FreeIPA Samba Lamb you will find some previous threads on this topic. Chris <img width="16" height="16" src="cid:1__=8FBBF547DFA89DC28f9e8a93df938690918c8FB@" border="0" alt="Inactive hide details for Detlev Habicht ---06/16/2016 10:49:49---Hi, first i thought, it is an awkward question, but my smart ">Detlev Habicht ---06/16/2016 10:49:49---Hi, first i thought, it is an awkward question, but my smart colleague here also From: Detlev Habicht <detlev.habicht@ims.uni-hannover.de> To: freeipa-users@redhat.com Date: 06/16/2016 10:49 Subject: [Freeipa-users] IPA, Samba and how can a Windows client access it Sent by: freeipa-users-bounces@redhat.com <hr width="100%" size="2" align="left" noshade style="color:#8091A5; "> Hi, first i thought, it is an awkward question, but my smart colleague here also cannot help me, so i try it: I read this and i have installed it: "Howto/Integrating a Samba File Server With IPA" <a href="http://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA">http://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA</a> This is working as described. But this works only for Linux so far. We are not able to find a configuration, so a single Windows client have access to the Samba Server. Only with his IPA account (username and password)! I don’t want to use something like trusted AD. As i said, for the Windows clients i want only to use an username and password for Samba, using IPA. Well, this is the configuration as described in the docu: [global] workgroup = MY realm = MY.REALM dedicated keytab file = FILE:/etc/samba/samba.keytab kerberos method = dedicated keytab log file = /var/log/samba/log.%m security = ads Any idea what i can do for my wishes? Thank you! Detlev -- Detlev | Institut fuer Mikroelektronische Systeme Habicht | D-30167 Hannover +49 511 76219662 <a href="mailto:habicht@ims.uni-hannover.de">habicht@ims.uni-hannover.de</a> --------+-------- Handy +49 172 5415752 --------------------------- <tt>-- Manage your subscription for the Freeipa-users mailing list: </tt><tt><a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></tt><tt> Go to </tt><tt><a href="http://freeipa.org">http://freeipa.org</a></tt><tt> for more info on the project</tt> </body></html>