K, I'm stumped.
I have a Samba server (v3.0.20a) with security=DMAIN and using winbind
to authenticate non-local users against a W2K domain controller. This
setup happily serves out home directories and about six other shares.
I need to add a local UNIX account for a formerly Windows only user.
When I try useradd I get: user <usernameexists. This makes sense
becasue of winbind. What I cannot figure out is how 'erase' him so I
can create a local user account. I've read thru the man ages but I
can't see how to do this.

Stephen Carville wrote:
K, I'm stumped.

I have a Samba server (v3.0.20a) with security=DMAIN and using winbind
to authenticate non-local users against a W2K domain controller. This
setup happily serves out home directories and about six other shares.

I need to add a local UNIX account for a formerly Windows only user.
When I try useradd I get: user <usernameexists. This makes sense
becasue of winbind. What I cannot figure out is how 'erase' him so I
can create a local user account. I've read thru the man ages but I
can't see how to do this.

Did you try removing the account from Windows?

, what does he need as a Unix user? Does his account exist in
the /etc/passwd file or is it just his "home" directory that exists
locally? If the former, it would seem you don't need to create his
account. If the latter, did you try renaming his old home directory?

Gary Dale wrote:
Stephen Carville wrote:

>K, I'm stumped.
>>
>I have a Samba server (v3.0.20a) with security=DMAIN and using winbind
>to authenticate non-local users against a W2K domain controller. This
>setup happily serves out home directories and about six other shares.
>>
>I need to add a local UNIX account for a formerly Windows only user.
>When I try useradd I get: user <usernameexists. This makes sense
>becasue of winbind. What I cannot figure out is how 'erase' him so I
>can create a local user account. I've read thru the man ages but I
>can't see how to do this.

Did you try removing the account from Windows?

No. He needs a Windows account too. If nothing else for email. I could
remove the account and the recreate it afterwards but I was hoping for a
more elegant solution.

, what does he need as a Unix user? Does his account exist in
the /etc/passwd file or is it just his "home" directory that exists
locally? If the former, it would seem you don't need to create his
account. If the latter, did you try renaming his old home directory?

There is no account in /etc/passwd. That is what I need to create. He
now needs access to the UNIX systems as well as Windows systems.

I don't see how delteing his home directory will buy me anything.

Thank you for your reply.

Stephen Carville wrote:
Gary Dale wrote:
>Stephen Carville wrote:
>>
K, I'm stumped.

I have a Samba server (v3.0.20a) with security=DMAIN and using winbind
to authenticate non-local users against a W2K domain controller. This
setup happily serves out home directories and about six other shares.

I need to add a local UNIX account for a formerly Windows only user.
When I try useradd I get: user <usernameexists. This makes sense
becasue of winbind. What I cannot figure out is how 'erase' him so I
can create a local user account. I've read thru the man ages but I
can't see how to do this.
>>
>>
>Did you try removing the account from Windows?
>
No. He needs a Windows account too. If nothing else for email. I
could remove the account and the recreate it afterwards but I was
hoping for a more elegant solution.
>
>, what does he need as a Unix user? Does his account exist
>in the /etc/passwd file or is it just his "home" directory that
>exists locally? If the former, it would seem you don't need to create
>his account. If the latter, did you try renaming his old home directory?
>
There is no account in /etc/passwd. That is what I need to create.
He now needs access to the UNIX systems as well as Windows systems.

I don't see how delteing his home directory will buy me anything.

Thank you for your reply.

The reason useradd won't add the account could be because you already
have a home directory for the username. I don't know. You still haven't
said much about the Unix side of the picture. What is he doing as a Unix
user and how is your Unix security arranged? What services does he need
that he can't get from CIFS?

If he just needs access to the shares, he can still access them through
Unix using CIFS, or you can add an account for him in /etc/passwd with
the same user number as currently owns his home directory. In a simple
setup, if you make his local account number (on his workstation) the
same, you can also give him access via NFS.

However, you specified Unix systems (plural). I gather your Unix setup
might be more complicated and you may have a single Unix sign-on (but
not an integrated single sign-on with Windows or we wouldn't be having
this exchange). you may be using some kind of PAM for your Unix
authentication. Without more details, it's difficult to provide advice. :)

Stephen Carville wrote:
K, I'm stumped.

I have a Samba server (v3.0.20a) with security=DMAIN and using winbind
to authenticate non-local users against a W2K domain controller. This
setup happily serves out home directories and about six other shares.

I need to add a local UNIX account for a formerly Windows only user.
When I try useradd I get: user <usernameexists. This makes sense
becasue of winbind. What I cannot figure out is how 'erase' him so I
can create a local user account. I've read thru the man ages but I
can't see how to do this.

I'm thinking I can comment out the windbind in /etc/nswitch.conf, create
a unix user, set up the mappng in smbusers, then uncomment winbind.
I'll try that Monday.

Stephen Carville wrote:
Stephen Carville wrote:
>K, I'm stumped.
>>
>I have a Samba server (v3.0.20a) with security=DMAIN and using winbind
>to authenticate non-local users against a W2K domain controller. This
>setup happily serves out home directories and about six other shares.
>>
>I need to add a local UNIX account for a formerly Windows only user.
>When I try useradd I get: user <usernameexists. This makes sense
>becasue of winbind. What I cannot figure out is how 'erase' him so I
>can create a local user account. I've read thru the man ages but I
>can't see how to do this.
>
I'm thinking I can comment out the windbind in /etc/nswitch.conf,
create a unix user, set up the mappng in smbusers, then uncomment
winbind. I'll try that Monday.