On Mon, 2004-07-12 at 10:45, Alex Satrapa wrote: > On 11 Jul 2004, at 05:50, Keppler wrote: > > > it is possible a server Samba authenticate Linux/FreeBSD machines? > > You may be better off using LDAP for both Samba and Unix account > logins. This means you can also use an LDAP aware mail server (for > example). > > Some people use winbind where the user accounts are managed by an > existing Windows PDC.
The other option that I'm trying to make more mainstream is the use of Heimdal kerberos for this task. Many sites have a Samba PDC, and the Samba passwords, but can't get the original plaintext. (For example, they vampired them from NT). I've worked with the maintainers of Heimdal kerberos to allow Samba's password database to be the backend behind Hedimdal. In the same way that Microsoft migrated to kerberos on a WinNT -> Win2k upgrade, so a Samba server can also provide Kerberos. On the clients, all you need is current kerberos libraries (MIT 1.3.1 is what I test with). Things like pam_krb5 just work! Andrew Bartlett
signature.asc
Description: This is a digitally signed message part
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
