Christian Leutloff wrote:
> 
> Adam Shand <[EMAIL PROTECTED]> writes:
> 
> > > > I know this is a FAQ, and the answer is no in principle, because the 
> > > > Samba
> > > > team won't do any development regarding authentication services (with a
> > > > justified reason), but I'd like to know if Debian can replace NTS --
> > > > obviating the lack of authentication.
> >
> > I hadn't heard that about the Samba team.  What are their reasons for not
> > doing further work on authentication services?
> 
> so far as a know the main problem is the not documented communication
> between the servers. But on the other hand there should be
> authentication against the Samba server possible with the next major
> release.
> 
> I'm searching a solution for this problem to. There was sometime ago
> an announcement that a company provides a commercial solution for the
> authentication problem.

The current sambades package allows encrypted authentication (which
NT with service pak 3 requires, unless you twiddle the registry). 
Samba *can not* act as a domain controller (although it works fine as
a WINS server). If you want to authenticate users *through* a domain
controller this works fine. I use it extensively. Users have accounts
on our NT PDC and I set the following in the /etc/smb.conf file:

   encrypt passwords = true
   password server = YOUR-NTSERVER
   security = server

The docs *which come with the samba package* indicate that work is being
done to allow samba to function as a domain controller. I wouldn't be
surprised if they blew this off since the current domain/user/group
stuff if being scrapped for Directory Services in NT 5 (which is built
upon an actual non-M$ standard, X.500). The current "domain" system
blows major chunks if you have more than a single workgroup. Ask anyone
who actually administers such a system. Any questions?

-- 
Jens B. Jorgensen
[EMAIL PROTECTED]


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .

Reply via email to