svn commit: samba r13265 - in branches/SAMBA_4_0/source/rpc_server/remote: .

[abartlet at samba.org]

Author: abartlet
Date: 2006-01-31 22:58:50 +0000 (Tue, 31 Jan 2006)
New Revision: 13265

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=13265

Log:
Clarify how delegation works with the remote RPC backend.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/rpc_server/remote/README


Changeset:
Modified: branches/SAMBA_4_0/source/rpc_server/remote/README
===================================================================
--- branches/SAMBA_4_0/source/rpc_server/remote/README	2006-01-31 22:41:53 UTC (rev 13264)
+++ branches/SAMBA_4_0/source/rpc_server/remote/README	2006-01-31 22:58:50 UTC (rev 13265)
@@ -1,7 +1,38 @@
-This smb.conf example should get you started:
+This is an RPC backend that implements all operations in terms of
+remote RPC operations.  This may be useful in certain debugging
+situations, where the traffic is encrypted, or you wish to validate
+that IDL is correct before implementing full test clients, or with
+windows clients.
 
+There are two modes of operation: Password specified and delegated
+credentials.
+
+Password specified:
+-------------------
+
+This uses a static username/password in the config file, example:
+
+[global]
 	dcerpc endpoint servers = remote
 	dcerpc_remote:binding = ncacn_np:win2003
 	dcerpc_remote:username = administrator
 	dcerpc_remote:password = PASSWORD
 	dcerpc_remote:interfaces = samr, lsarpc, netlogon
+
+Delegated credentials:
+----------------------
+
+If your incoming user is authenticated with Kerberos, and the machine
+account for this Samba4 proxy server is 'trusted for delegation', then
+the Samba4 proxy can forward the client's credentials to the target.
+
+You must be joined to the domain (net join <domain> member).
+
+To set 'trusted for delegation' with MMC, see the checkbox in the
+Computer account property page under Users and Computers.
+
+[global]
+	dcerpc endpoint servers = remote
+	dcerpc_remote:binding = ncacn_np:win2003
+	dcerpc_remote:interfaces = samr, lsarpc, netlogon
+