samba as a DC

iddwb David.Bear at asu.edu
Wed Dec 20 22:49:50 GMT 2000


On Wed, 20 Dec 2000, Kevin Colby wrote:

> 
> It sounds like you are looking to run Samba as a BDC.
> (capable of authenticating, but deriving all accounts from the PDC)
> Why not?  Are you trying to merge two PDC's accounts in one BDC?

No.  I'm trying to leverage the user accounts data base that is centrally
managed -- I don't want to build my own authentication data base -- but
want the power of a DC.

> 
> 	- Kevin Colby
> 	  kevinc at grainsystems.com
> 
> 
> iddwb wrote:
> > 
> > I would like to run samba as a domain controller.  However, i would like
> > samba to find its passwords elsewhere.  Is it passible to have
> > 
> > security=domain
> > password=asudc
> > 
> > .. where the asudc is a domain controller that has all the password stuff
> > in it.  In me reading it appears to have a security=domain requires the
> > machine be joined to a nt domain.  however, you can have two DC's.. nor
> > can samba act as a BDC -- nor do I want it do.  I'm looking for a way to
> > have samba find all its authentication info from our campus NT domain --
> > but still have the power of a domain controller for NT..
> > 
> > failing this, would it be passible to compile in the kerberos stuff into
> > samba, have security=domain, but have kerberos act like the password
> > server?
> > 
> > David Bear
> > College of Public Programs/ASU
> 

David Bear
College of Public Programs/ASU





More information about the samba-ntdom mailing list