Samba-combined and LDAP

Luke Kenneth Casson Leighton lkcl at samba.org
Mon Jan 17 16:20:50 GMT 2000


argh, of course.

smbd tries to authenticate against the password database API, which of
course will only be private/smbpasswdd on your system.

i patched smbd in SAMBA_TNG so that it always asks netlogond, it never
accesses the private/smbpasswd or LDAP database directly.

however, i need to come up with a scheme that can do _both_ these things,
so that by default, samba will acccess the private/smbpasswd or auth-db
API and if MSRPC services are enabled it will ask netlogond.

sorry, there's not much that can be done about that right now.

for now, i suggest that you set up _two_ samba servers: one as a PDC
[SAMBA_TNG], and the other one , samba-main, as your file-server, as a
_member_ of the SAMBA_TNG domain.


On Tue, 18 Jan 2000, Ulf Noren wrote:

> I am trying out the combined way of using samba-main anda samba-tng.
> I'm am authenticating agains an LDAP-server. This doesnt work
> if I use smbd from samba-main because it doesnt have LDAP-support...
> But should'nt samba-tng take care of authentication with this 
> setup?
> 
> Haven't looked in the code yet but is it possible to fix this at all?
> 
> /Ulf
> 

<a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton    </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development   </a>
<a href="http://samba.org"        > Samba Web site                  </a>
<a href="http://www.iss.net"      > Internet Security Systems, Inc. </a>
<a href="http://mcp.com"          > Macmillan Technical Publishing  </a>

 ISBN1578701503 DCE/RPC over SMB: Samba and Windows NT Domain Internals



More information about the samba-ntdom mailing list