Authentication Questions

[G. Naik]

I understand that tradeoff. I will apply the plain-text password
reg files to my NT workstations.  

However, I need to use either PAM or
KRB5
for authentication.  What my question is, whether SAMBA_TNG, does support
those authentication mechanisms, while functioning as a PDC.  And...where
can I find some documentation on how to configure SAMBA_TNG to use PAM or
KRB5.


Thanks for your help.  


---
Gaurav Naik ("g")       | C A R R O L L - N E T, Inc.
201-488-1332            | www.carroll.com 

On Wed, 19 Jan 2000, Luke Kenneth Casson Leighton wrote:

> hi, gaurav,
> 
> SAMBA_TNG is only really relevant to people running with "encrypt
> passwords = yes".
> 
> the pam support is only relevant to when "encrypt passwords = no", which
> sounds like it's suitable for what you want and need.
> 
> regards,
> 
> luke
> 
> On Wed, 19 Jan 2000, G. Naik wrote:
> 
> > I currently have SAMBA_TNG, functioning as a PDC for a few of my NT
> > workstations.  I am using smbd and nmbd from MAIN, and the rest of the
> > daemons from SAMBA_TNG.  Currently, SAMBA is using standard /etc/passwd
> > authentication for my users.  However, I would like to use alternative
> > authentication schemes.  In our network , we currently use Kerberos5 for
> > all unix authentication. 
> > 
> > I did some investigating...and I see the configure script for SAMBA_MAIN,
> > allows you to add options such as --with-krb5 and --with-pam.  However,
> > the SAMBA_TNG tree's configure script does that even have these options
> > available.  Does or Will Samba support authenticating against kerberos5 or
> > pam?  Also, where can I find some documentation on the ways Samba supports
> > PAM.  
> > 
> > I do not need any "Account Management" features, such as being able to
> > view my users of USRMGR.EXE.  
> > 
> > 
> > Thanks in Advance...
> > 
> > btw...SAMBA_TNG is working great for me...keep up the good work :)
> > 
> > 
> > ---
> > Gaurav Naik ("g")       | C A R R O L L - N E T, Inc.
> > 201-488-1332            | www.carroll.com 
> > 
> 
> <a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton    </a>
> <a href="http://www.cb1.com/~lkcl"> Samba and Network Development   </a>
> <a href="http://samba.org"        > Samba Web site                  </a>
> <a href="http://www.iss.net"      > Internet Security Systems, Inc. </a>
> <a href="http://mcp.com"          > Macmillan Technical Publishing  </a>
> 
>  ISBN1578701503 DCE/RPC over SMB: Samba and Windows NT Domain Internals
> 
> 
>