LDAP support needs ON/OFF switch in smb.conf!

[Luke Kenneth Casson Leighton]

On Sun, 30 Jan 2000, Jim Morris wrote:

> Luke Kenneth Casson Leighton wrote:
> 
> > >
> > > What do you think?  Is there a good reason it cannot be turned off once
> > > compiled in?
> > 
> > at the moment, yes!  it's #ifdef'd everything else out!
> 
> Okay! I'll believe that - sure explains my observations! ;-)
> 
> Definitely need to be changed before Samba 3.0.0 though....

umm... why? :)

i mean, why would you _want_ to have two separate accounts databases.  the
only secure way to use ldap support at the moment is to use it on loopback
(127.0.0.1) because the password hashes are transmitted in-the-clear.

the other way is to use ssh tunneling of the ldap port.