Status of Kerberos Support across Samba versions

Chris Young cyoung at
Mon Apr 10 17:49:17 GMT 2000

Ok, I've been reading through several of the Samba lists and have found enough
information on this to just confuse me furthur.  I'm attempting to get a strong
understanding of the status of Kerberos 5 support in the current development
versions of Samba.

Basically, I would like to standardize our network's authentication structure
and right now, Kerberos seems to serve this purpose best.  I understand that
Samba has compilation option to enable Kerberos support, however I don't quite
understand how this comes into play.  I've been looking through the code
(althought my programming skills leave alot to be desired) and everything is
still not clean.

I would appreciate a good summary of where Kerberos support is currently and
where it might be heading so that I can plan everything accordingly.

The basic questions that I have regarding Samba and Kerberos are:

If Samba support Kerberos, does this mean that it actually support Kerberos
TICKETS or does it just merely take the encrypted (or, most likely _plain
text_) password and pass it on the the KDC for a yes or no?

If this IS the case, then what is the difference in this approach vs. using
Kerberos PAM modules and configuring Samba to use PAM for authentication?

Am I totally nuts and have this whole thing confused?  I'm just trying to
understand what the keberos compile option get you.  Also, I read discussions
regarding PAM support in Samba and I don't quite get how Samba utilizes this
for authentication.  I would GREATLY appreciate someone in the know posting a
good explanation of Samba/Kerberos integration and the basics of how it works.

Thank you,
Christopher Young, Senior Systems Administrator

I.D.E.A.L. Technology Corporation
1109 East Concord Street
Orlando, Florida  32803
I.ntegration D.evelopment E.ducation A.ll L.inux

More information about the samba-technical mailing list