Using Samba as a proxy authentication service?

[Kevin Colby]

This is precisely the need we had for authenticating users for squid
access.  Squid came with some stock methods, but they did account
existence checks only, and we needed a specific group membership check.

This was before the TNG fork, so TNG was discussed all the time here.
We found the simplest way to this was to use TNG's 'rpclient'.  We
could pass domain/group/username/password and just grep the output.
Then we bottled it up and had squid call that for authentication.
It works just fine, though we haven't tested it under heavy load.

	- Kevin Colby
	  kevinc at grainsystems.com


Mike Brodbelt wrote:
> 
> I'd like to able able to use Samba (or samba services, at any rate) to
> allow me to authenticate users against NT Domain accounts from external
> programs. I know that PAM modules and suchlike exist for general logon
> authentication, but my situation is slightly different, and I'm not sure
> of the best way to take advantage of the existing support.