Using Samba -- domain logins

[Gerald Carter]

Richard Sharpe wrote:
> 
> I am not sure if I understand what you mean here, but 
> there are people out there, including a customer of mine, 
> who only habe Win9x and no WinNT clients nor servers.
> 
> So they only use the domain logons = yes stuff for 
> Win9x logons, and do not think of Samba as running 
> in PDC or BDC mode.

Yes this is valid, but wea re talking about "security = domain"
and "domain logons = yes".  "security = user" and "domain 
logons = yes' I use all the time.  Once you begin to use 
accounts from a PDC, you are 

 * acknowledging the fact that you have a PDC.

An NT PDC can validate Win9x logons right?  Of course.
If Samba was on was a domain member on a separate subnet
from the PDC and performing domain logons, this would work.
But actually Samba is acting as a BDC (but no SAM replication)
to the Win9x clients.

Correct me if I wrong, but only a domain controller can 
perform logons right?  Can a Windows NT Workstation as a 
member of a domain validate domain logons?  Not network 
connections, but domain logons?  No?

My point is that allowing Samba as a domain member
to validate domain logons for Windows 9x client is
confusing.  But everyone says, "No, it works!" and i 
know that.  Fact is that one day we will officially 
support PDC and BDC replication....

Arrggh....i give up.  Does anyone understand what I'm
trying to say here?




jerry
________________________________________________________________________
                            Gerald ( Jerry ) Carter	
Engineering Network Services                           Auburn University 
jerry at eng.auburn.edu             http://www.eng.auburn.edu/users/cartegw

       "...a hundred billion castaways looking for a home."
                                  - Sting "Message in a Bottle" ( 1979 )