Sync UNIX and NT passwords? - was Re: Did I miss something?

[James Sutherland]

On Fri, 28 Jul 2000, Jean Francois Micouleau wrote:
> On Fri, 28 Jul 2000, James Sutherland wrote:
> 
> > > There are various ways to have one password for all systems.  On Microsoft
> > > Windows there is a security DLL and registry key that you can enhance with
> > > your own routine.  This can relay the password information to your LINUX
> > > system, so you can set it.
> > 
> > NISGINA does this for NT machines using a NIS database, IIRC. I can't
> > remember the URL offhand, though :-(
> > 
> > > This seems to require that the modified dll be present on any Microsoft
> > > Windows machine that you log in on.
> > 
> > Correct.
> 
> Samba can do it already without any registry hack or adding any dll on the
> clients. Maybe it's only in the TNG branch.
> 
> Exactly like NT. In an NT controlled domain, the PDC receive the new
> user's password and check it with the passfilter dll.

Yes, Samba can act as PDC to an NT domain. What exactly is the status of
that?? ISTR there were still some issues with PDC<->BDC sync in some
cases?

If Samba can be used for all the domain controllers in the domain, and be
made to replicate NT-side password changes over to the Unix side,
everything's fine; on the Unix side, you can use PAMs to replicate
Unix->NT.


James.