Client for Samba networks

Jeremy Allison jra at samba.org
Tue Dec 18 15:57:02 GMT 2001


On Tue, Dec 18, 2001 at 11:05:05AM -0500, David Collier-Brown wrote:
> Steven French wrote:
> >  Getting an open network provider DLL and/or GINA 
> > (logon module) for CIFS on Windows 2000/XP would
> > be a big help but also tricky to write 
> 
> 	We've seen two partial sucesses with
> 	GINA already, IBM's and the nsgina
> 	for nis (yp), so it's at least possible...
> 
> 	A GINA that does a minimal window,
> 	collects data and ships it to an
> 	authentication server in some
> 	appropriate format, and then displays
> 	a sucess indication or a server-	
> 	supplied error message would allow us to
> 	build suitable back-ends, and might
> 	be more maintainable than previous ones.
> 
> 	I, for one, would love to see a GINA
> 	I could update via the default login.bat (;-))
> 	that would be independant of the 
> 	authentication mechanism.

GINA's are useless as a generic Windows authentication
method. They don't get service logons, batch logons or
network logons.

They're *not* a PAM replacement, even though they're
claimed to be.

The NT PAM is the LSAAuth level - which is intentionally
undocumented.

Jeremy.




More information about the samba-technical mailing list