new kerberos howto - proper machine accounts

Andrew Tridgell tridge at samba.org
Tue Oct 23 19:26:10 GMT 2001


I've released a new HOWTO at:

	http://samba.org/ftp/tridge/kerberos/HOWTO

This one includes a pointer to netjoin.tar.gz that replaces
keytab.tar.gz, and allows you to control the complete process from
the Samba server. You no longer need ktpass.exe on the W2K
machine. netjoin also creates a proper machine account rather than the
user account hack in the previous HOWTO.

The next step is to get netjoin working with GSSAPI/SASL/kerberos so
that the administrator password is not exposed on the network during
the join.

Cheers, Tridge




More information about the samba-technical mailing list