using kerberos

[Andrew Bartlett]

David Bear wrote:
> 
> hopefully this is a simple questions, since I cant seem to find a simple
> answer to this in the various documentation.
> 
> If using kerberos to authenticate an smb user, do you need to store ntlm
> password hashes in kerberos extended data fields?  Else, if not, how do
> ntlm clients (those smb clients that use ntml hashes) use a kerberised smb
> server?

The kerberos and NTLM stuff is held in the same Win2k AD server.  We
don't support being a member of an MIT kerberos domain (this will
change).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net