authentication behavior

Andrew Bartlett abartlet at
Thu Mar 28 14:27:48 GMT 2002

David Bear wrote:
> As I understand authentication, if you have
> password server = gates-inc
> samba well take ntlm creditials, look in the local smbpasswd file, if the
> user isnt there, with forward the credentials to the netbios machine named
> gates-inc.
> What I would really really like is to be able to have
> security = domain
> password server = gates-inc

This configuration simply specifies that security=domain, and the PDC is
'gates-inc'.  The PDC can then serve trusted domains etc as per its own

Use winbind to 'create' the users in both your and other trusted domains

Andrew Bartlett

Andrew Bartlett                                 abartlet at
Manager, Authentication Subsystems, Samba Team  abartlet at
Student Network Administrator, Hawker College   abartlet at

More information about the samba-technical mailing list