authentication behavior

[Andrew Bartlett]

David Bear wrote:
> 
> As I understand authentication, if you have
> 
> password server = gates-inc
> 
> samba well take ntlm creditials, look in the local smbpasswd file, if the
> user isnt there, with forward the credentials to the netbios machine named
> gates-inc.
> 
> What I would really really like is to be able to have
> 
> security = domain
> password server = gates-inc

This configuration simply specifies that security=domain, and the PDC is
'gates-inc'.  The PDC can then serve trusted domains etc as per its own
configuration.

Use winbind to 'create' the users in both your and other trusted domains
automaticly.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net