Smartcard Authentication with Samba 3.0

Peter Koch samba02.z.pkoch at spamgourmet.com
Sun Dec 14 08:39:17 GMT 2003


Hi Luke,

> If you are talking about smartcard authentication to an Active
> Directory domain in which a Samba 3.0 server is a domain
> member, no changes are necessary. 
>
> Smartcard authentication only affects initial authentication;
> after which the client can obtain ordinary service tickets.

Sorry, I didn't made that clear enough. I'm talking about
smartcard authentication to an Active Directory domain in
which a Samba 3.0 server is the ADS and it's exactly that
initial authentication that I would like to make possible
with a Samba 3.0 ADS.

The reason is that we have replaced all out Microsoft servers
by Samba machines (including the ADSs). For security reasons
we have to use smartcards in the near future and right now this
seems to force us to use a Microsoft ADS again. This would lead
to two seperate Directory Servers (ADS + OpenLdap).
Also ADS+Smartcard require a Microsoft CA.

Greetings

Peter
______________________________________________________________________________
Horoskop, Comics, VIPs, Wetter, Sport und Lotto im WEB.DE Screensaver1.2
Kostenlos downloaden: http://screensaver.web.de/?mc=021110



More information about the samba-technical mailing list