Smartcard Authentication with Samba 3.0
Peter Koch
samba02.z.pkoch at spamgourmet.com
Sun Dec 14 08:39:17 GMT 2003
Hi Luke,
> If you are talking about smartcard authentication to an Active
> Directory domain in which a Samba 3.0 server is a domain
> member, no changes are necessary.
>
> Smartcard authentication only affects initial authentication;
> after which the client can obtain ordinary service tickets.
Sorry, I didn't made that clear enough. I'm talking about
smartcard authentication to an Active Directory domain in
which a Samba 3.0 server is the ADS and it's exactly that
initial authentication that I would like to make possible
with a Samba 3.0 ADS.
The reason is that we have replaced all out Microsoft servers
by Samba machines (including the ADSs). For security reasons
we have to use smartcards in the near future and right now this
seems to force us to use a Microsoft ADS again. This would lead
to two seperate Directory Servers (ADS + OpenLdap).
Also ADS+Smartcard require a Microsoft CA.
Greetings
Peter
______________________________________________________________________________
Horoskop, Comics, VIPs, Wetter, Sport und Lotto im WEB.DE Screensaver1.2
Kostenlos downloaden: http://screensaver.web.de/?mc=021110
More information about the samba-technical
mailing list