Login as a domain user when the domain controller is down with winbind

[Andrew Bartlett]

On Thu, 2003-10-02 at 04:52, Lin Li wrote:
> In windows when you loging as a domain user and if the domain controller 
> is down, the system will let you in with some local cache. Is there any 
> way for winbind to achieve this or is there any plan to have this 
> functionality?
> 
> Also, when you logged in as a domain user and suddenlly the domain 
> controller is down, the system becomes unusable. Have a local cache may 
> help solve this.

I assume this is with regard to 'interactive' logins (ie, pam_winbind)
and not file share connections.  It is not possible to do this for
file-shares.

I know idra was looking into writing a pam module, that would perform
some of the simple caching required for this - but I don't think keeping
passwords around should be winbind's job.

(The first trick when breaking into a Windows box is to unplug the
network, then try an 'old' account...)

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20031001/44644537/attachment.bin