using external authentication to validate samba users

[Andrew Bartlett]

Marbacher Christophe wrote:
> 
> Hi,
> 
> Is there any way to use an external program to validate users' passwords? It
> would be something like an exec command that would return the authentication
> result.
> 
> What I'm willing is to be able to authenticate a samba user against a radius
> server. Why? Because I get to use tokens (one life time password) against
> different realms.
> 
> Has anybody an idea?

Feel free to write an authentication module to do the job.  In Samba
HEAD (3.0 alpha) it should be relitivly simple to do this.  I'll take
patches.

Watch out that you probabaly want encrypted authenticaion, which gets
messier, but it stil practical. :-(.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net