[Samba] Winbind and Windows 2000
Hasch at t-online.de
Thu Jul 4 15:46:35 GMT 2002
Am Donnerstag, 4. Juli 2002 12:48 schrieb Buchan Milne:
> > You can set a user for winbind to authenticate with:
> > wbinfo -A user%password
> But shouldn't winbind set this up to use the machine account? Or how is
> this supposed to work? Does it need a user account?
> We are looking at streamlining the process of joining winbind machines,
> and potential clients are very averse to enabling pre-Windows-2000
> compatible access.
> Or should we just have a wrapper around smbpasswd -j which grabs the
> username and password of a domain admin account, and uses that for
> wbinfo -A. Only problem is that this wouldn't work for pre-made machine
> accounts ....
You don't want to use your valuable domain admin account and store it
in a cleartext database.
Either enable anonymous connect on the W2K machine or use an account
with less (or no) privileges.
More information about the samba