[Samba] Winbind and Windows 2000

[Juergen Hasch]

Am Donnerstag, 4. Juli 2002 12:48 schrieb Buchan Milne:

> > You can set a user for winbind to authenticate with:
> > 	wbinfo -A user%password
>
> But shouldn't winbind set this up to use the machine account? Or how is
> this supposed to work? Does it need a user account?
>
> We are looking at streamlining the process of joining winbind machines,
> and potential clients are very averse to enabling pre-Windows-2000
> compatible access.
>
> Or should we just have a wrapper around smbpasswd -j which grabs the
> username and password of a domain admin account, and uses that for
> wbinfo -A. Only problem is that this wouldn't work for pre-made machine
> accounts ....
>

You don't want to use your valuable domain admin account and store it
in a cleartext database. 

Either enable anonymous connect on the W2K machine or use an account
with less (or no) privileges.

...Juergen