[Samba] security = domain / security = server

Andrew Bartlett abartlet at samba.org
Thu Jun 20 04:24:03 GMT 2002


Nir Livni wrote:
> 
> I understand that the difference between "server" and "domain" mode is that
> in "domain" mode"Samba fully uses the domain capabilities. He behaves like
> another NT Server or Windows 9x do by participating in domain trust
> relationships."
> 
> Could someone please explain me
> 1. What is it exaclty that "domain" mode does, that "server" mode doesn't
> 2. What is it exaclty that "server" mode does, that "domain" mode doesn't

security=server is a man-in-the-middle attack on the remote PDC.  As you
might expect, it isn't pretty, and as such is not recommended if it is
at all possible to use 'the real thing'.  (That being security=domain).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net




More information about the samba mailing list