[Samba] Question regarding the possibility of W2K smartcard logon - 2nd post

[Andrew Bartlett]

Elek József wrote:
> 
> Hi!
> 
> Are there anyone out there who can give me some informations about this
> issue?...

Smartcard authentication is only really possible with Kerberos.  Samba
should not be able to tell the difference between a smart-card and a
'passworded' login in this situation.

The bad news is that you will need to use a Win2k DC, as Samba does not
yet support being an AD Domain Controller.  Also, you will need to use
Samba 3.0.

Andrew Bartlett

> -----Original Message-----
> From: Elek József [mailto:elekj at ekg.gov.hu]
> Sent: Thursday, October 03, 2002 9:57 AM
> To: samba at lists.samba.org
> Cc: K-D Andrási István
> Subject: Question regarding the possibility of W2K smartcard logon
> 
> Hi!
> 
> I could not find any documentation about the possibility of W2K
> smartcard-based logon using Samba as a PDC (no MS on the logon server side).
> Is it possible?
> 
> If yes:
> Is it possible in case of MS CA only? Can I use any other (third party) CAs?
> Where can I find usable documentation for this?
> 
> If not:
> Is the following configuration can work: W2K server acting as a PDC (for
> performing smartcard-based logons and running the MS CA) and a Samba acting
> as a file/printer server for the domain? In this case it would be
> interesting if I can use a third party CA for W2K domain logon - but it is
> not the question of this list. :)
> 
> Any piece of information can help. Thank you in advance,
> 
> Elek Jozsef
> System Engineer
> Kopint-Datorg Rt., Hungary
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net