[Samba] Why ADS if I can join the ADS domain as an NT 4 server?

[Chere Zhou]

Yeah, I know that kerberos and LDAP is involved.  I guess kerberos means 
better security.   I am wondering what are other benefits for kerberos and 
LDAP, for a member server in ADS.  

Chere


On Friday 17 January 2003 05:01 pm, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Fri, 17 Jan 2003, Chere Zhou wrote:
> > Hello, all,
> >
> > I can not easily find an answer to this question: why do we need samba
> > 3.0 to join an ADS, if samba 2.x can join the ADS domain just as well,
> > even though the PDC is in native mode?  What's the benefit for samba 3.0
> > to be a member of ADS?  What restrictions I have if joining samba 2.x to
> > the domain as an NT4 server?
>
> Samba 3.0 will speak kerberos & LDAP when communicating with a Win2k DC.
>
>
>
> cheers, jerry
> - ----------------------------------------------------------------------
>  Hewlett-Packard            ------------------------- http://www.hp.com
>  SAMBA Team                 ---------------------- http://www.samba.org
>  GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
>  ISBN 0-672-32269-2         "SAMS Teach Yourself Samba in 24 Hours" 2ed
>  "You can never go home again, Oatman, but I guess you can shop there."
>                             --John Cusack - "Grosse Point Blank" (1997)
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see http://quantumlab.net/pine_privacy_guard/
>
> iD8DBQE+KKd+IR7qMdg1EfYRAik7AKDkf/iV5Z5bTpSpWLkkrE7szJvQNwCeJrpR
> ROMNBedpKdiOFJJkX3MkzaI=
> =GnR2
> -----END PGP SIGNATURE-----