[Samba] Re: Samba + LDAP + Kerberos

[paul]

Doug Curtis wrote:
> I have been working on getting the three of these to work together and I think
> that they are. (Mostly)
> 
> Anyway the real question is: Is there a way to setup samba and the ldap scripts
> that are distributed with Samba so that they don't use a plain text password? 
AFAIK samba only knows simple auth with TLS.
> Maybe I'm just too paranoid, but the idea of putting the rootdn password in the
> slapd.conf and the smbldap_conf.pm seems a bit too risky.
Consider not using rootdn for your binddn, set up a dedicated manager 
account for samba.

greetings
	Paul
> 
> Thanks,
> 
> Doug