[Samba] PDC/Roving Profiles/and Password Encryption

[Buchan Milne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dan Kador wrote:
> Buchan,
>
> So you're saying that it IS possible for my setup to work?

Yes, with some minor changes.

> I'll
> definitely give those guides a read through and maybe I'll be able to
> work through them.
>
> I want to be sure I understand you correctly, though - I can enable
> password encryption on the samba server, keep password encryption OFF on
> the clients

Password encryption will have to be on on the clients to join the domain.

> and use the LDAP database and migrate the passwords stored
> there to the samba server?

You will have to migrate passwords into samba while it is using
clear-text passwords (see 'update encrypted'), on a local file, then
once you have had your accounts migrated into smbpasswd file, you can
migrate them into LDAP easily.

You need to have encrypted passwords stored somewhere for this to work,
but that doesn't mean you can put everything in LDAP.

Buchan

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+3kAlrJK6UGDSBKcRAkGRAKCD3JhjGekF4uv/9zeb5Ml4OgDBlwCdGo5E
CoWdzl/Zy2Aa4PSA7eQe7PM=
=JbHp
-----END PGP SIGNATURE-----

******************************************************************
Please click on http://www.cae.co.za/disclaimer.htm to read our
e-mail disclaimer or send an e-mail to info at cae.co.za for a copy.
******************************************************************