[Samba] Difference Between Domain and ADS security In Reference to Realms

Andrew Bartlett abartlet at samba.org
Tue Jan 20 11:16:37 GMT 2004

On Thu, 2004-01-15 at 03:57, Harmon, Leigh wrote:
> Hi,
> I've been researching which type of security to use with Samba 3.0.1 and I still
> don't understand what the difference is between "security=DOMAIN" versus
> "security=ADS."  I complied Samba to include ADS support, and I initially chose
> "security=DOMAIN."  When I use the "net" command I can add it to my domain.
> However, if I set "realm=our.ads.realm" and do the same "net" command, then I
> get a message saying that server was added to the realm.  What is the difference
> between adding the Samba server to the realm using "security=DOMAIN" versus
> adding it to the realm using "security=ADS?"

Not much, but you should set 'security=ads' first.  It is my long-term
aim to remove the need for the artificial distinction here, and this is
why 'net join' tries an ADS join always, then falls back to RPC.

Andrew Bartlett

Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040120/1b226ca7/attachment.bin

More information about the samba mailing list