[Samba] Samba + Kerberos

[Andrew Bartlett]

On Wed, 2005-09-07 at 08:28 -0600, Ric Tibbetts wrote:
> All;
> I have a situation that I'm not sure can be done (I honestly don't know 
> enough about Samba for this one).
> 
> Here's what I have.
> 
> The customer has a Windows ADS (note: It's the newer windows ADS, so 
> there is no NT Domain as in the old NT format).
> There are also a number of *nix servers (AIX) that have data on them.

> They want to use Samba as basically, an NFS server to serve out shares 
> to the users on their PCs.

I assume you mean as a CIFS server, in the AD domain.

> BUT... They use a "CryptoCard" (Kerberos) password encryption on the AIX 
> boxes. They want Samba to prompt for Kerberos passwords before allowing 
> the connection.
> 
> Is this even possible?

If it just looks like normal kerberos in AD, then Samba doesn't even
know.

> If so, I need some serious help getting it all set up.

Look into the documentation about being an ADS domain member.  You don't
need any vampire stuff, as you want to be a member, not a DC.

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20050908/e343cc71/attachment.bin