[Samba] AD integration checklist

[James A. Dinkel]

> -----Original Message-----
> From: simo
> Sent: Friday, December 08, 2006 7:58 PM
> 
> On Fri, 2006-12-08 at 17:35 -0600, Don Meyer wrote:
> > Interestingly, I've never modified my /etc/pam.d/samba -- mainly
> > because I make the modifications in /etc/pam.d/system-auth, so the
> > AD-based auth can take effect for all services.
> 
> Sorry I didn't realize this was about the samba pam conf file
> specifically, I'd say that for samba pam_winbindd is completely
> unnecessary, system-auth is the right place for general
authentication.
> 
> Simo.

I don't want all authentication to be able to use winbind, just Samba.
That is why I put it in /etc/pam.d/samba instead of
/etc/pam.d/system-auth (which is refered to by /etc/pam.d/samba).  But
if I am understanding you, in order for the Samba file server to
authenticate via winbind, I do NOT need pam_winbind in either
/etc/pam.d/samba nor /etc/pam.d/system-auth?