[Samba] Dual Mode Security

[Andrew Bartlett]

On Thu, 2006-01-05 at 12:53 -0700, King, Rogie wrote:
> Hi there, 
> 
>  
> 
> Simple question.  I currently have security = server mode working for my
> samba installation on a freebsd unix box where I work.  I am wondering
> if I can use a dual mode of security.  For example, I want to be able to
> authenticate certain samba user shares against the samba password file
> rather than the Active Directory server that I authenticate against
> sometimes.  Better would be to have samba check the passwords file
> first, if NO authentication, then proceed onto the Active Directory
> auth.  Can this be done with Samba?

Certainly not on a per-share basis, as that is too late.  You could
however setup separate IP aliases for your host, and use include =
smb.conf.%i

You could also use %L (called name) and netbios aliases, but you must
set 'smb ports = 139' to block access to port 445, which does not
provide that info.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20060106/013970c2/attachment.bin