[Samba] Dual Mode Security

Gerald (Jerry) Carter jerry at samba.org
Sun Jan 8 01:56:41 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

King, Rogie wrote:
> Hi there, 
> 
> Simple question.  I currently have security = server mode 
> working for my samba installation on a freebsd unix box where
> I work.  I am wondering if I can use a dual mode
> of security.  For example, I want to be able to authenticate
> certain samba user shares against the samba password file
> rather than the Active Directory server that I 
> authenticate against sometimes.  Better would be to have
> samba check the passwords file first, if NO
> authentication, then proceed onto the Active Directory
> auth.  Can this be done with Samba?

Technically you should be able to set
'auth methods = guest sam_ignoredomain ntdomain'
but you didn't hear that from me.  There's a good reason
why we don't generally recommend tweaking the 'auth methods'
option.

Note that I will recommend 'security = {domain,ads}'
over 'security = server' anyday though.






cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"There's an anonymous coward in all of us."               --anonymous
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDwHFZIR7qMdg1EfYRAjMLAJ45J7+pInBFETvmc3p6Rch8x9ddhQCcCENp
ym6cH4Nsv05N38TrTAqDVNY=
=ORoX
-----END PGP SIGNATURE-----


More information about the samba mailing list