[Samba] Samba and Heimdal Kerberos V Authentication

[Gémes Géza]

Matt Proud írta:
> Hello,
>
> I maintain a network of numerous Linux workstations, several Apples,
> and a few Windows machines. The Apples and Windows XP machines already
> grab shared data via Samba and the remaining data is exported to the
> Linux machines via NFS.
>
> I am in the process of migrating the existing authentication system
> from XYZ123 to Kerberos and going to place user data---with the
> exception of passwords into OpenLDAP.
>
> I am curious whether it is possible to have Samba authenticate against
> Kerberos as a password backend, particularly with the Heimdal
> implementation. I really am not much of a Windows guru and try to
> avoid the OS as much as possible; but I have gathered that from 2000
> onwards it has supported Kerberos V for authentication. Would this
> mean that the winbind backend could be used to talk to the Kerberos
> server?
>
> I really want to avoid having to write any custom scripts or wrappers
> to synchronize passwords between Samba and Kerberos.
>
> What are everybody's thoughts?
>
> Thank you,
>
> Matt
Recommended reading:
http://www.pdc.kth.se/heimdal/heimdal.html#Using-LDAP-to-store-the-database

Cheers

Geza