[Samba] Samba authentication to AD server

[Volker Lendecke]

On Wed, Jul 16, 2008 at 01:19:17PM -0700, Jeremy Allison wrote:
> On Wed, Jul 16, 2008 at 12:59:36PM -0400, Gman wrote:
> > Greetings all;
> > 
> > I currently have a task to put together a SAMBA (3.2) server that can
> > authenticate users to our local AD server. I was told recently that in
> > order for that to happen, the authentication needs to be in "mixed"
> > mode vice "native" (whatever that means), or it won't work. Can
> > someone a bit more knowledgable than I confirm or deny this statement,
> > or point me at documents that explain the difference? Thanks in
> > advance.
> 
> If the Samba server is merely a member of the AD domain,
> then no, you don't need to have the AD domain in mixed
> mode. It will work just fine with native mode.
> 
> If the Samba server is a PDC and you need it to have
> trusts with the AD domain, then yes, the AD domain must
> be in mixed mode.

Sorry, that's wrong. The only thing that native mode
prevents is a NT4 BDC, so old-style "net rpc vampire" won't
work anymore. Trusts should work. If they don't, please file
a bug.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/20080716/f80d5609/attachment.bin