[Samba] "security = server" vs "security = domain" + samba auth problems

[Andrew Bartlett]

On Wed, 2008-08-13 at 11:52 +0930, Jake Carroll wrote:
> Hi all,
> 
> So, in a long running battle with samba service provisioning, I've run  
> up against an authentication problem. It was outlined in an email to  
> the list a few days ago. After coming to the conclusion that it is not  
> a kerberos issue (the kerberos MIT list helped me work through this),  
> I can now be fairly assured me issues are related to my samba config.

> 
> Well, of course I don't have this. I have a kerberised samba solaris  
> host using an OpenLDAP system as a PDC/KDC. How does one achieve  
> "security = domain" in this circumstance? How does my samba server  
> join the OpenLDAP "domain" per se?

If the 'samba solaris host using an OpenLDAP system as a PDC' is a
genuine PDC, then it is hosting a domain of one kind or another. 

If it isn't, then configure it so it is. 

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba