[Samba] multi factor authentication

Jason Keltz jas at eecs.yorku.ca
Mon Nov 9 12:01:26 UTC 2020

Thanks Kris,
I greatly appreciate your response.
I'll look into this.  I need to be able to do proper Kerberos authentication under at least Linux so that krb5 NFS works. There's some mention of Kerberos there. I just need to explore if it can do what I need.


On Nov. 9, 2020, 3:17 a.m., at 3:17 a.m., Kris Lou via samba <samba at lists.samba.org> wrote:
>I use PrivacyIdea as a MFA provider (via RADIUS, though that's just my
>usage case).
>It can authenticate directly against winbind or ldap backends, and has
>PAM module for Linux clients.  For Windows logins, there's a
>Provider", details here:
>(YMMV, I haven't tried it for that.  However, I've played with using it
>a backend for Nginx Basic Authentication, which is neat.)
>Kris Lou
>klou at themusiclink.net
>On Thu, Nov 5, 2020 at 12:21 PM Jason Keltz via samba
><samba at lists.samba.org>
>> I was trying to research whether multi factor authentication is
>> with Samba AD.  There's not that information out there. We have both
>> Linux systems with Winbind authenticating from Samba AD and Windows
>> systems authenticating via Samba AD.   I saw a message from Louis
>> a year ago with some links, but as far as I can tell, not
>> tied to Samba AD (unless I misunderstood).  Rowland - you also
>> the "freis-franken.org" link, but that doesn't exist anymore.  I'm
>> looking for LDAP-based proxy type solutions.  I'm looking for
>> that ties directly into winbind PAM module on Linux and on Windows. 
>> know if it's doable, someone is doing it.  :)
>> Thoughts?
>> Thanks,
>> Jason.
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list