Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 02 Jan 2003 13:24:39 -0800
From:      Terry Lambert <tlambert2@mindspring.com>
To:        Mahlon <mahlon-dated-1041966902.d3c7ee@martini.nu>
Cc:        hackers@freebsd.org
Subject:   Re: pw(8): $ (dollar sign) in username
Message-ID:  <3E14AE17.EC42A534@mindspring.com>
References:  <20021227112033.N93884-100000@ren.sasknow.com> <Pine.LNX.4.33.0212271129520.3939-100000@ns.aus.com> <20021229042543.GB91785@rfc-networks.ie> <20030102191500.GC886@martini.nu>

next in thread | previous in thread | raw e-mail | index | archive | help
Mahlon wrote:
> This has come up more than a few times in the past.  vipw does allow
> the $ character, and works great in a 'couple of machines' network.
> It's not a viable solution for using samba's machine trust accounts
> in an *automated* environment.  Having to manually add your domain
> trust accounts is unneeded when samba can do it for you - after a
> 1 character change in pw.

Probably the correct approach is to use the PAM module that
allows the UNIX machine to perform authentication against the
domain controller, instead of its local password database.

You talk about the difficulty of adding all these account to
a UNIX machine, and then having to modify them with "vipw",
but you don't complain about the difficulty *still* involved
in adding them, if the "vipw" step is removed.  Better to
eliminate the need to create the accounts at all.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E14AE17.EC42A534>