From owner-freebsd-questions Wed Nov 8 17:33:48 2000 Delivered-To: freebsd-questions@freebsd.org Received: from shf102107.hi.pac.army.mil (shf102107.hi.pac.army.mil [141.190.102.107]) by hub.freebsd.org (Postfix) with ESMTP id 0F86737B4C5 for ; Wed, 8 Nov 2000 17:33:42 -0800 (PST) Received: from localhost (localhost [[UNIX: localhost]]) by shf102107.hi.pac.army.mil (8.10.1/8.10.1) id eA91YVU09077 for freebsd-questions@FreeBSD.ORG; Wed, 8 Nov 2000 15:34:31 -1000 From: Gary Dunn Reply-To: gdunn@mac.com Organization: Open Slate Project To: freebsd-questions@FreeBSD.ORG Subject: Multi Server Passwords Date: Wed, 8 Nov 2000 14:48:25 -1000 X-Mailer: KMail [version 1.0.28] Content-Type: text/plain MIME-Version: 1.0 Message-Id: <00110815343100.09046@shf102107.hi.pac.army.mil> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I have a mix of Windows NT 4.0 workstations (soon to be 2000 :-( ), and NT and FreeBSD servers. I prefer FreeBSD with Samba to Windows NT Server, but manageing accounts and paswords is a chore. There must be an easier way. I have three FreeBSD servers behind a Windows NT PDC. Two are "twins" and are used for roaming profiles and mail. The third is for shared files and print services (although print services may be spread amongst all three ...). Every user has an NT account on the PDC, a Unix account on one of the two profile servers, a Unix account on the shared data server, and a Samba (smbpasswd) account on the same two Unix boxes. That's seven databases to maintain, five for each account. Bleh! After reading the Baines Black Book I realized that Samba can be configured to authenticate users from the PDC. The smb.conf entry that does this is security = domain This is great. Three less databases to manage. But what about the three Unix password databases? Can I maintain the password database on the centrally shared Unix server and point the twins to it? Will NIS do this? Should I? Security issues? -- == Gary Dunn == Honolulu == Open Slate Project To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message