Date: Sun, 7 Jun 2009 21:11:26 -0600 From: Tim Judd <tajudd@gmail.com> To: Olivier Nicole <on@cs.ait.ac.th> Cc: freebsd-questions@freebsd.org, redtick@sbcglobal.net Subject: Re: Samba3 domain controller howto? Message-ID: <ade45ae90906072011m21e9c5a8k28da8c246e1a6aef@mail.gmail.com> In-Reply-To: <200906080259.n582xtVg024068@banyan.cs.ait.ac.th> References: <273384.34545.qm@web81206.mail.mud.yahoo.com> <ade45ae90906071218u794e8d3aqe4f5eee5a389a67d@mail.gmail.com> <200906080259.n582xtVg024068@banyan.cs.ait.ac.th>
next in thread | previous in thread | raw e-mail | index | archive | help
yes, you are mis-understanding samba itself is a NT4-type domain. samba can use authentication backends that include passwd files, LDAP and kerberos. Active directory is a requirement to use LDAP, whereas samba is offering it as a auth backend only. fine line, I know. IOW, whereas Active Directory - as a technology: Uses kerberos for authorization Uses LDAP for a storage backend for Kerberos Uses user@domain logins (thanks to Kerberos), Uses other techs not related to this thread NT4-style domains - as a technology: Not using Kerberos Not using LDAP storage Samba allows it's authorization backend to offer more possibilities than NT4's own methods. Such as passwd files, LDAP, Kerberos, etc. It's technology vs technology, not product vs product. On 6/7/09, Olivier Nicole <on@cs.ait.ac.th> wrote: > Hi, > >> Samba is still only a NT4-type >> DC, no Active Directory type of function (Group Policies, user@domain >> logins, kerberos, ldap, etc) > > I am not sure if I understand you well, but my samba is authenticating > users agaiinst LDAP. > > Best regards, > > Olivier >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ade45ae90906072011m21e9c5a8k28da8c246e1a6aef>