-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stefan van der Eijk wrote: > Florin wrote:
> The way forward should be to include more kerberized applications. > Actually, mdk might consider making the distro as kerberized (or AD > compliant) as possible. The customer I'm working for is looking for this. Indeed, if all goes according to plan (samba3 is stable before we enter freeze), then we should be able to have AD authentication as we have Winbind authentication now (except I hope we can configure after installation if necessary). It can be done now I think, without too much trouble, using samba3-winbind and samba3-common, the only real difference (besides the actual kerberos details of config files and getting a ticket) is using 'net3 ads join' instead of 'smbpasswd -j'. If someone has a network to test on, that would help (I hate booting into Windows2000 server just to test winbind). Also, someone who knows a bit about kerberos may need to help with suggestions on what needs to be done to configure the client side (and how much can be left to defaults). Also, pam_krb5 would need to be in main ... Regards, Buchan - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+34VWrJK6UGDSBKcRAq9qAJ9FKFOkF3HvynzVRjWXV4dD+W7xbACgoBU5 A9qTCm0BvdzCH8dFNTZVw0g= =JUED -----END PGP SIGNATURE----- ****************************************************************** Please click on http://www.cae.co.za/disclaimer.htm to read our e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy. ******************************************************************
