On Monday 20 February 2006 06:56 am, Paul Kölle wrote:
> I've never used TNG so I cannot judge about its merits but I note that
> lots of the information on their site is simply old/outdated. I've yet
> to see a feature TNG supports wich samba doesn't.

Well, from what you say, it appears that my research into samba-tng is already 
a bit outdated.  I would still like to seperate the file serving from the 
authentication mechanisms.  Perhaps I should look into SASL's NTLM mechanism.


> Hmm, I'm not trying to discourage you but I would be surprised if the MS
> consumer products will talk anything but NTLM (against w2k server,
> samba4, whatever) and I'm pretty sure none of the MS clients will do
> kerberos outside a domain context (prove me wrong please ;).

I understand that.  Needless to say, I was very disappointed where windows (in 
particular, xp home edition) falls short with authentication capabilities, at 
least pGina can fill in the gaps on occasion.  I wouldn't be surprised if 
there are 3rd party tools, though I have not found them.


> One can get pretty far without krb5 though. cyrus-sasl can do NTLM so
> you can integrate Outlook with your SMTP/IMAP servers, squid can
> authenticate against a samba server, http-auth with NTLM should be
> possible (mod_ntlm) all reusing the logon credentials.
>
> cheers
>  Paul

Thanks for all of your feedback, Paul.  It's helped me in consideration for 
various aspects of my setup, and hopefully others as well.

Robert

-- 
[email protected] mailing list

Reply via email to