Thien Vu wrote:

> I was wondering if there was anyway to have the Macintosh clients use the
> Microsoft UAM to authenticate to the netatalk server because the Netatalk
> server then authenticates using pam_smb to a Samba server. Now all of this
> communication is going on through cleartext, and I was wondering if I
> could force the Macintosh machines to use the MS UAM to have encrypted
> passwords over the network?

Why not use the DHX uam?  This allow encrypted password transport from
the Macintosh client to the netatalk server (and allows passwords of
more than 8 characters).  We use this with a Kerberos pam module to do
authentication.

--Ryan Cleary

Reply via email to