Author: jerry Date: 2005-09-29 22:34:39 +0000 (Thu, 29 Sep 2005) New Revision: 10632
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10632 Log: clarification of 'security=domain' note Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt =================================================================== --- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-09-29 22:34:21 UTC (rev 10631) +++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-09-29 22:34:39 UTC (rev 10632) @@ -21,22 +21,23 @@ Winbind, security = domain, and Active Directory ================================================ -Recent security updates for Windows 2000 and Windows 2003 -have changed the fashion in which user and group list can -be obtained from domain controllers. In short, the rpc -mechanisms used by "security = domain" to retrieve users -and groups is not compatible with these changes. The -"security = ads" configuration is not affected by the -Windows protocol changes. +Recent security updates for Windows 2000 and Windows 2003 have +changed the fashion in which user and group lists can be obtained +from domain controllers. In short, the RPC mechanisms used by +"security = domain" to retrieve users and groups is not compatible +with these changes. The "security = ads" configuration is not +affected by the Windows protocol changes. -Samba developers are actively working to correct this -problem in the version 3.0.21. Administrators who are -unable to migrate to "security = ads", can define credentials -to be used by winbindd when enumerating users by executing -"wbinfo --set-auth-user='DOMAIN\username%password'" +Samba developers are actively working to correct this problem in +the 3.0.21 release. In the meantime, Administrators who are unable +to migrate to "security = ads" and must continue using "security = +domain", can define credentials to be used by winbindd for account +enumeration by executing the following command as root. + wbinfo --set-auth-user='DOMAIN\username%password' + ###################################################################### Changes #######
