Hello,

Playing with my smb.conf on a new server (2.2.5), I noticed that the
'security=domain' and 'encrypt passwords=yes' parameters are somewhat
redundant.  When commenting out the 'encrypt passwords' line, testparm
gave me the error in the subj.  I know some config options (such as
'domain master') have recently added a default of 'auto'; is there any
reason not to do the same for 'encrypt passwords' in Samba 3.0?  I would
propose an 'encrypt passwords = auto' that behaves like the pseudocode
below:

if (exists $(smb passwd file) || has_valid_pdb_backend() || $security == domain)
        encrypt passwords = yes
else
        encrypt passwords = no
fi

Are there disadvantages to such an approach?

Cheers,
Steve Langasek
postmodern programmer

Attachment: msg01916/pgp00000.pgp
Description: PGP signature

Reply via email to