On Fri, 2003-08-01 at 17:30, Markus Amersdorfer wrote:
> On 01 Aug 2003 11:27:32 +1200
> Brent Addis <[EMAIL PROTECTED]> wrote:
> 
> > Im trying to get a samba pc reading passwords off a windows pdc for
> > authorising user shares.
> > 
> > The howtos all say to use pam_stack.so for this however it does not
> > exist in debian (its a redhat thing).
> > 
> > is there a workaround for this?
> 
> AFAIR "libpam-smb" does what you want.

No, you don't want that...

PAM can only deal with plaintext passwords, and pam_smb is even worse,
as it takes no measures to ensure it is actually talking to the real DC
in the process...

For unix logins, pam_winbind and winbindd are a good combination.  For
SMB logins (to file shares) set Samba into 'security=domain' and join
the domain.

Andrew Bartlett

-- 
Andrew Bartlett                                 [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org     http://build.samba.org     http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to