On Tuesday 12 April 2005 12:53, Thomas, Richard C. wrote: > We have an AIX 4.3.3 box with Samba 2.0.0. Is Samba 2.0.0 compatible > with Active Directory 2003 with respect to making it a Domain member using > Kerberos authentication?
No. Only Samba-3.0.x has the ability to be compiled with MIT or Heimdal Kerberos support to enable it to join an ADS domain as a kerberized client. Samba-2.0.0 is very old and does not support many features that have been added during the life of the Windows 200X series of servers and clients. Additionally, there have been many security releases and updates since 2.0.0 shipped and it would be most unwise to use a version that old today unless it is wholly contained within a private network space. > The requirement for SMB signing in our AD 2003 has been disabled so this > should not be an issue. Samba-2.x does not have support for schannel and smb signing, Samba-3.x does have this support and it is desirable to operate with these security features enabled. I recommend that you update to Samba-3.0.14 or later. - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
