On Thu, Nov 13, 2008 at 4:22 AM, Volker Lendecke <[EMAIL PROTECTED]>wrote:
> On Wed, Nov 12, 2008 at 03:41:12PM -0700, Christian McHugh wrote: > > > On Wed, Nov 12, 2008 at 03:53:51PM -0500, Lenny Shovsky wrote: > > > > Can Samba authenticate directly ( through pam_ldap ? ) via LDAP, > which > > > > only has Unix uids & password hashes ? Thank you. > > > > > > No. You need to store the NT hashes somewhere, either in > > > LDAP or in another passdb backend. > > > > What about the nss winbind backend? Couldn't you setup nss_ldap and > pam_ldap, > > and still run a samba server with the nss winbind backend? > > Sure. But someone in the end must have the NT hashes. In the > case of winbind it's a domain controller. > > Volker > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > dear all Does NT hashes require even if we use kerberos for authentication?. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
