Re: [Samba] Question regarding the possibility of W2K smartcard logon - 2nd post

2002-10-04 Thread Andrew Bartlett

Elek József wrote:
 
 Hi!
 
 Are there anyone out there who can give me some informations about this
 issue?...

Smartcard authentication is only really possible with Kerberos.  Samba
should not be able to tell the difference between a smart-card and a
'passworded' login in this situation.

The bad news is that you will need to use a Win2k DC, as Samba does not
yet support being an AD Domain Controller.  Also, you will need to use
Samba 3.0.

Andrew Bartlett

 -Original Message-
 From: Elek József [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, October 03, 2002 9:57 AM
 To: [EMAIL PROTECTED]
 Cc: K-D Andrási István
 Subject: Question regarding the possibility of W2K smartcard logon
 
 Hi!
 
 I could not find any documentation about the possibility of W2K
 smartcard-based logon using Samba as a PDC (no MS on the logon server side).
 Is it possible?
 
 If yes:
 Is it possible in case of MS CA only? Can I use any other (third party) CAs?
 Where can I find usable documentation for this?
 
 If not:
 Is the following configuration can work: W2K server acting as a PDC (for
 performing smartcard-based logons and running the MS CA) and a Samba acting
 as a file/printer server for the domain? In this case it would be
 interesting if I can use a third party CA for W2K domain logon - but it is
 not the question of this list. :)
 
 Any piece of information can help. Thank you in advance,
 
 Elek Jozsef
 System Engineer
 Kopint-Datorg Rt., Hungary
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Question regarding the possibility of W2K smartcard logon

2002-10-03 Thread Elek Jzsef

Hi!

I could not find any documentation about the possibility of W2K
smartcard-based logon using Samba as a PDC (no MS on the logon server side).
Is it possible?

If yes:
Is it possible in case of MS CA only? Can I use any other (third party) CAs?
Where can I find usable documentation for this?

If not:
Is the following configuration can work: W2K server acting as a PDC (for
performing smartcard-based logons and running the MS CA) and a Samba acting
as a file/printer server for the domain? In this case it would be
interesting if I can use a third party CA for W2K domain logon - but it is
not the question of this list. :)

Any piece of information can help. Thank you in advance,

Elek Jozsef
System Engineer
Kopint-Datorg Rt., Hungary

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba