Re: Can Debian replace Windows NT Server?
Christian Leutloff wrote:
>
> Adam Shand <ashand@alaska.net> writes:
>
> > > > I know this is a FAQ, and the answer is no in principle, because the Samba
> > > > team won't do any development regarding authentication services (with a
> > > > justified reason), but I'd like to know if Debian can replace NTS --
> > > > obviating the lack of authentication.
> >
> > I hadn't heard that about the Samba team. What are their reasons for not
> > doing further work on authentication services?
>
> so far as a know the main problem is the not documented communication
> between the servers. But on the other hand there should be
> authentication against the Samba server possible with the next major
> release.
>
> I'm searching a solution for this problem to. There was sometime ago
> an announcement that a company provides a commercial solution for the
> authentication problem.
The current sambades package allows encrypted authentication (which
NT with service pak 3 requires, unless you twiddle the registry).
Samba *can not* act as a domain controller (although it works fine as
a WINS server). If you want to authenticate users *through* a domain
controller this works fine. I use it extensively. Users have accounts
on our NT PDC and I set the following in the /etc/smb.conf file:
encrypt passwords = true
password server = YOUR-NTSERVER
security = server
The docs *which come with the samba package* indicate that work is being
done to allow samba to function as a domain controller. I wouldn't be
surprised if they blew this off since the current domain/user/group
stuff if being scrapped for Directory Services in NT 5 (which is built
upon an actual non-M$ standard, X.500). The current "domain" system
blows major chunks if you have more than a single workgroup. Ask anyone
who actually administers such a system. Any questions?
--
Jens B. Jorgensen
jjorgens@bdsinc.com
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org .
Trouble? e-mail to templin@bucknell.edu .
Reply to: