SPAM: RE: [Wolves] Samba as an Active Directory server

[Chris Procter]

Samba can act as a Primary Domain Controller for NT4 domains though, and
win2000/XP clients can autheticate against an NT4 domain. Its not the same
as full AD but might be worth bearing in mind depending what you are trying
to do.

Microsoft use a non-standard version of kerberos for AD, I think it uses one
of the "reserved for future use" fields or something, there was much hoohar
about it 4years ago when they announced it.

chris

> -----Original Message-----
> From: Old Dan [mailto:dan at dannyboy.dnsalias.org]
> Sent: 29 September 2004 16:19
> To: Wolverhampton Linux User Group
> Subject: Re: [Wolves] Samba as an Active Directory server
> 
> 
> Stuart Langridge wrote:
> > Is it possible to use Samba as an Active Directory server 
> so that things 
> > that need to auth against an AD server can auth against a 
> Samba box? I'm 
> > not sure whether this is for an environment with some AD servers 
> > already, or one with no AD at all. If it is, can someone 
> point me[1] at 
> > some resources on how? The Samba docs are...lacking.
> > 
> > Aq.
> > 
> > [1] well, actually, my mate Bill,, who is cc'ed,, but it 
> should go to 
> > the list too so it gets archived...
> 
> In a word, no.  AD uses proprietary extension thingies to LDAP and 
> whatnot and integrates them.  This hasn't been implemented in Samba.
> 
> It's not even on the roadmap, in fact.  This is precisely what I was 
> bemoaning at the meet a few weeks ago.  You /can/ get something 
> approaching an AD equivalent, but not AD itself, by 
> implementing a slew 
> of stuff and wrestling to get it all working together.
> 
> Apparently (according to I think Ron) the folks at Samba-TNG 
> are working 
> on AD, but experimentally.  I've looked for it on their site 
> and could 
> find no mention (though that could admittedly have been 
> tiredness on my 
> part) so it must be /very/ experimental... :)
> 
> -- 
> Dan
> 
> _______________________________________________
> Wolves LUG mailing list
> Homepage: http://www.wolveslug.org.uk/
> Mailing list: Wolves at mailman.lug.org.uk
> Mailing list home: http://mailman.lug.org.uk/mailman/listinfo/wolves
> 


**********************************************************************
Any opinions expressed in this email are those of the individual
and not necessarily those of Fox Online.
This email and any files transmitted with it, including replies and
forwarded copies (which may contain alterations) subsequently transmitted
from Fox Online, are confidential and solely for the use
of the intended recipient.
If you have received this email in error please notify Fox Online by
telephone on +44 (0)121 693 1424.
**********************************************************************