Re: Fwd: Re: [squid-users] winbind authentication, mystical ?

This looks mostly correct to me.

The 'encrypt passwords = yes' is actually irrelevent here, it refers to
what Samba negotiates with its SMB clients.

Samba 2.2.x, x >= 4 is required, which must have nmbd and winbindd
started.

nmbd must run due to bugs in NT, it replies to the wrong port - nmbd
spits 'unexpected' packets into a tdb for collection.

Running smbd will allow the domain trust password to be changed, but
provides no other benifit. (In fact, it might not even do that, if no
users contact it...)

Samba HEAD currently (but this *will* change) uses the same protocol,
and allows the trust password to be changed with cron and 'net rpc
changetrustpw'.

Henrik Nordstrom wrote:
>
> ---------- Forwarded Message ----------
>
> Subject: Re: [squid-users] winbind authentication, mystical ?
> Date: Thu, 4 Jul 2002 15:06:13 -0400
> From: "Jerry Murdock" <jmurdock@itraktech.com>
> To: Henrik Nordström <hno@squid-cache.org>
>
> A first draft is attached. Haven't looked at any squid style
> guidelines yet.
>
> Jerry
>
> ----- Original Message -----
> From: "Henrik Nordström" <hno@squid-cache.org>
> To: "Jerry Murdock" <jmurdock@itraktech.com>
> Sent: Thursday, July 04, 2002 11:21 AM
> Subject: Re: [squid-users] winbind authentication, mystical ?
>
> Would you mind writing a small howto/faq entry on how to get it up
> and running?
>
> That is on my wishlist.. to have some documentation where I can refer
> users who want to get winbind based authentication running..
>
> Regards
> Henrik
>
> -------------------------------------------------------
>
> ------------------------------------------------------------------------
> Name: winbind.txt
> winbind.txt Type: Plain Text (text/plain)
> Encoding: quoted-printable

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net