OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Adam Clarke (Adam.ClarkeStrategicData.com.au)
Date: Thu Nov 15 2001 - 17:39:04 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    When you say you have enabled clear text passwords, do you mean on the WinXX
    hosts or on Samba?

    If you mean on Samba then that is your problem. You'll need to do one of the
    following things

    o enable WinXX clear text passwords (which is a registry hack on NT and so
    probably also XP- not sure of 98)

    o Enable and manage encrypted passwords on your Samba servers (see
    ENCRYPTION.txt in the Samba docos)

    o Use a modern samba (2.2.x) and use security = DOMAIN
       - Note that your samba server must join your domain (smbpasswd)
       - You still need to add users to samba system however passwords should
    not need to be set
       - Add all your clients to a domain

    There are also libraries for PAM and nsswitch that will allow Unix boxes to
    authenticate users against a PDC (distributed with Samba 2.2) and resolve
    IP's usnig a WINS server.

    Hope this is helpful
    Cheers
    Adam

    ----- Original Message -----
    From: "Scott Ehrlich" <scottai.mit.edu>
    Subject: Single sign-on capability?

    > Since Samba requires a user to still enter their password even after the
    > user has logged in locally or to the domain (same username/password pair
    > for local usage as is with their UNIX/NIS account), is there any
    > /Windows hack/fix/patch/command switch/ to permit the credentials from a
    > single login to pass through all drive mappings and permit the user to
    > only have to enter their information once?