samba - Jun 2002 - security = domain / security = server

I understand that the difference between "server" and
"domain" mode is that
in "domain" mode"Samba fully uses the domain capabilities. He
behaves like
another NT Server or Windows 9x do by participating in domain trust
relationships."

Could someone please explain me
1. What is it exaclty that "domain" mode does, that "server"
mode doesn't
2. What is it exaclty that "server" mode does, that "domain"
mode doesn't

Thanks!

Nir Livni wrote:
> 
> I understand that the difference between "server" and
"domain" mode is that
> in "domain" mode"Samba fully uses the domain capabilities.
He behaves like
> another NT Server or Windows 9x do by participating in domain trust
> relationships."
> 
> Could someone please explain me
> 1. What is it exaclty that "domain" mode does, that
"server" mode doesn't
> 2. What is it exaclty that "server" mode does, that
"domain" mode doesn't
security=server is a man-in-the-middle attack on the remote PDC.  As you
might expect, it isn't pretty, and as such is not recommended if it is
at all possible to use 'the real thing'.  (That being security=domain).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net