-----Original Message-----
From: Juergen Hasch [mailto:Hasch@t-online.de]
Sent: Thursday, July 04, 2002 15:15
To: Buchan Milne
Cc: samba@lists.samba.org
Subject: Re: [Samba] Winbind and Windows 2000
Am Donnerstag, 4. Juli 2002 12:48 schrieb Buchan Milne:
> > You can set a user for winbind to authenticate with:
> > wbinfo -A user%password
>
> But shouldn't winbind set this up to use the machine account? Or how
is> this supposed to work? Does it need a user account?
>
> We are looking at streamlining the process of joining winbind
machines,> and potential clients are very averse to enabling pre-Windows-2000
> compatible access.
>
> Or should we just have a wrapper around smbpasswd -j which grabs the
> username and password of a domain admin account, and uses that for
> wbinfo -A. Only problem is that this wouldn't work for pre-made
machine> accounts ....
>
You don't want to use your valuable domain admin account and store it
in a cleartext database.
Either enable anonymous connect on the W2K machine or use an account
with less (or no) privileges.
...Juergen
My advice (and what I did) is to create a Domain account specifically
for Samba/Winbind authentication. Same concept as creating an Exchange
service account or a SQL service account except you don't have to give
is special access rights.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
