samba - Jul 2003 - Samba + LDAP + Kerberos

I have been working on getting the three of these to work together and I think
that they are. (Mostly)

Anyway the real question is: Is there a way to setup samba and the ldap scripts
that are distributed with Samba so that they don't use a plain text
password?
Maybe I'm just too paranoid, but the idea of putting the rootdn password in
the
slapd.conf and the smbldap_conf.pm seems a bit too risky.

Thanks,

Doug

Doug Curtis wrote:
> I have been working on getting the three of these to work together and I
think
> that they are. (Mostly)
> 
> Anyway the real question is: Is there a way to setup samba and the ldap
scripts
> that are distributed with Samba so that they don't use a plain text
password?
AFAIK samba only knows simple auth with TLS.
> Maybe I'm just too paranoid, but the idea of putting the rootdn
password in the
> slapd.conf and the smbldap_conf.pm seems a bit too risky.
Consider not using rootdn for your binddn, set up a dedicated manager 
account for samba.

greetings
	Paul
> 
> Thanks,
> 
> Doug