samba - Sep 2005 - Samba + Kerberos

All;
I have a situation that I'm not sure can be done (I honestly don't know 
enough about Samba for this one).

Here's what I have.

The customer has a Windows ADS (note: It's the newer windows ADS, so 
there is no NT Domain as in the old NT format).
There are also a number of *nix servers (AIX) that have data on them.

They want to use Samba as basically, an NFS server to serve out shares 
to the users on their PCs.
BUT... They use a "CryptoCard" (Kerberos) password encryption on the
AIX
boxes. They want Samba to prompt for Kerberos passwords before allowing 
the connection.

Is this even possible?
If so, I need some serious help getting it all set up.

Also: Their current Samba servers are running Samba 2.2.8a (sans 
kerberos). They want to be able to migrate the user base over to the 
Samba 3.0.x installation. I tried "net .. vampire ..." but got
nothing.
I could use some advice with that too.

Any, and all advice will be greatly appreciated!

Thanks in advance!

-Ric

On Wed, 2005-09-07 at 08:28 -0600, Ric Tibbetts wrote:
> All;
> I have a situation that I'm not sure can be done (I honestly don't
know
> enough about Samba for this one).
> 
> Here's what I have.
> 
> The customer has a Windows ADS (note: It's the newer windows ADS, so 
> there is no NT Domain as in the old NT format).
> There are also a number of *nix servers (AIX) that have data on them.
> They want to use Samba as basically, an NFS server to serve out shares 
> to the users on their PCs.
I assume you mean as a CIFS server, in the AD domain.
> BUT... They use a "CryptoCard" (Kerberos) password encryption on
the AIX
> boxes. They want Samba to prompt for Kerberos passwords before allowing 
> the connection.
> 
> Is this even possible?
If it just looks like normal kerberos in AD, then Samba doesn't even
know.
> If so, I need some serious help getting it all set up.
Look into the documentation about being an ADS domain member.  You don't
need any vampire stuff, as you want to be a member, not a DC.

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20050908/e343cc71/attachment.bin