using external authentication to validate samba users

Andrew Bartlett
Sat, 29 Dec 2001 16:14:03 -0000

Marbacher Christophe wrote:
>
> Hi,
>
> Is there any way to use an external program to validate users'
passwords? It
> would be something like an exec command that would return the
authentication
> result.
>
> What I'm willing is to be able to authenticate a samba user against a
radius
> server. Why? Because I get to use tokens (one life time password) against
> different realms.
>
> Has anybody an idea?

Feel free to write an authentication module to do the job.  In Samba
HEAD (3.0 alpha) it should be relitivly simple to do this.  I'll take
patches.

Watch out that you probabaly want encrypted authenticaion, which gets
messier, but it stil practical. :-(.

Andrew Bartlett

--
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net