samba - Oct 2002 - Question regarding the possibility of W2K smartcard logon - 2nd post

Hi!

Are there anyone out there who can give me some informations about this
issue?...

Thanks,

Elek J?zsef

-----Original Message-----
From: Elek J?zsef [mailto:elekj@ekg.gov.hu]
Sent: Thursday, October 03, 2002 9:57 AM
To: samba@lists.samba.org
Cc: K-D Andr?si Istv?n
Subject: Question regarding the possibility of W2K smartcard logon


Hi!

I could not find any documentation about the possibility of W2K
smartcard-based logon using Samba as a PDC (no MS on the logon server side).
Is it possible?

If yes:
Is it possible in case of MS CA only? Can I use any other (third party) CAs?
Where can I find usable documentation for this?

If not:
Is the following configuration can work: W2K server acting as a PDC (for
performing smartcard-based logons and running the MS CA) and a Samba acting
as a file/printer server for the domain? In this case it would be
interesting if I can use a third party CA for W2K domain logon - but it is
not the question of this list. :)

Any piece of information can help. Thank you in advance,

Elek Jozsef
System Engineer
Kopint-Datorg Rt., Hungary

Elek J?zsef wrote:
> 
> Hi!
> 
> Are there anyone out there who can give me some informations about this
> issue?...
Smartcard authentication is only really possible with Kerberos.  Samba
should not be able to tell the difference between a smart-card and a
'passworded' login in this situation.

The bad news is that you will need to use a Win2k DC, as Samba does not
yet support being an AD Domain Controller.  Also, you will need to use
Samba 3.0.

Andrew Bartlett
> -----Original Message-----
> From: Elek J?zsef [mailto:elekj@ekg.gov.hu]
> Sent: Thursday, October 03, 2002 9:57 AM
> To: samba@lists.samba.org
> Cc: K-D Andr?si Istv?n
> Subject: Question regarding the possibility of W2K smartcard logon
> 
> Hi!
> 
> I could not find any documentation about the possibility of W2K
> smartcard-based logon using Samba as a PDC (no MS on the logon server
side).
> Is it possible?
> 
> If yes:
> Is it possible in case of MS CA only? Can I use any other (third party)
CAs?
> Where can I find usable documentation for this?
> 
> If not:
> Is the following configuration can work: W2K server acting as a PDC (for
> performing smartcard-based logons and running the MS CA) and a Samba acting
> as a file/printer server for the domain? In this case it would be
> interesting if I can use a third party CA for W2K domain logon - but it is
> not the question of this list. :)
> 
> Any piece of information can help. Thank you in advance,
> 
> Elek Jozsef
> System Engineer
> Kopint-Datorg Rt., Hungary
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net