Hi, I've just migrated NT domain to samba+ldap - works great, but there is one thing I don't quite understand: What is the reason to have a 'computer account' on host UNIX serving samba? I know, that NT PDC needs ID+password for each computer within its domain. But samba TDB or LDAP pwdb backend look quite sufficient. I don't see a reason to have those exposed (shadowed) as UNIX accounts - are there any? In other words, I don't see any activity, that NT domain computer does *on*its*own*account* - e.g. as UNIX process - on samba server. Is there any? Is there any other reason to have UNIX account ID for NT domain computer? (I have already tested a setup, where all NT domain coputers share common home directory, and it looks like nobody makes any attempt to write there - so that feature of UNIX account does not look necesary) Thenx, -R
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rafal Pietrak wrote: | What is the reason to have a 'computer account' on host UNIX serving samba? | | I know, that NT PDC needs ID+password for each computer within its domain. | But samba TDB or LDAP pwdb backend look quite sufficient. I don't see a | reason to have those exposed (shadowed) as UNIX accounts - are there any? | | In other words, I don't see any activity, that NT domain computer does | *on*its*own*account* - e.g. as UNIX process - on samba server. Is there | any? Is there any other reason to have UNIX account ID for NT domain | computer? (I have already tested a setup, where all NT domain coputers | share common home directory, and it looks like nobody makes any attempt to | write there - so that feature of UNIX account does not look necesary) Rafal, please search the archives. I'm not explaining the details of this again. cheers, jerry - ---------------------------------------------------------------------- Hewlett-Packard ------------------------- http://www.hp.com SAMBA Team ---------------------- http://www.samba.org GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc "...a hundred billion castaways looking for a home." ----------- Sting -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAt5ckIR7qMdg1EfYRAuDhAKDobt7CXief4gdxQSDC1mvMcEA5mQCg8njF 8jsFxVLZG1M2L6C2e5tSUdQ=DRcd -----END PGP SIGNATURE-----