samba - Jan 2006 - Dual Mode Security

Hi there, 

 

Simple question.  I currently have security = server mode working for my
samba installation on a freebsd unix box where I work.  I am wondering
if I can use a dual mode of security.  For example, I want to be able to
authenticate certain samba user shares against the samba password file
rather than the Active Directory server that I authenticate against
sometimes.  Better would be to have samba check the passwords file
first, if NO authentication, then proceed onto the Active Directory
auth.  Can this be done with Samba?

 

Thanks,

 

Rogie

On Thu, 2006-01-05 at 12:53 -0700, King, Rogie wrote:
> Hi there, 
> 
>  
> 
> Simple question.  I currently have security = server mode working for my
> samba installation on a freebsd unix box where I work.  I am wondering
> if I can use a dual mode of security.  For example, I want to be able to
> authenticate certain samba user shares against the samba password file
> rather than the Active Directory server that I authenticate against
> sometimes.  Better would be to have samba check the passwords file
> first, if NO authentication, then proceed onto the Active Directory
> auth.  Can this be done with Samba?
Certainly not on a per-share basis, as that is too late.  You could
however setup separate IP aliases for your host, and use include smb.conf.%i

You could also use %L (called name) and netbios aliases, but you must
set 'smb ports = 139' to block access to port 445, which does not
provide that info.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20060106/013970c2/attachment.bin

Hi there, 

 

Simple question.  I currently have security = server mode working for my
samba installation on a freebsd unix box where I work.  I am wondering
if I can use a dual mode of security.  For example, I want to be able to
authenticate certain samba user shares against the samba password file
rather than the Active Directory server that I authenticate against
sometimes.  Better would be to have samba check the passwords file
first, if NO authentication, then proceed onto the Active Directory
auth.  Can this be done with Samba?

 

Thanks,

 

Rogie

Hi there, 

 

Simple question.  I currently have security = server mode working for my
samba installation on a freebsd unix box where I work.  I am wondering
if I can use a dual mode of security.  For example, I want to be able to
authenticate certain samba user shares against the samba password file
rather than the Active Directory server that I authenticate against
sometimes.  Better would be to have samba check the passwords file
first, if NO authentication, then proceed onto the Active Directory
auth.  Can this be done with Samba?

 

Thanks,

 

Rogie