Hi, Just want to clarify and confirm with everyone, If I want my Solaris Samba box to join an AD domain via winbind, I'd need neither krb5.conf nor krb5.keytab, but instead only file I'd need is smb.conf with a correct configuration, correct? Thanks in advance. - Kevin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey, Kevin, On 10/12/2010 01:41 PM, Keun Song wrote:> > > > Hi, > > > Just want to clarify and confirm with everyone, > > If I want my Solaris Samba box to join an AD domain via winbind, I'd need neither krb5.conf nor krb5.keytab, but instead only file I'd need is smb.conf with a correct configuration, correct? > > > Thanks in advance. > > > - Kevin > >Windows machines joined to an Active Directory domain will use Kerberos first. If that does not work, it will then attempt using ntlm/lanman, etc. It may work well for you, but Solaris/Linux is made for kerberos integration. Ideally, you will want your Solaris domain member will want all authentication tools available to it for maximum flexibility. Take a look at the following: samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html technet.microsoft.com/en-us/library/cc780455(WS.10).aspx technet.microsoft.com/en-us/library/bb742433.aspx - -- ________ Robert Freeman-Day launchpad.net/~presgas GPG Public Key: keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAky0sEcACgkQup357T5MfTbh0gCgklaaMba1Kol/FObGKik06w8I BQIAn343XR+oVDPRroQ9EFrsVXC8AqFS =3yIU -----END PGP SIGNATURE-----