similar to: Why would I want Active Directory (rather, how to ar gue against it?)

> -----Original Message----- > From: Brian J. Murrell [mailto:brian@interlinx.bc.ca] > > - Single Sign-On via Kerberos > > OK. Actually I understood this feature. I am just wondering how it > applies in an MS network. SSO to all of what? If my DCs are my > file/printer server(s) (let's say I mirror the data contents > of my PDC to > my BDC as well --

I think I understand what Active Directory is all about. I understand LDAP and I understand Kerberos. I can see how AD (well, Kerberos actually) enables single-sign-on (I assume it deals in tickets with the Windows clients as standard Kerberos clients do) and can make life easy in a large network (which, IIRC was one of the design goals of Kerberos in the first place). But lets say I have a

Hi all, I got a new assignment today. My task is to install LDAP instead of NIS in our network, consisting of Solaris, Linux and W2k. Our actual setup is like this: Accounts are kept on a Solaris-server and served with samba and NFS. Two PCs serve as PDCs, running NOT samba on unix but a real W2k. Special MS-PAM-modules on the Solaris-server are used to synchronise accounts and passwords with

Hi Igor, Once again, thanks for keeping up with me. I have been migrating my master ldap server to 2.1 version so to keep it the same with the PDCs version of LDAP. Now they are the same. I have rectified such that "wbinfo -u" on both sides worked now. I am made "net rpc trustdom list" worked. It was not working before. I had to put "stuadmin = root" in the

James: (Again someone correct me if I'm wrong) PAM allows local access to the Samba machine as well as authenticating Samba users. Winbind *only* allows for Samba access. This is why I chose *not* to use PAM in my setup. I don't want normal users to have local logon access to *MY* servers. <evil grin> With Winbind, you don't need PAM at all. If you're planning on

Hi, I'm having some trouble connecting the SMB networks on two LANs that are connected over a "slow" (DSL) link: Network B: 172.16.0.0/24 Domain B: office Network A: 172.16.1.0/24 Domain A: home gate.office and gate.home are the respective networks' NAT gateways connecting to the internet over ADSL lines. The private IP spaces are connected to each other via an ipsec tunnel

Hey all, After setting up a migration server (a server which will act as a test for a Samba 3.x environment), so we can make sure our migration from Samba 2.2.x to 3.x goes as smoothly as possible, I've hit upon a problem, now I am not sure whether this is the fault of Samba (my configuration) or NT4 or whether this is infact designed behaviour for both/either servers. I'd like to

http://www.geeks.com/details.asp?invtid=8835Y11-R Use Promo Code: 8835DEAL to bring it down to $219 (plus shipping) I picked up two: 8835Y11-R -- IBM eServer 325 Dual Opteron 2.0GHz 1GB 12 2 $219.99 $439.98 (a little less than $500 for two) Thanks, Steve Totaro

The interesting part is that PAM nor the SMB auth plugin for Apache requires you to be a member of the domain. However, the caveat with pam_smb_auth is that you have to have a unix account for every windows user you want to authenticate. I guess the behavior I'm trying to achieve is the one achieved with the Apache plugin: 1) Doesn't require you to be a member of the domain 2)

I did some trawling on the ISI web of science, selecting all papers citing all papers with "R DEV COR TEAM" in the author field (which is how ISI seems to be tagging things). The results are interesting -- about 2400 references. Enjoy these summaries ... urlpref = "http://www.zoo.ufl.edu/bolker/R_isidata" types =

month <- "2010-August" list <- "r-help" ##list <- "r-sig-ecology" ##list <- "r-sig-mixed-models" ## month <- "2010q3" n <- 50 baseurl <- "https://stat.ethz.ch/pipermail/" library(RCurl) z <- getURL(paste(baseurl,list,"/",month,"/author.html",sep="")) zz <-

In our situation we sometimes run netscape from a another platform via ssh and so the machine netscape is running on may not contain any R software, or more precisely the user home account on the machine running netscape is different from the account they initiated R and so having netscape look into there home directory will NOT work. It would desirable to have easy way to specificy a

Hi I have an AR instance foo that recently got an assignment method #bar=. Before this addition I could use mass-assignment for foo with: Foo.new(params[:foo]) and: foo.attributes = params[:foo] But appearantly assignment methods like #bar= don''t get called with the 2 examples above. I have to: foo = Foo.new params[:foo].each do |key, val| rec[key] = val end and something very

Hallo. I have problem configuring winbind to authenticate against Active Directory (Windows Server 2003 R2 in native mode). Our net topology seems as follows: - We have PDCs for domain DOMA (i.e.) - there are user accounts for all people on our university. - We have PDC for domain DOMB (DC for our department) that holds computer accounts. - Between DOMA and DOMB is one side trust. So Windows

Greetings, I've been debugging the following scenario for some time now, and I'm slowly runing out of ideas. If anyone would suggest anything helpful... I'd be grateful. Anyway, here's the setup: windows 2003 AD domain running in 'windows 2003 native' mode + a few Solaris 8 servers with Samba 3.0.0. All sambas have computer accounts in windows' domain, and have

Hi! We're in the process of upgrading our old NT4 PDCs to 2003 Server. We have several UNIX file servers that use Samba so Windows users can access files store on them. Currently, we've got Samba versions running from 2.2.7 up to 3. I've been doing some research on this, but there are some things that are unclear to me, and I'm hoping someone can answer what I am sure are

Hi Igor, I am no samba expert. Reading your email produce 2 thots. 1. If I have not read wrongly, you DID NOT managed to reproduce my scenario cos when you joined Domain A , login as user of DomB , you got the expected result, the Domain B's sambahomepath and drive gets map to the user B. Mine result was this: I joined Domain A, login as user of Dom B, I did NOT get Domain B's

I have hired someone to do some work on asterisk for me over the next couple of months, before they start, I would like to get a better idea of what other people need, which I can then dovetail into what I think my own 'requirements' are... Initially, a largish area that I think needs to be worked on is some sort of gastman type interface which will run on MS Windows, and be usable for a

Like many, I administer multiple LANs connected together using NT trust relationships. This was implemented about 4 years ago. I now have the occasion to consider performing this same task again, but this time, I would like to implement it solely through samba - no Microsoft PDCs anywhere. I have read documentation on samba.org regarding NT-style trust relationships and am now wondering, can I

Hi all, Short of hacking the code apart, is there a method making the login_engine authenticate against email address rather than username? I find that people rarely remember usernames, and would prefer to use email addresses as the identifier. Thanks! Tom