authentication question

[Alexander Dalloz]

Am Do, den 18.03.2004 schrieb K. Richard Pixley um 02:02:
> I'm at a loss for how to do authentication well for a small group of 
> linux machines.
> 
> We have several linux hosts, all of which run samba, and all of which 
> should use a single password per user, or at least, a single password 
> change program which changes all passwords.  Samba really wants to use a 
> domain server or to keep it's own password database separate from the 
> unix passwords.
> 
> Any suggestions on how to get these all authenticated off the same database?
> 
> The only thing I can see to do is to turn one into a domain controller 
> and have everything else authenticate off that.  Are there any other 
> alternatives?
> 
> --rich

You can make use of a central LDAP server. You can authenticate shell
access against such a server as well as Samba auth. (What Microsoft does
with actual Win2k/Win2k3 Active Directory domains is nothing else than a
combination of LDAP, Kerberos and DNS.)

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 1 (Yarrow) on Athlon CPU kernel 2.4.22-1.2174.nptl
Sirendipity 02:19:43 up 9 days, 2:38, load average: 0.07, 0.10, 0.11 
                   [ Γνωθι σ'αυτον - gnothi seauton ]
             my life is a planetarium - and you are the stars
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20040318/22d1ac83/attachment-0002.bin