[35814] in Kerberos
Re: password synchronization with samba3
daemon@ATHENA.MIT.EDU (Christian)
Mon Mar 3 03:54:22 2014
Message-ID: <53144330.2020503@googlemail.com>
Date: Mon, 03 Mar 2014 09:54:08 +0100
From: Christian <chanlists@googlemail.com>
MIME-Version: 1.0
To: Russ Allbery <eagle@eyrie.org>
In-Reply-To: <87zjl8fj01.fsf@windlord.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>> we have an odd scenario here where we would like to synchronize
>> passwords in Kerberos with a Samba3 PDC. One option I see is the
>> kadm5_hook interface, so something like krb5-sync
>> (http://www.eyrie.org/~eagle/software/krb5-sync/) targeted at syncing
>> with samba3. Is anybody aware of projects or code or other options?
>
> I suspect that krb5-sync would just work. The password synchronization is
> done via the kpasswd protocol, which I'm fairly sure that Samba3 supports.
Hm. I was thinking about the NTLMv2 password... We have an existing
Samba3 NT4 style domain. Passwords are stored in the ldap backend, so
the kadm5_hook could just write to ldap.
In the long run, this is probably not a viable solution. I have looked
at samba4, but it looks like I would have to replace all the services
that work so well for our unix client now - openldap, kerberos, ...,
with samba just for the windows clients. What do other people do? Best,
Christian
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
