Re: SPNEGO questions

On Mon, 2005-10-10 at 21:21 +0200, Serassio Guido wrote:
> Hi Andrew,
>
> At 15.43 10/10/2005, Andrew Bartlett wrote:
> > > >You need Samba4 unfortunately. I promised (then did not deliver)
> > > >instructions for Henrik. Start by downloading and installing Samba4 as
> > > >a domain controller. It is in SVN, instructions on devel.samba.org
> > >
> > > OK, but I need to configure Samba 4 as Domain Controller ?
> > > I want to make my tests on a Windows AD Domain.
> >
> >We support both domain member and DC roles for this, but the domain
> >member side is a bit fiddly (but functional, I believe) for NTLM
> >support. Kerberos is much easier.
>
> So, have a working baseline based on Linux and Samba as an AD Member
> will be not so easy as I was hoping .... :-(

svn co; ./autogen.sh; ./configure; make; make install; 'net join domain'

That should handle most of it. Setup the smb.conf with 'domain role =
member'.

> Any chance to have this working in a future Samba 3.x release, or we
> must wait for Samba 4 ?

I'm happy to assist you with setting up Samba4 to handle this, but the
Samba3 code just isn't up to snuff on SPNEGO I feel.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net