1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-05 20:58:40 +03:00

Some small updates - 'ads server' is no longer required for example

(This used to be commit b8f9930f62db8b997a0d6126e79212a113f8b29c)
This commit is contained in:
Jelmer Vernooij 2002-11-14 22:54:23 +00:00
parent 2b799b56f4
commit ae23dfd427

View File

@ -10,10 +10,8 @@
<title>Samba as a ADS domain member</title> <title>Samba as a ADS domain member</title>
<para> <para>
This is a VERY ROUGH guide to setting up the current (November 2001) This is a rough guide to setting up Samba 3.0 with kerberos authentication against a
pre-alpha version of Samba 3.0 with kerberos authentication against a Windows2000 KDC.
Windows2000 KDC. The procedures listed here are likely to change as
the code develops.
</para> </para>
<para>Pieces you need before you begin: <para>Pieces you need before you begin:
@ -76,13 +74,17 @@ to get them off CD2.</para>
<para><programlisting> <para><programlisting>
realm = YOUR.KERBEROS.REALM realm = YOUR.KERBEROS.REALM
ads server = your.kerberos.server
security = ADS security = ADS
encrypt passwords = yes encrypt passwords = yes
</programlisting></para> </programlisting></para>
<para>Strictly speaking, you can omit the realm name and you can use an IP <para>
address for the ads server. In that case Samba will auto-detect these.</para> In case samba can't figure out your ads server using your realm name, use the
<command>ads server</command> option in <filename>smb.conf</filename>:
<programlisting>
ads server = your.kerberos.server
</programlisting>
</para>
<para>You do *not* need a smbpasswd file, although it won't do any harm <para>You do *not* need a smbpasswd file, although it won't do any harm
and if you have one then Samba will be able to fall back to normal and if you have one then Samba will be able to fall back to normal