1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
samba-mirror/source4/ntvfs/cifs
Stefan Metzmacher 5a8ac84270 s4:ntvfs/cifs: add option to use S4U2Proxy
Note: this doesn't work against a Samba4 KDC yet.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jun 22 18:17:43 CEST 2011 on sn-devel-104
2011-06-22 18:17:43 +02:00
..
README r11471: Describe how kerberos forwarding works with the ntvfs. 2007-10-10 13:45:41 -05:00
vfs_cifs.c s4:ntvfs/cifs: add option to use S4U2Proxy 2011-06-22 18:17:43 +02:00

This is the 'CIFS on CIFS' backend for Samba. It provides a NTVFS
backend that talks to a remote CIFS server. The primary aim of this
backend is for debugging and development, although some poeple may
find it useful as a CIFS gateway.

There are two modes of operation: Password specified and delegated
credentials.

Password specified:
-------------------

This uses a static username/password in the config file, example:

[myshare]
	ntvfs handler = cifs
	cifs:server = myserver
	cifs:user = tridge
	cifs:password = mypass
	cifs:domain = TESTDOM
	cifs:share = test


Delegated credentials:
----------------------

If your incoming user is authenticated with Kerberos, and the machine
account for this Samba4 proxy server is 'trusted for delegation', then
the Samba4 proxy can forward the client's credentials to the target.

You must be joined to the domain (net join <domain> member).

To set 'trusted for delegation' with MMC, see the checkbox in the
Computer account property page under Users and Computers.

[myshare]
	ntvfs handler = cifs
	cifs:server = myserver
	cifs:share = test