diff options
author | John Terpstra <jht@samba.org> | 2003-04-25 15:49:02 +0000 |
---|---|---|
committer | John Terpstra <jht@samba.org> | 2003-04-25 15:49:02 +0000 |
commit | dfdc9b19f8d0ad5cde6657db6b76b628f5cb9ce2 (patch) | |
tree | b91c4f419a8307edd876b31dec176b38c9344473 /docs/docbook/projdoc/security_level.sgml | |
parent | 26724fa2b08bc3aab43cd357df38c2a04363ef98 (diff) | |
download | samba-dfdc9b19f8d0ad5cde6657db6b76b628f5cb9ce2.tar.gz samba-dfdc9b19f8d0ad5cde6657db6b76b628f5cb9ce2.tar.bz2 samba-dfdc9b19f8d0ad5cde6657db6b76b628f5cb9ce2.zip |
Adding edits from Vance Lankhaar.
(This used to be commit a7788bc3b9ae4aec48bf94ed446e6bc0668863bf)
Diffstat (limited to 'docs/docbook/projdoc/security_level.sgml')
-rw-r--r-- | docs/docbook/projdoc/security_level.sgml | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/docs/docbook/projdoc/security_level.sgml b/docs/docbook/projdoc/security_level.sgml index e840ff6c17..a59392bbac 100644 --- a/docs/docbook/projdoc/security_level.sgml +++ b/docs/docbook/projdoc/security_level.sgml @@ -128,6 +128,13 @@ That real authentication server can be another Samba server or can be a Windows NT server, the later natively capable of encrypted password support. </para> +<note><para> +<emphasis>Server</emphasis> level security is incompatible with what is known +as </empahsis>schannel</emphasis> or "sign and seal" protocols. This means that +if you want to use <empahsis>server</emphasis> level security you must disable +the use of "sign and seal" on all machines on your network. +</para></note> + <sect3> <title>Configuring Samba for Seemless Windows Network Integration</title> @@ -270,7 +277,7 @@ all authentication requests to be passed through to the domain controllers. <title>Samba as a member of an MS Windows NT security domain</title> <para> -This method involves additon of the following paramters in the &smb.conf; file: +This method involves addition of the following parameters in the &smb.conf; file: </para> <para><programlisting> @@ -297,7 +304,9 @@ MS Windows NT security domain. This is done as follows: </para></listitem> <listitem><para>Next, on the Linux system execute: - <command>smbpasswd -r PDC_NAME -j DOMAIN_NAME</command> + <command>smbpasswd -r PDC_NAME -j DOMAIN_NAME</command> (samba 2.x) + + <command>net join -U administrator%password</command> (samba-3) </para></listitem> </itemizedlist> |