From ae23dfd427bc69b747e20f2217163cb863aa2c71 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Thu, 14 Nov 2002 22:54:23 +0000 Subject: Some small updates - 'ads server' is no longer required for example (This used to be commit b8f9930f62db8b997a0d6126e79212a113f8b29c) --- docs/docbook/projdoc/ADS-HOWTO.sgml | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) (limited to 'docs/docbook/projdoc/ADS-HOWTO.sgml') diff --git a/docs/docbook/projdoc/ADS-HOWTO.sgml b/docs/docbook/projdoc/ADS-HOWTO.sgml index 83bb2dc85d..3e34d53c0a 100644 --- a/docs/docbook/projdoc/ADS-HOWTO.sgml +++ b/docs/docbook/projdoc/ADS-HOWTO.sgml @@ -10,10 +10,8 @@ Samba as a ADS domain member -This is a VERY ROUGH guide to setting up the current (November 2001) -pre-alpha version of Samba 3.0 with kerberos authentication against a -Windows2000 KDC. The procedures listed here are likely to change as -the code develops. +This is a rough guide to setting up Samba 3.0 with kerberos authentication against a +Windows2000 KDC. Pieces you need before you begin: @@ -76,13 +74,17 @@ to get them off CD2. realm = YOUR.KERBEROS.REALM - ads server = your.kerberos.server security = ADS encrypt passwords = yes -Strictly speaking, you can omit the realm name and you can use an IP - address for the ads server. In that case Samba will auto-detect these. + +In case samba can't figure out your ads server using your realm name, use the +ads server option in smb.conf: + + ads server = your.kerberos.server + + You do *not* need a smbpasswd file, although it won't do any harm and if you have one then Samba will be able to fall back to normal -- cgit