From 2a85f0cf33f303e091ce6f6bea7b7a072cd81c14 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Wed, 15 Jan 2003 22:29:27 +0000 Subject: syncing docs with HEAD (This used to be commit d8fe70c3b4be548244e9d7b7ea533e64232df001) --- docs/htmldocs/securitylevels.html | 95 +++++++++++---------------------------- 1 file changed, 27 insertions(+), 68 deletions(-) (limited to 'docs/htmldocs/securitylevels.html') diff --git a/docs/htmldocs/securitylevels.html b/docs/htmldocs/securitylevels.html index b984426855..f1e9297fca 100644 --- a/docs/htmldocs/securitylevels.html +++ b/docs/htmldocs/securitylevels.html @@ -2,19 +2,22 @@ Security levelsUser and Share security level (for servers not in a domain)Prev Next Chapter 8. Security levels

8.1. Introduction

Samba supports the following options to the global smb.conf parameter

[global]
-security = [share|user(default)|domain|ads]

Please refer to the smb.conf man page for usage information and to the document -DOMAIN_MEMBER.html for further background details -on domain mode security. The Windows 2000 Kerberos domain security model -(security = ads) is described in the ADS-HOWTO.html.

Of the above, "security = server" means that Samba reports to clients that -it is running in "user mode" but actually passes off all authentication -requests to another "user mode" server. This requires an additional -parameter "password server =" that points to the real authentication server. -That real authentication server can be another Samba server or can be a -Windows NT server, the later natively capable of encrypted password support.

8.2. More complete description of security levels

Chapter 6. User and Share security level (for servers not in a domain)

A SMB server tells the client at startup what "security level" it is running. There are two options "share level" and "user level". Which @@ -211,7 +160,13 @@ smbpasswd file with SMB style encrypted passwords. It is cryptographically impossible to translate from unix style encryption to SMB style encryption, although there are some fairly simple management schemes by which the two could be kept in sync.

"security = server" means that Samba reports to clients that +it is running in "user mode" but actually passes off all authentication +requests to another "user mode" server. This requires an additional +parameter "password server =" that points to the real authentication server. +That real authentication server can be another Samba server or can be a +Windows NT server, the later natively capable of encrypted password support.

Prev NextDebugging Printing ProblemsType of installation Upsecurity = domain in Samba 2.xHow to Configure Samba as a NT4 Primary Domain Controller