Re: Samba 4 with separate kdcen?

Love Hörnquist Åstrand <[email protected]> Thu, 17 Nov 2011 03:41:14 +0000

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Message-ID	<[email protected]>

On 16 nov 2011, at 15:24, Måns Nilsson wrote:

> Hi, 
> 
> I have a working realm. I need centralised management of Windows hosts --
> and I'll do it with Samba, I think. I do, however, not want to alter my
> Heimdal setup _too_ much; I'm fine with separate kdcen and kadmin/kpasswd
> for authentication management. But the second A (in AAA) needs some
> attention. Is it possible to ignore the internal kdc component in Samba
> 4? Anybody done it?

Its not really possible today since the samba database provides the keys to the KDC and its the other dce-rpc services that write the keys and passwords into the database.

Love

smime.p7s (application/pkcs7-signature, 4.3 KB) - not displayed