Jochen,

Great idea, I will work on Samba auth.

--
Paul Ooi



On 11/4/15 03:35, Jochen Schneider wrote:
On 03/11/15 17:08, ozikat wrote:

Read about that, just wondering anyone got it work with PassSync +
NT-Password hashed.

Or how to store the Password passed on by PassSync into plain text?
Mhhh, you can either change passwordStorageScheme to "CLEAR" (not
recomended) or write the plaintext password to another attribute and
only allow the radius bind DN to access it.
The attribute that passsync updates can be configured in the Windows
registry under "HKEY_LOCALMACHINE\Passsync\Password Field".

If you have all your accounts in AD anyway you could also use freeradius
with samba/ntlm_auth like so:
http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOWTO

 J.



--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users