In order for you to authenticate to AD you need to have SMB running since it's the
bridge between Windows/Everything Else, that means you need to have ports 137-139 open,
open ports = security risk... Especially common ones like these.
-----Original Message-----
From: stephan schutter [mailto:rhl@farorbit.com]
Sent: Thursday, January 15, 2004 4:29 PM
To: fedora-test-list(a)redhat.com
Subject: RE: file sharing
Thank you Alan. Me to.
And once again, I am not talking about servers, and I do not see how being able to
authenticate to Active Directory by default is "unsafe".
-----Original Message-----
From: fedora-test-list-admin(a)redhat.com
[mailto:fedora-test-list-admin@redhat.com] On Behalf Of Alan Cox
Sent: Thursday, January 15, 2004 4:17 PM
To: fedora-test-list(a)redhat.com
Subject: Re: file sharing
On Thu, Jan 15, 2004 at 03:47:16PM -0600, Epps, Aaron M. wrote:
I think the Fedora project has chosen to give everyone a secure
installation by default, if you want to open up your system to the world after the
fact that's your choice. Again, there is no "hacking" involved in setting
this up, unless you consider using a CLI and editing config files "hacking".
Also you must keep in mind that Samba has to reverse engineer everything to work with AD,
which M$ stole from Novell, and that is by no means a trivial task. I'd say if you
really wanted to demo to your company the power/flexibility/freedom of Linux to setup a
Samba server as a domain controller. Then try using the GUI Samba Authentication tool and
see if it works... I bet it would.
Im not sure the Fedora set up is perfect. I'd still really like to get into a
situation where the first time I go to say cups and add a printer it also kicks the
firewall tools to sort out if you want remote access, and it takes it away when its no
longer relevant
Little project for someone 8)
--
fedora-test-list mailing list
fedora-test-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-test-list
--
fedora-test-list mailing list
fedora-test-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-test-list