Re: tlug: Syncing NT and Linux passwords

[Hiroshi MIURA <miura@example.com>]

Hi,

In message "tlug: Syncing NT and Linux passwords"
    on 98/11/24, Frank Bennett <bennett@example.com> writes:
> We have both NT and Linux machines on the faculty network here.
I'm also worrying about NT and Linux Password syncing.
We have plan that we replace NT file server to Linux&samba one,
and set PDC to regist NT4 w/s clients. 
All users are managed trusted parent PDC/Domain.

> At the moment, some filespace services are served by NT machines,
> and mail is provided by a Linux box.  Soon I will be providing
> further tranches of filespace out of Linux via SMB, and later via
> SMB layered on Coda.  So we will have the following
> password-protected services running:
> 
>  o SMB (NT password server)
> 
>  o Samba (NT password server or Linux fileserver /etc/passwd)
> 
>  o pop3 (Linux mailserver /etc/passwd)
> 
>  o Coda (Linux fileserver Coda password file)

nice! but it's difficult to sync password because of difference
on the password management scheme.
if you and we use Windows 95/WfW, it is easy to sync password.
Because 95/WfW use plain password... but NT5/NT4sp3/98 use
encrypted password. 
 
> Currently only mail services are widely used, so there is only
> one password file of significant size to protect and maintain.
> But I shudder when I think of the task of explaining to users how
> to set each of the passwords above, not to mention explaining to
> them why so many separate passwords are necessary.
> 
> On the Unix side, consolidation in a secure fashion will be
> pretty straightforward (in the sense that I have a plan, know it
> will work, know it will be secure, and know exactly what will be
> necessary to implement it).  The problem of syncing Unix and NT
> has me stumped, though.

YES! Its problem make me scowling face. =_=);;

 
> Is there ANY means of simultaneously setting a password on a Unix
> and an NT box?  If this is possible, it will make our lives MUCH
> simpler.

If you can do that you quits NT DOMAIN, it will be simple.
All users are managed by NIS(YP). samba can sync unix password and
smbpasswd. 

if user want to chage his/her password, request is send to samba server,
samba changes its own smbpasswd db and chat with /bin/passwd to change
unix password.

please see smb.conf manual pages, and check out follows:
passwd chat 
passwd program
update encrypted
unix password sync


It is imposible, i think, to sync NT DOMAIN password and UNIX 
password smartly, I gave up IT. My user must sync by hand :-(

Hiroshi  
---
三浦広志 	miura@example.com
speciality:	Wide-band Network engineer(ATM, FR, TCP/IP and Security) 
staff of:	Hokkaid Guide Editor
project:	Linux Kernel Hack Japan Project from 1998 ;-)



----------------------------------------------------------------
Next Technical Meeting: 12 December, 12:30 HSBC Securities Office
Next Nomikai: 15 January 1999, 19:30 Tengu TokyoEkiMae 03-3275-3691
----------------------------------------------------------------
more info: http://tlug.linux.or.jp Sponsors: PHT, HSBC Securities