请教samba3.4中“map untrusted to domain”参数的用法
时间:2010-05-07
来源:互联网
呵呵,首先不是很明白这个参数的意思,
我在smb.conf中加入“map untrusted to domain = No”或者不加的时候,启动,使用都是正常的,
但是我如果改成“map untrusted to domain = Yes”的话,就启动不了了。
谁能指点一下啊,这个参数到底干嘛用的?只加这个参数就可以了,还是需要其他的参数?
看了一下关于这个参数的说明,如下:
Previously, when Samba was a domain member and a client was connecting using an
untrusted domain name, such as BOGUS\user smbd would remap the untrusted
domain to the primary domain smbd was a member of and attempt authentication
using that DOMAIN\user name. This differed from how a Windows member server
would behave. Now, smbd will replace the BOGUS name with it's SAM name. In
the case where smbd is acting as a PDC this will be DOMAIN\user. In the case
where smbd is acting as a domain member server this will be WORKSTATION\user.
Thus, smbd will never assume that an incoming user name which is not qualified
with the same primary domain, is part of smbd's primary domain.
While this behavior matches Windows, it may break some workflows which depended
on smbd to always pass through bogus names to the DC for verification. A new
parameter "map untrusted to domain" can be enabled to revert to the legacy
behavior.
来自http://samba.org/samba/history/samba-3.4.0.html
不是很明白,往指点。
我在smb.conf中加入“map untrusted to domain = No”或者不加的时候,启动,使用都是正常的,
但是我如果改成“map untrusted to domain = Yes”的话,就启动不了了。
谁能指点一下啊,这个参数到底干嘛用的?只加这个参数就可以了,还是需要其他的参数?
看了一下关于这个参数的说明,如下:
Previously, when Samba was a domain member and a client was connecting using an
untrusted domain name, such as BOGUS\user smbd would remap the untrusted
domain to the primary domain smbd was a member of and attempt authentication
using that DOMAIN\user name. This differed from how a Windows member server
would behave. Now, smbd will replace the BOGUS name with it's SAM name. In
the case where smbd is acting as a PDC this will be DOMAIN\user. In the case
where smbd is acting as a domain member server this will be WORKSTATION\user.
Thus, smbd will never assume that an incoming user name which is not qualified
with the same primary domain, is part of smbd's primary domain.
While this behavior matches Windows, it may break some workflows which depended
on smbd to always pass through bogus names to the DC for verification. A new
parameter "map untrusted to domain" can be enabled to revert to the legacy
behavior.
来自http://samba.org/samba/history/samba-3.4.0.html
不是很明白,往指点。
作者: welkin 发布时间: 2010-05-07
没人知道么,自己顶一个
作者: welkin 发布时间: 2010-05-10
map untrusted to domain = Yes
smbd会重新映射来路不明域名客户端连接访问
smbd会重新映射来路不明域名客户端连接访问
作者: aaaaa5aa 发布时间: 2010-07-28
相关阅读 更多
热门阅读
-
office 2019专业增强版最新2021版激活秘钥/序列号/激活码推荐 附激活工具
阅读:74
-
如何安装mysql8.0
阅读:31
-
Word快速设置标题样式步骤详解
阅读:28
-
20+道必知必会的Vue面试题(附答案解析)
阅读:37
-
HTML如何制作表单
阅读:22
-
百词斩可以改天数吗?当然可以,4个步骤轻松修改天数!
阅读:31
-
ET文件格式和XLS格式文件之间如何转化?
阅读:24
-
react和vue的区别及优缺点是什么
阅读:121
-
支付宝人脸识别如何关闭?
阅读:21
-
腾讯微云怎么修改照片或视频备份路径?
阅读:28