+ -
当前位置:首页 → 问答吧 → 请教samba3.4中“map untrusted to domain”参数的用法

请教samba3.4中“map untrusted to domain”参数的用法

时间:2010-05-07

来源:互联网

呵呵,首先不是很明白这个参数的意思,
我在smb.conf中加入“map untrusted to domain = No”或者不加的时候,启动,使用都是正常的,
但是我如果改成“map untrusted to domain = Yes”的话,就启动不了了。

谁能指点一下啊,这个参数到底干嘛用的?只加这个参数就可以了,还是需要其他的参数?

看了一下关于这个参数的说明,如下:
Previously, when Samba was a domain member and a client was connecting using an
untrusted domain name, such as BOGUS\user smbd would remap the untrusted
domain to the primary domain smbd was a member of and attempt authentication
using that DOMAIN\user name.  This differed from how a Windows member server
would behave.  Now, smbd will replace the BOGUS name with it's SAM name.  In
the case where smbd is acting as a PDC this will be DOMAIN\user.  In the case
where smbd is acting as a domain member server this will be WORKSTATION\user.
Thus, smbd will never assume that an incoming user name which is not qualified
with the same primary domain, is part of smbd's primary domain.

While this behavior matches Windows, it may break some workflows which depended
on smbd to always pass through bogus names to the DC for verification.  A new
parameter "map untrusted to domain" can be enabled to revert to the legacy
behavior.

来自http://samba.org/samba/history/samba-3.4.0.html

不是很明白,往指点。

作者: welkin   发布时间: 2010-05-07

没人知道么,自己顶一个

作者: welkin   发布时间: 2010-05-10

map untrusted to domain = Yes


smbd会重新映射来路不明域名客户端连接访问

作者: aaaaa5aa   发布时间: 2010-07-28