User Authentication from CIFS/9000 Client and PAM NTLM to CIFS/9000 server

[Corinna Berger]

Sorry, I made a question to this subject in:
forums > hp-ux > networking >
But nobody answers. May be, it was the wrong place or the question was to long, therefore my question once more here and a bit more compact:

Is it possible, that users logging in to a HP-UX 11.0
machine whith CIFS/9000 Client and 'libpam_ntlm', 'libpam_unix' configuration in 'pam.conf' can be authenticated by a CIFS/9000 server (configured as PDC) as 'password server' ?

[Robert-Jan Goossens]

Hi Corinna,

well I'm not sure what you would like to do,

Why would you like to use CIFS for authentication between two unix servers.

Kind regards,


Robert-Jan.

[Corinna Berger]

I forgot to say: I have also Windows Clients.

I want to setup a Common User Management for a mixed environment, consisting of:
- a HP-UX-11.0-Server
- HP-UX-Clients (11.0)
- and Windows Clients (NT4, 2000, XP)
without having an Windows PDC.
- For that I want to setup a Samba Server or CIFS/9000 Server acting as PDC

- So Windows user authentication and password changes seems not to be the problem (all in smbpasswd)

- On the Unix Workstations I want to install and configure the CIFS/9000 Client with PAM NTLM.

My Question:
Is it possible with this PAM, that the Unix Users can be
authenticated by the CIFS/9000-Samba-PDC ??
And the Password changes from Unix Client Side reflect in
smbpasswd file changes on the CIFS/Samba Server ??

I found only references, that it can be used for NT PDC user authentication.
(in the past we used NIS on the Unix Clients and NISGina on the Windows Clients, and Samba on HP-UX 10.20 only for central User Home Directories
but not for User authentication)

[Robert-Jan Goossens]

Hi Corinna,

quote

The CIFS/9000 client product provides HP-UX workstation and server connectivity to Windows server resources (file and print shares) using the native Windows CIFS protocol. Client access to Windows domains is allowed via native Windows NT authentication to an NT domain controller.

unquote
http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/cifs_9000.pdf

Dont think it is possible, why dont you call HP CRC and ask them.

Hope it helps,

Robert-Jan.