Section C.3. Authentication Options

C.3. Authentication Options

--with-ads

This is a convenience option that enables both --with-krb5 and --with-ldap. Both Kerberos 5 and LDAP support must be present on the system in order to support integration with Active Directory. More on building and configuring Samba in AD domains is discussed in Chapters 2 and 10.

--with-afs

Include support for authenticating users who are accessing files on an Andrew Filesystem (AFS) mount thourgh Samba. This option requires that clear-text passwords be enabled on both the client and Samba server. Because it is not actively maintained, this feature may be removed in a future release. More details about users and authentication can be found in Chapter 5.

--with-dce-dfs

Include support for authenticating users in a Distributed Computing Environment Distributed Filesystem (DCE/DFS) environment. This is a distributed filesystem included in some Unix variants and is not the same as Microsoft's Distributed Filesystem (MS-DFS). This option requires clear-text password functionality to be enabled on both the client and Samba server. Because it is not actively maintained, this feature may be removed in a future release. More details about users and authentication can be found in Chapter 5.

--with-fake-kaserver

This option allows Samba to act as a Kerberos Authentication (KA) server when exporting AFS volumes.

--with-pam

When this configure option is specified and the parameter obey pam restrictions in the Samba configuration file is set to yes, Samba obeys PAM's configuration regarding account and session management. More information on Samba's use of PAM is in Chapter 5.

--with-pam_smbpass

When this option is specified, the compilation process builds a PAM module called pam_smbpass.so and places it in the source/bin directory. This module allows applications outside of the Samba suite to authenticate users with Samba's configured passdb backend. For more information, see the README file in the source/pam_smbpass directory of the Samba distribution.

--with-winbind

Include Winbind support in Samba. This option is enabled automatically on systems that are known to support Winbind functionality. For more information on Winbind, see Chapter 10.