2 !== NTDOMAIN.txt for Samba release TNG-prealpha 28 Feb 2000
4 Contributor: Luke Kenneth Casson Leighton (samba-bugs@samba.org)
5 Copyright (C) 1997 Luke Kenneth Casson Leighton
6 Created: October 20, 1997
7 Updated: February 25, 1999 (Jerry Carter)
9 Subject: NT Domain Logons
10 ===========================================================================
12 As of 1.9.18alpha1, Samba supports logins for NT 3.51 and 4.0 Workstations,
13 without the need, use or intervention of NT Server. This document describes
14 how to set this up. Over the continued development of the 1.9.18alpha
15 series, this process (and therefore this document) should become simpler.
17 One useful thing to do is to get this version of Samba up and running
18 with Win95 profiles, as you would for the current stable version of
19 Samba (currently at 1.9.17p4), and is fully documented. You will need
20 to set up encrypted passwords. Even if you don't have any Win95 machines,
21 using your Samba Server to store the profile for one of your NT Workstation
22 users is a good test that you have 1.9.18alpha1 correctly configured *prior*
23 to attempting NT Domain Logons.
25 The support is still experimental, so should be used at your own risk.
27 NT is not as robust as you might have been led to believe: during the
28 development of the Domain Logon Support, one person reported having to
29 reinstall NT from scratch: their workstation had become totally unuseable.
31 [further reports on ntsec@iss.net by independent administrators showing
32 similar symptoms lead us to believe that the SAM database file may be
33 corruptible. this _is_ recoverable (or, at least the machine is accessible),
34 by deleting the SAM file, under which circumstances all user account details
35 are lost, but at least the Administrator can log in with a blank password.
36 this is *not* possible except if the NT system is installed in a FAT
39 This *has* been reported to the NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM digest.
41 ==========================================================================
42 Please note that Samba 2.0 does not **officially** support domain logons
43 for Windows NT clients. Of course, domain logon support for Windows 9x
44 clients is complete and official. These are two different issues.
46 Samba's capability to act as a Primary Domain Controller for Windows NT
47 domains is not advertised as it is not completed yet. For more information
48 regarding how to obtain the latest development (HEAD branch) source code
49 and what features are available, please refer to the NT Domain FAQ on-line
50 at the Samba web site under the documentation page.