[plug] Second Samba server joining a Samba controlled domain

[Craig Ringer]

> One thing I was wondering if you have a mixed environment of Windows
> machines and Debian boxes and the Windows machines authenticate against
> the Samba DC.Is it possible to also have the Debian machines
> authenticate against the Samba DC instead of logging in locally?

Yes.
	apt-get install libpam-smb libpam-smbpass
then
	cd /usr/share/doc/libpam-smb

That should be a good start.

> I've heard that you can put a '*' in /etc/shadow instead of the password
> and PAM will see that and next try to authenticate against the Samba box
> instead. I have never tried it and have no idea if it will work but I do
> get the feeling that it wouldn't be that easy.

Nope, definitely not that easy. You'll need to stuff with PAM as well.