Win Active Directory connections

[Robbo]

On 25 Mar 2006, at 18:58, Paul Kaplan wrote:

> One suggestion for mounting Active Directory shares via /etc/fstab  
> is to add
> an entry:
>
> //server/share   /mount/point   smbfs   credentials=<path to  
> credentials
> file> 0 0
>
> and create a credentials file containing:
>
> username = myaccount
> password = mypassword
>
> Obviously this leaves "mypassword" in clear text and it is only as  
> secure as
> the credentials file.
>
> Since I set local username and password to be the same as my AD  
> username and
> password, is there a way that I can get the "mypassword" entry to  
> point to
> my encrypted local password (wherever that might be stored)?

Installing Kerberos client and configuring samba to use kerberos  
authentication (I guess it can, never really used Samba, but a quick  
google looks like it can) will be the best and most secure way.