ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

Machine Accounts
Beginning with NT4.0 domains, and with all later CIFS security
architecuters, hosts must exists in the security database as well as users (as is
also the case with true Kerberos systems).
In CIFS these are reffered to as machine accounts and are functionally
equivalent to user accounts. Machine accounts have an initial default
password that the domain client changes, and proceeds to change on a
periodic basis.
A machine account must be created when a host joins the domain. Samba
faciliates this via the add user script = {script path & name} %n directive where
%n is replaced by the name of the host requesting to be added to the domain.
This script must create a posixAccount object for the specified name. Samba
will subsequently add the requisite sambaAccount objectclass and attributes.