Using SSO on Mac and Linux With Samba

SonicWall SSO is supported by Samba 3.5 or newer.

For Windows users, SonicWall SSO is used by a network security appliance to automatically authenticate users in a Windows domain. It allows the users to get access through the network security appliance with correct filtering and policy compliance without the need to identify themselves through any additional login process after their Windows domain login.

Samba is a software package used by Linux/UNIX or Mac machines to give their users access to resources in a Windows domain (through Samba’s smbclient utility) and/or to give Windows domain users access to resources on the Linux or Mac machine (through a Samba server).

A user working on a Linux PC or Mac with Samba in a Windows domain can be identified by SonicWall SSO, but it requires proper configuration of the Linux/Mac machine, the SSO Agent, and possibly some reconfiguration of the appliance. For example, the following configuration is necessary:

• To use SonicWall SSO with Linux/Mac users, the SonicWall SSO Agent must be configured to use NetAPI rather than WMI to get the user login information from the user's machine.
• For Samba to receive and respond to the requests from the SonicWall SSO Agent, it must be set up as a member of the domain and the Samba server must be running and properly configured to use domain authentication.

If multiple users log into a Linux PC, access to traffic from that PC is granted based on the most recent login.