search for: openldap_as_proxy_to_ad

Hi. I have two Samba 4 Domain Controller in the LAN network, and I need to join some Windows clients from the DMZ network. I read the document at https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD#Authentication_against_AD_through_openLDAP_proxy and it tells about an OpenLDAP proxy to authenticate some external services through it, but I need to join some Windows clients so I think I cannot use it, can I? So could you advise me what a best practice could be? Thank you very much! Bye

...and within 10 seconds I >> found this: https://haroonferoze.wordpress.com/2012/11/26/openldap/ >> >> Rowland >> >> > I have seen this article earlier, but there is setup only proxy > without cache. Similarinstructionshere > https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD . That's not > whatI need. > > > > -- > With best regards, > > Tabolin Yuriy > System administrator > Speech Technology Center OK, a bit more googling, turned this up, but it in japanese: http://www.hanabusa.net/intra/ldapcache.html Rowland

On 16/12/15 19:35, Rowland penny wrote: > On 16/12/15 19:02, Таболин Юрий wrote: >> Hi all. >> >> I have samba 4.2.3 on freebsd 10.1 server. There are three DC and >> about 350 PC on domain. I wrote earlier that samba4 ldap performance >> is not enough for me. Now I want to try a server in the middle with >> openldap pcache - ldap cache proxy function. But

...and within 10 seconds I found this: >> https://haroonferoze.wordpress.com/2012/11/26/openldap/ >> >> Rowland >> >> >> I have seen this article earlier, but there is setup only proxy without > cache. Similarinstructionshere > https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD . That's not > whatI need. > > > Would using HAProxy to spread the load across the 3 DC's help at all?

Hi, As of now my mail server is basically postfix. Did anyone succeed integrating the Samba4 AD DC users with any mail daemon ? I was searching for some guide or anything like that but couldn't really find anything "easy". My main questions are: 1) I have several mail domains to host. Can I use all of them with my single DC/DOMAIN ? 2) The usernames are not the same as the email

On 29/08/15 19:09, Marc Muehlfeld wrote: > Hello, > > Am 28.08.2015 um 21:03 schrieb shacky: >> I read the document at >> https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD#Authentication_against_AD_through_openLDAP_proxy >> and it tells about an OpenLDAP proxy to authenticate some external >> services through it, but I need to join some Windows clients so I >> think I cannot use it, can I? >> >> So could you advise me what a best practic...

...he AD schema, so did a quick google and within 10 seconds I > found this: https://haroonferoze.wordpress.com/2012/11/26/openldap/ > > Rowland > > I have seen this article earlier, but there is setup only proxy without cache. Similarinstructionshere https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD . That's not whatI need. -- With best regards, Tabolin Yuriy System administrator Speech Technology Center

...t;> found this: https://haroonferoze.wordpress.com/2012/11/26/openldap/ >>> >>> Rowland >>> >>> >> I have seen this article earlier, but there is setup only proxy >> without cache. Similarinstructionshere >> https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD . That's not >> whatI need. >> >> >> >> > > OK, a bit more googling, turned this up, but it in japanese: > http://www.hanabusa.net/intra/ldapcache.html > Big thanks! It very helps for me. I don’t understand japanese, but there is a link to ad.schema...

...>> https://haroonferoze.wordpress.com/2012/11/26/openldap/ > >> > >> Rowland > >> > >> > >> I have seen this article earlier, but there is setup only proxy without > > cache. Similarinstructionshere > > https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD . That's not > > whatI need. > > > > > > Would using HAProxy to spread the load across the 3 DC's help at all? > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >

...eful way to chain both services? As far > as I've read, the AD cannot use openLDAP for passwords (which would > have been great for me...), is it possible the other way around? You can use openldap as an AD proxy, (yes, we also have a wiki page for this: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD ) But you probably don't need to do this ;-) Rowland

Hi, we moved (or still are moving) our users manually from our Samba NT4 Domain with LDAP to a Samba AD (4.7.6). We had a few schema extensions in our openLDAP to feed some services (dovecot mail settings, nextcloud quota, ...). I would prefer to have only one place for our users, but I'm new to AD. I've read that I can extend the schema, which seems not too different from openLDAP, even

Am 30.10.20 um 10:57 schrieb Rowland penny via samba: > On 30/10/2020 09:20, Thomas Besser via samba wrote: >> actually we have running samba 4.5.16 under Devuan 2.0 (Ascii) as AD >> member without winbind configured. UID and GID informations coming >> from NSS (nslcd -> LDAP). LDAP and AD are in sync. > So you will have uidNumber and gidNumber attributes in AD. No, AD