samba - Nov 2003 - smbtools, existing users, etc...

Hello.

 

I followed your discussion about smbtools etc. Now I would like to hear some
concrete answers about them. I have my existing users in LDAP ( posixAccount
schema ), and now I installed samba 3.0.0 and want to store samba user
accounts in LDAP too. I included samba.schema. 

 

Is it possible to add samba part of user account to the already existing
user account in LDAP?

If yes, how do I add the samba part? After I include samba.schema in my LDAP
server, it wont start anymore because of missing SID ( uid is already
present through posixAccount ), can anyone help me on this??

 

Has anyone ideas how to add the samba part of user account with already
existing user database?

What if my user changes his password ( by using a web php-backend ), is
samba password automatically changed, or do I have to change it manually?

 

TIA

 

Edvin SEFEROVIC

> Hello.
Hi !
> Is it possible to add samba part of user account to the already existing
user account
> in LDAP?
My response is only available if you use the smbldap-tools.
Yes you can. If you applied the patch i post this morning to the latest scripts
(look at
cvs.idealx.org), you can use the following command to add the sambaSAMAccount
objectclass to the user 'user'.
$ smbldap-usermod.pl -a user
The sambaSID attribute will be calculated as 2*uidNumber+1000.
You can also add more informations:
  -a    add sambaSAMAccount objectclass
  -e    expire date ("YYYY-MM-DD HH:MM:SS")
  -A    can change password ? 0 if no, 1 if yes
  -B    must change password ? 0 if no, 1 if yes
  -C    sambaHomePath (SMB home share, like '\\PDC-SRV\homes')
  -D    sambaHomeDrive (letter associated with home share, like 'H:')
  -E    sambaLogonScript (DOS script to execute on login)
  -F    sambaProfilePath (profile directory, like
'\\PDC-SRV\profiles\foo')
  -H    sambaAcctFlags (samba account control bits like '[NDHTUMWSLKI]')
  -I    disable an user. Can't be used with -H or -J
  -J    enable an user. Can't be used with -H or -I
For example:
$ smbldap-usermod.pl -a -E script.cmd user

> What if my user changes his password ( by using a web php-backend ), is
samba password
> automatically changed, or do I have to change it manually?
No it is not. Can can calculate the lmPassword and ntPassword, and patch your
php-backend to update le attributes. Or can can use smbldap-passwd.pl that
update both
unix password and win32 passwords.
-- 
J?r?me