samba - Jan 2011 - smbldap-tools and phpldapadmin

All,

I suspect this is OT, or a solution may have been posted.  Either way, I beg
your
indulgence.

While I've used Samba for quite a few years, I recently took a stab at using
it in an
organization I volunteer at to create a PDC, in conjunction with openldap.  The
good
news is it works, for the most part, after some set-up struggles.  I have a
couple of
remaining issues, but let me take them one-at-a-time.

Here some basic info on my set-up:

CentOS 5.5 x86_64
stock RPM-based installs of:
samba-3.0.33-3.29.el5_5.1 
openldap-2.3.43-12.el5_5.3
smbldap-tools-0.9.5-2.el5.rf
and
phpldapadmin-0.9.8.5

I've used the smbldap-tools suite to 1) populate ldap, and; 2) to create
users and
machines.  This seems to work fine.

I've also installed PhpLdapAdmin, as my users are not command line savvy.  I
want them
to use that tool to create new users and machines.  Here's the issue:

If I enter the command "smbldap-useradd -a -m -M juser -g "Domain
Users" -G "Domain
Admins" -G "Administrators" -c "Joe User" juser"
(beginning and ending parens for
clarity), I do indeed create the type of user I'm trying to create.  And,
that user
appears in the list of users in PhpLdapAdmin.

However, if I create the same type of user using the PhpLdapAdmin "Samba3
Account"
template, the user doesn't have the same attributes as the ones created via
smbldap-useradd.

I could probably create a bash script that invokes smbldap-useradd for my users
to use
to create accounts, but they're CLI-phobic, so I really want to get
PhpLdapAdmin to do this.

How can I accomplish this PhpLdapAdmin/smbldap-useradd "integration? 
I'm really not a
programmer, so messing with the PhpLdapAdmin xml files is daunting to me if, in
fact,
this is how it's done.  I've looked through all of the config files
associated with the
PDC set-up, but simply don't see anything in them that would do the trick.

If anyone has accomplished this, I would greatly appreciate your help!

Thanks.

Dimitri

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> 
> If I enter the command "smbldap-useradd -a -m -M juser -g "Domain
Users" -G "Domain
> Admins" -G "Administrators" -c "Joe User"
juser" (beginning and ending parens for
> clarity), I do indeed create the type of user I'm trying to create. 
And, that user
> appears in the list of users in PhpLdapAdmin.
> 
> However, if I create the same type of user using the PhpLdapAdmin
"Samba3 Account"
> template, the user doesn't have the same attributes as the ones created
via smbldap-useradd.
> 
Yes, there are schema extensions in samba's ldap admin tool that extend the
posix account. You can convert an existing user iirc with that command, since
the posix password hash is irrerversible. Also pay attention you MUST use the
smbpasswod tool to change passwords, else the userPassword and smbPassword
feilds will de-sync.
> I could probably create a bash script that invokes smbldap-useradd for my
users to use
> to create accounts, but they're CLI-phobic, so I really want to get
PhpLdapAdmin to do this.
> 
> How can I accomplish this PhpLdapAdmin/smbldap-useradd "integration? 
I'm really not a
> programmer, so messing with the PhpLdapAdmin xml files is daunting to me
if, in fact,
> this is how it's done.  I've looked through all of the config files
associated with the
> PDC set-up, but simply don't see anything in them that would do the
trick.
sorry, but edit the templates. Look here

http://phpldapadmin.sourceforge.net/wiki/index.php/Templates

Also, create a user in ldap, and one in smb, then compare the differences. Some
of the fields are autogenerated as well iirc,

You can likely cheat with the <value> tag, to call php, that calls your
smb script. Something like <value>system("smbldap-useradd -a -m
-M" uid "") might do it (you will need to substitute in values
like i did with "uid" )
> 
> If anyone has accomplished this, I would greatly appreciate your help!
> 
> Thanks.
> 
> Dimitri
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
William Brown

Research & Teaching, Technology Services
The University of Adelaide, AUSTRALIA 5005

CRICOS Provider Number 00123M
- -----------------------------------------------------------------------------
IMPORTANT: This message may contain confidential or legally privileged
information. If you think it was sent to you by mistake, please delete all
copies and advise the sender. For the purposes of the SPAM Act 2003, this
email is authorised by The University of Adelaide.

pgp.mit.edu



-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)

iQIcBAEBAgAGBQJNMhDuAAoJEDwKxtqy+Sii+R0P/2tx5IsHJ+JcKvUgWjaKvAfV
M67s9T1MgWVeAFgoXSHoRz4ZIOic/ZIJe1qqk88uHsuf2haBwWOVPR+m7Grng/7L
3SHq+B1AY/7VSEPhtht50vwBvHGPQ7S/f8nN6HwedF4EoHON9QPEFCYgR2DPHJzQ
qvtual9cnRv3TaT8bUvSJx+atWm7RnA71lgi5q+WX11PGvit13U48IUHv7QXyPHm
4lPOK+6G5+yzkZSXRdFiNwRKzHN6TeUgBL+4Ro/lU+m+vSQtR6MHrR2p3D1v0S5V
ALt1b+rIOFUCuNlnz86p+zXfETgCJ/kftTgKRsEXfH75Q8GZN/nHyiq1hlwsh3pZ
98UhdG6jX7VNx3fR1+JrJVYzlXynP152IdYvOnKVBLQR+XXXokiAHAnwvFv1AHew
6ggcyAsJPxdLhyzpy4tRxxPIND4XhCIv1eq8EnX4+5plw3VqSOF4OyrZcuD8pF2H
+8SjUXlCqBHET50lbqmoidtkp+Xd8okAH1WZ8UBkcV7VztDuvNjpQ9spDLsMpubQ
0GFHTkxRFO94iuc6X9h0LiGApwtjNsLQSju8UJkjCbkEOraX0bG2JQlXrVYLeLLQ
x51+JnE0V1+f4T0KDT0sOT3YaARznw8vZdhPy3agkeh4dS3LB5/CPv63pX4t7opE
79H2x6yVOybkakiFy6LW
=2+0/
-----END PGP SIGNATURE-----