samba - Nov 2018 - Howto enable ldapi socket?

Hi list,

Im playing around with ldbsearch/ldapsearch and using successful the socket

/var/lib/samba/private/ldapi 

in my git-compiled samba.

Now I installed the version 4.9.2 for ubuntu bionic from the van-Belle
repository and didnt find this socket anymore. Do I have simple to
create this socket with mknod? How can I determine the path? Is there a
smb.conf-Option to enable it?

Tfh!

Oliver

On Sun, 25 Nov 2018 14:10:30 +0100
Oliver Rath via samba <samba at lists.samba.org> wrote:
> Hi list,
> 
> Im playing around with ldbsearch/ldapsearch and using successful the
> socket
> 
> /var/lib/samba/private/ldapi 
> 
> in my git-compiled samba.
> 
> Now I installed the version 4.9.2 for ubuntu bionic from the van-Belle
> repository and didnt find this socket anymore. Do I have simple to
> create this socket with mknod? How can I determine the path? Is there
> a smb.conf-Option to enable it?
> 
> Tfh!
> 
> Oliver
> 
> 
Strange, I just checked on Ubuntu 18.04 running Louis's 4.9.2 packages
and it is there:

adminuser at ubutestdc:~$ ls -la /var/lib/samba/private/ldapi
srwxrwxrwx 1 root root 0 Nov 25 17:13 /var/lib/samba/private/ldapi

Having said that, why not use kerberos, it is more secure.

Rowland

Hi Rowland!

On 26.11.18 19:37, Rowland Penny via samba wrote:
> [..]
> adminuser at ubutestdc:~$ ls -la /var/lib/samba/private/ldapi
> srwxrwxrwx 1 root root 0 Nov 25 17:13 /var/lib/samba/private/ldapi
Also strange:

# dpkg-query -l *samba*
Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
         Halb installiert/Trigger erWartet/Trigger anhängig
|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler:
GROSS=schlecht)
||/ Name                            Version             
Architektur          Beschreibung
+++-===============================-====================-====================-===================================================================ii 
python-samba                    2:4.9.2+nmu-1~ubuntu
amd64                Python bindings for Samba
un  python2.7-samba                 <keine>             
<keine>              (keine Beschreibung vorhanden)
ii  samba                           2:4.9.2+nmu-1~ubuntu
amd64                SMB/CIFS file, print, and login server for Unix
ii  samba-common                    2:4.9.2+nmu-1~ubuntu
all                  common files used by both the Samba server and client
ii  samba-common-bin                2:4.9.2+nmu-1~ubuntu
amd64                Samba common files used by both the server and the
client
un  samba-dev                       <keine>             
<keine>              (keine Beschreibung vorhanden)
ii  samba-dsdb-modules:amd64        2:4.9.2+nmu-1~ubuntu
amd64                Samba Directory Services Database
ii  samba-libs:amd64                2:4.9.2+nmu-1~ubuntu
amd64                Samba core libraries
ii  samba-testsuite                 2:4.9.2+nmu-1~ubuntu
amd64                test suite from Samba
ii  samba-vfs-modules:amd64         2:4.9.2+nmu-1~ubuntu
amd64                Samba Virtual FileSystem plugins
rc  vlc-plugin-samba:amd64          3.0.3-1-1ubuntu1    
amd64                Samba plugin for VLC

BUT:

# ls -l /var/lib/samba/private/ldapi
ls: cannot access '/var/lib/samba/private/ldapi': No such file or
directory
> Having said that, why not use kerberos, it is more secure.
Yes, you said :-). But Im testing Rust ldap3-lib, which only is able to
use SASL and ldapi, not kerberos. Finding some rust lib able using
kerberos, i will change.

For my ldapi-problem, I make some further resarch and will report.

Tfh!

Oliver