samba - Nov 2024 - How to configuring 389ds to the backed user authentication on Samba-ad

On Fri, 15 Nov 2024 20:39:22 +0800
<ahmed.taleb at pawsey.org.au> wrote:
> So not even if?you sync 389 to samba local ldap?
> 
You can sync passwords between Samba AD and users in an external ldap,
but why would you ? A Samba AD domain can totally replace your 389-ds
and pgina setup. 

As for pgina, I thought it was dead, which the original is (okay, it
hasn't had any updates for 8 years at least and is described as
'dormant'), there is a fork, but this hasn't had any real updates
for 6
years. Compared to this, Samba is constantly being updated.

Rowland

Yes, Samba AD can replace it, but unfortunately, I don't  have the option to
replace our existing ldap setup. It is currently managed by another team. My
only real option is to sync the users from 389ds to Samba AD.

I recently joined this team and am trying to replace pgina due to the exact
reason you pointed out.

I just need some guidance on how that can be done if it is possible. Looking on
your documentation pages I am not seeing how I can achieve this.

Thanks




On 15 November 2024 9:12:55?pm AWST, Rowland Penny via samba <samba at
lists.samba.org> wrote:
>On Fri, 15 Nov 2024 20:39:22 +0800
><ahmed.taleb at pawsey.org.au> wrote:
>
>> So not even if?you sync 389 to samba local ldap?
>> 
>
>You can sync passwords between Samba AD and users in an external ldap,
>but why would you ? A Samba AD domain can totally replace your 389-ds
>and pgina setup. 
>
>As for pgina, I thought it was dead, which the original is (okay, it
>hasn't had any updates for 8 years at least and is described as
>'dormant'), there is a fork, but this hasn't had any real
updates for 6
>years. Compared to this, Samba is constantly being updated.
>
>Rowland
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba