CentOS - May 2012 - SMB shares and LDAP

Hi,

I have a scenario were I only have OpenLDAP running for authing my Linux and
Windows client.

Windows is using the pGina LDAP client to talk to my OpenLDAP server, no
problems, working like a charm.

However I need to setup a simple Samba file server-only.

None of my Unix boxes have a compete /etc/passwd file as every one auths against
OpenLDAP.

Is there some kind of passwd backend option in my smb.conf that allows it to
query my OpenLDAP server?

Thanks in advance,

- aurf

On 05/21/2012 03:17 PM, aurfalien wrote:
> Is there some kind of passwd backend option in my smb.conf that allows it
to query my OpenLDAP server?
Presumably, you're trying to avoid a proper setup:
http://wiki.samba.org/index.php/Replicated_Failover_Domain_Controller_and_file_server_using_LDAP

If you already have LDAP authentication and NSS set up, and you don't 
want to add Samba related attributes to your directory, you'd need to 
disable "encrypt passwords" in smb.conf and modify the Windows
registry
so that it sends your passwords in plain text:
http://www.encs.concordia.ca/helpdesk/howto/plain_password.html

Needless to say, the security of this configuration is awful, but not 
worse than if you're using OpenLDAP without SSL.