samba - Apr 2003 - LDAP/Samba Groups question

> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Sat, 19 Apr 2003, G. Armour Van Horn wrote:
> 
> > I'm trying to create a single structure that will serve the entire
> > organization, using LDAP replication to keep the users and groups
> > straight, which has it's own challenges, but the big mental 
> block here
> > is the domains and workgroups. I need to have a PDC in each 
> office, but
> > I can't have multiple PDCs in one domain and Samba doesn't 
> run as a BDC.
> > And some of the PDCs need to serve multiple workgroups, and 
> all of the
> > examples I've seen have a single workgroup defined in the [global]
> > section of their smb.conf files.
> 
> If you settle on a homogenous Samba solution, you can have 
> Samba a PDC and
> BDC's.  There's a howto included with the distribution that 
> covers this.
> 
> 
I am working on a similar installation.
I found this great tutorial:  http://www.skippy.net/linux/smb-howto.html

In addition, through research and talking to the above howto contributer, I
have decided to go with an LDAP authenticated SAMBA configuration.  One of
the selling points for me was the unified local/samba accounts (whereas
group membership and suthentication can be controlled from a single
source)..in addition, LDAP seems to be a bit more versatile for plugging
into other solutions down the road.

Here is a small howto on LDAP that I was reference to:
http://www.mandrakesecure.net/en/docs/ldap-auth.php

If anyone would like to send some feedback as to other pro's and con's
of
either these methods (homogeneous samba/ldap authenticated samba) I am sure
others on the group would benefit and appreciate the help.

I am trying to iron out some logistics, and the more information the better
for me right now.

** G. Armour Van Horn - if you want to bounce some correspondence back and
forth, we may be able to assist each other at various roadblocks or f'ups...
**

Thanks - Chris McKeever

Hello Group,

I'm using Samba 3.0alpha23 and OpenLDAP. I set it up two weeks ago and all
works quite fine. Now I wanted to have a look at Samba's groups using
"smbgroupedit -l". There are no warnings but it returns just this:

The LDAP server is succesful connected
ldapsam_setsampwent: 0 entries in the base!

I have nothing done to the groups until now. Does anyone know where the
groups have been gone. Probably  I will need them...

Thanks,
Manuela

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte l?cheln! Fotogalerie online mit GMX ohne eigene Homepage!

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Date: Wed, 23 Apr 2003 10:29:01 -0500
> From: Chris McKeever <cgmckeever@prupref.com>
> To: "'Gerald (Jerry) Carter'" <jerry@samba.org>,
"G. Armour Van Horn"
> <vanhorn@whidbey.com>
> Cc: samba@lists.samba.org
> Subject: RE: [Samba] LDAP/Samba Groups question
> Message-ID: <5F71B3C180C8D4119F3200B0D049A7AE01E72B61@PRUPREF-MAIL>
> Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0
> Precedence: list Message: 22
> I am working on a similar installation.
> I found this great tutorial:  http://www.skippy.net/linux/smb-howto.html
>
> In addition, through research and talking to the above howto
contributer, I
> have decided to go with an LDAP authenticated SAMBA configuration.  One of
> the selling points for me was the unified local/samba accounts (whereas
> group membership and suthentication can be controlled from a single
> source)..in addition, LDAP seems to be a bit more versatile for plugging
> into other solutions down the road.
>
> Here is a small howto on LDAP that I was reference to:
> http://www.mandrakesecure.net/en/docs/ldap-auth.php
>
> If anyone would like to send some feedback as to other pro's and
con's of
> either these methods (homogeneous samba/ldap authenticated samba) I am
sure
> others on the group would benefit and appreciate the help.
>
> I am trying to iron out some logistics, and the more information the
better
> for me right now.
>
BTW, Jim Collings and I have been working on follow-up articles to the
Mandrakesecure.net LDAP article. While they are not complete yet, I
think they would be of use to you.

Please don't advertise them beyond this list yet, but feedback is very
welcome. I am hoping to finish my one by early next week (I was delayed,
had to fix some problems in the openldap package for Mandrake 9.1 -
update will be coming, hopefully before my article).

We have been running Samba/LDAP in production for about 3 months. We
haven't tested joining machine on the BDC side of the WAN again, it
didn't work before, but I think it can easily be done, just haven't had
a chance to test it.

We use openldap replication (running slurpd in daemon mode), which
really works well, and mean updates happen almost immediately (a few
seconds, even over a wan connection). The use of ldap also allows you to
do things like disconnected but distributed unix-only authentication (we
have this working on our linux laptops).

This is the latest copy I have of Jim's article:
http://ranger.dnsalias.com/samba-ldap.html

This is the current version of mine:
http://ranger.dnsalias.com/samba-ldap-advanced.html

Mine mostly needs the smb.conf stuff for the BDC, and some coverage of
samba3+ldap and group mapping.

Regards,
Buchan

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+p8YUrJK6UGDSBKcRAlofAKCEGUEpzmGONxluIxuZwxKIsSL65QCfd/94
6Gj4BuCNn44ud+IrwkhqE38=e3ip
-----END PGP SIGNATURE-----