(Craig, thanks for your response. I'm cc'ing the list as we need to try
and resolve this today. Hope you don't mind.)
Craig White wrote:> On Sat, 2005-11-12 at 18:29 +0000, Antony Gelberg wrote:
>
>>We're into our new server build. We have built Samba / LDAP servers
>>before, but never a PDC. I'm not sure that this question is
>>PDC-specific though.
>>
>>What is the difference between smbldap-useradd, and adding a user to the
>>LDAP database normally e.g. with cpu useradd?
>
> ----
> smbldap-tools should create both the posix user and smb user - the
> former being necessary for the latter
> ----
I understand the words, but not the sentence. Another samba/ldap box
that we have authenticates the users quite happily, where they have been
added to the LDAP directory via cpu. I understand that with the
traditional passdb backend, there is a difference between the posix user
and the smb user, hence the need to use smbpasswd to create smb users.
However, I thought that with LDAP, everything is in one place, so I
don't quite understand the need for a posix and smb user. Added to
which, it worked for us on another box, as I said above. If somebody
could clarify, we would be grateful.
>>Are smbldap-tools needed for new installs, or only where an existing
>>Samba database is being migrated to LDAP?
>
> ----
> the smbldap-tools aren't necessary at all, they are for your
convenience
> and permit the usage of tools such as "User Manager for Domains"
and
> 'net rpc vampire' processes. If you don't use smbldap-tools,
then you
> would probably need another set of scripts to accomplish the same
> things.
> -----
I can see that they are useful for smb.conf actions such as add user
script = /usr/sbin/smbldap-useradd -m "%u".
>>What is the best practise for the administrator for new installs?
>
> ----
> reading the excellent documentation, like Samba by Example...available
> in dead tree form at your typical bookseller or in pdf/html form at
> www.samba.org
> ----
We're ploughing through it. Truly an *excellent* manual.
Antony