samba - May 2006 - smbladp_conf shell opts

I'm setting up a smaba/ldap server and I'd really like
"regular" samba
users to not have local login privs. (LDAP will handle all unix and
samba accounts.)

So, to that end, I thought changing the options in smbldap.conf,
specifically...

userLoginShell="/bin/bash"
to something like
userLoginShell="/sbin/nologin"

Is there some unanticipated impact that would make this unwise?
Is this the best way to accomplish the task?
Finally, are there other places I need to handle this for it to work
as I intend?

TIA
-Greg

listserv.traffic@sloop.net wrote:
>I'm setting up a smaba/ldap server and I'd really like
"regular" samba
>users to not have local login privs. (LDAP will handle all unix and
>samba accounts.)
>
>So, to that end, I thought changing the options in smbldap.conf,
>specifically...
>
>userLoginShell="/bin/bash"
>to something like
>userLoginShell="/sbin/nologin"
>
>Is there some unanticipated impact that would make this unwise?
>Is this the best way to accomplish the task?
>Finally, are there other places I need to handle this for it to work
>as I intend?
>
>TIA
>-Greg
>
>  
>
I can't speak as an expert but I've been running Samba for years with 
the users not having a login shell and I've not had any problems.

Hi,

Your "regular" samba users should be unable to login server-side,
unless
you configure the server to allow this (ldap-pam & Co.)

El dl 29 de 05 del 2006 a les 17:10 -0700, en/na
listserv.traffic@sloop.net va escriure:
> I'm setting up a smaba/ldap server and I'd really like
"regular" samba
> users to not have local login privs. (LDAP will handle all unix and
> samba accounts.)
> 
> So, to that end, I thought changing the options in smbldap.conf,
> specifically...
> 
> userLoginShell="/bin/bash"
> to something like
> userLoginShell="/sbin/nologin"
> 
> Is there some unanticipated impact that would make this unwise?
> Is this the best way to accomplish the task?
> Finally, are there other places I need to handle this for it to work
> as I intend?
> 
> TIA
> -Greg
> 
-- 
Albert Teixid?
SIEE - Suport Inform?tic de l'Escola d'Enginyeries