samba - Aug 2011 - Samba - OpenLDAP User Mapping

Hi.

I ask your assistence to get kind of sorted in my head...

We do have a openLDAP-Server running. There is also a smbd running at a
different box as file server. I did all the configuration and managed it
to have samba asking the ldap-Server for authentification. I can see in
the logs that this is happening.

I did a
smbpasswd -a user (which is not a local user at the box)
and the DIT-entry for "user" was filled automatically with all the
entries generated like sambaSID, flags sambaNTpassword and so on.
Everything works like expected, shares are there, acls fine, everything
cool.

Also, if I do a
smbpasswd -x user
all DIT-entries in openldap for "user" which depend on samba (like
those
mentioned above) will be deleted.

But, I do have much more users which need to access the file server via
smb. Do I have to add each user by invoking
smbpasswd -a user
for each? I can not image that there is no other way to get this going.

Thanks for guiding me.

-fuz

Did you getent passwd and getent group.
And all ldap users and groups are shown up?
Did you do at least install an ldap-client and ldapauth on your linux box?
Do you talk to ldap with winbind, ldapsam:editposix?

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von fuzzy_4711
Gesendet: Freitag, 26. August 2011 10:30
An: samba at lists.samba.org
Betreff: [Samba] Samba - OpenLDAP User Mapping

Hi.

I ask your assistence to get kind of sorted in my head...

We do have a openLDAP-Server running. There is also a smbd running at a
different box as file server. I did all the configuration and managed it
to have samba asking the ldap-Server for authentification. I can see in
the logs that this is happening.

I did a
smbpasswd -a user (which is not a local user at the box)
and the DIT-entry for "user" was filled automatically with all the
entries generated like sambaSID, flags sambaNTpassword and so on.
Everything works like expected, shares are there, acls fine, everything
cool.

Also, if I do a
smbpasswd -x user
all DIT-entries in openldap for "user" which depend on samba (like
those
mentioned above) will be deleted.

But, I do have much more users which need to access the file server via
smb. Do I have to add each user by invoking
smbpasswd -a user
for each? I can not image that there is no other way to get this going.

Thanks for guiding me.

-fuz
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

From: fuzzy_4711 <fuzzy_4711 at gmx.de>
Date: Fri, 26 Aug 2011 10:29:36 +0200

(snip)
> I did a
> smbpasswd -a user (which is not a local user at the box)
> and the DIT-entry for "user" was filled automatically with all
the
> entries generated like sambaSID, flags sambaNTpassword and so on.
> Everything works like expected, shares are there, acls fine, everything
> cool.
(snip)
> But, I do have much more users which need to access the file server via
> smb. Do I have to add each user by invoking
> smbpasswd -a user
> for each? I can not image that there is no other way to get this going.
If you want to add users automatically, you can do like:

  # (echo password; echo passworddamesugi) | smbpasswd -s a-user

or 

  # printf "password\npassword" | pdbedit -a a-user -t

That's what you want?

Of course you can add a user to add an LDAP entry directly.

---
TAKAHASHI Motonobu <monyo at monyo.com>