samba - Feb 2013 - Web Site & E-mail Server authentication with Samba4

Hi all,


I have a running Samba4 Server.  I am able to authenticate Windows and
Linux Clients very.
(1) I want to use samba4 as SSO. In this regard my next step is to
authenticate our web site users from
samba4 server. In this web site, at home page our corporate users give
their e-mail address
username at companydomain.com and password (not e-mail password).

(2) Our E-mail server is hosted on cloud. We want to deploy our own
in-house E-mail Server. The users of
E-mail server will be authenticated from Samba4. In precise, i want to turn
my samba server a SSO in my required
two scenario.

Kindly help me and suggest that how can i achieve these two targets.  For
e-mail Server i will use Zimbra Collaboration
Server.


Thanks in advance.

Vijay Thakur

Hi Vijay,

On Mon, Feb 4, 2013 at 1:46 PM, Vijay Thakur <sapatdha at gmail.com>
wrote:
>
> Hi all,
>
> (2) Our E-mail server is hosted on cloud. We want to deploy our own
> in-house E-mail Server. The users of
> E-mail server will be authenticated from Samba4. In precise, i want to
> turn
> my samba server a SSO in my required
> two scenario.
>
> Kindly help me and suggest that how can i achieve these two targets.  For
> e-mail Server i will use Zimbra Collaboration
Zimbra has an active directory and external LDAP Authentication within
Zimbra Admin | Domain setup. You can authenticate Zimbra account
against LDAP by providing hostname/IP address of your Samba4, user
name and password.

-- 
Best Regards,


Masim "Vavai" Sugianto - Talk is Cheap, Show Me the Code!
PT. Excellent Infotama Kreasindo, http://www.excellent.co.id
Authorized VMWare, Zimbra & SUSE Linux Enterprise & Red Hat Partner
Implementasi, Training, Konsultasi & Audit Sistem : http://bit.ly/J5sSKY

If you are not fixed to Zimbra you can have a look at SOGo
(http://www.sogo.nu/).

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von Vijay Thakur
Gesendet: Montag, 4. Februar 2013 07:46
An: samba at lists.samba.org
Betreff: [Samba] Web Site & E-mail Server authentication with Samba4

Hi all,


I have a running Samba4 Server.  I am able to authenticate Windows and Linux
Clients very.
(1) I want to use samba4 as SSO. In this regard my next step is to
authenticate our web site users from
samba4 server. In this web site, at home page our corporate users give their
e-mail address username at companydomain.com and password (not e-mail
password).

(2) Our E-mail server is hosted on cloud. We want to deploy our own in-house
E-mail Server. The users of E-mail server will be authenticated from Samba4.
In precise, i want to turn my samba server a SSO in my required two
scenario.

Kindly help me and suggest that how can i achieve these two targets.  For
e-mail Server i will use Zimbra Collaboration Server.


Thanks in advance.

Vijay Thakur
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Thanks for prompt reply.  What i doubt about the stability and durability
of SOGo. What are your experience with SOGo.  Does samba 4 not used by any
one the list with zimbra?? or any experience with zimbra.

With Warm Regards,

Vijay++

On Mon, Feb 4, 2013 at 12:25 PM, Daniel M?ller <mueller at
tropenklinik.de>wrote:
> If you are not fixed to Zimbra you can have a look at SOGo
> (http://www.sogo.nu/).
>
> -----------------------------------------------
> EDV Daniel M?ller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 T?bingen
>
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
> -----------------------------------------------
> -----Urspr?ngliche Nachricht-----
> Von: samba-bounces at lists.samba.org [mailto:samba-bounces at
lists.samba.org]
> Im
> Auftrag von Vijay Thakur
> Gesendet: Montag, 4. Februar 2013 07:46
> An: samba at lists.samba.org
> Betreff: [Samba] Web Site & E-mail Server authentication with Samba4
>
> Hi all,
>
>
> I have a running Samba4 Server.  I am able to authenticate Windows and
> Linux
> Clients very.
> (1) I want to use samba4 as SSO. In this regard my next step is to
> authenticate our web site users from
> samba4 server. In this web site, at home page our corporate users give
> their
> e-mail address username at companydomain.com and password (not e-mail
> password).
>
> (2) Our E-mail server is hosted on cloud. We want to deploy our own
> in-house
> E-mail Server. The users of E-mail server will be authenticated from
> Samba4.
> In precise, i want to turn my samba server a SSO in my required two
> scenario.
>
> Kindly help me and suggest that how can i achieve these two targets.  For
> e-mail Server i will use Zimbra Collaboration Server.
>
>
> Thanks in advance.
>
> Vijay Thakur
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>

On Mon, 2013-02-04 at 12:16 +0530, Vijay Thakur wrote:
> I have a running Samba4 Server.  I am able to authenticate Windows and
> Linux Clients very.
> (1) I want to use samba4 as SSO. In this regard my next step is to
> authenticate our web site users from
> samba4 server. In this web site, at home page our corporate users give
> their e-mail address
> username at companydomain.com and password (not e-mail password).
> (2) Our E-mail server is hosted on cloud. We want to deploy our own
> in-house E-mail Server. The users of
> E-mail server will be authenticated from Samba4. In precise, i want to turn
> my samba server a SSO in my required
> two scenario.
SSO means Kerberos (GSSAPI) or NTLM.  There really isn't anything
specific about this for Samba4.  If you can configure SSO for Active
Directory [Microsoft] then you can configure it for Samba4.

Not that a lot of people read SSO and think
single-password/authenticated-against-LDAP.... but that is not SSO.  SSO
is no username/password prompt at all; the application already knows who
the user is.

The "beyond" Wiki page @
<http://wiki.samba.org/index.php/Samba4/beyond>
has a mention of performing Single Sign-On through Apache.   

Other clients like Evolution and Outlook should *JUST WORK*.  Provided
your SMTP & IMAP server supports Kerberos - which I believe they all do.

-- 
Adam Tauno Williams  GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA