samba - Apr 2013 - Need Methods Around Anonymous LDAP Binding for User Auth

Hi,

I've been search for almost a week, and I think I'm at a dead end
without a
solution.

Initially, I wanted to setup a Centos Samba server for Windows users of our 
company lab, and use our company's AD/LDAP for log-in without creating an 
account for them.  It's all for just to simplify the user's log-in.
>From what I've found so far, is that Samba does not support anonymous
binding to
an LDAP server.  My LDAP configuration on Centos works, as I can search and SSH 
in using the company's AD/LDAP server.  All this is done I'm sure with
anonymous
binding.

Is there another method to achieve what I wanted with Samba?  Is there a way or 
tool that will copy the password from LDAP (after the user is instructed to SSH 
in to the Samba server initially) to the system password file, and have Samba 
synchronize with that?

I'm out of steam and loosing hope.  Will probably have to ask users to bear
with
another of many accounts used inside the company.

Thanks,
-Khanh

On Mon, Apr 01, 2013 at 08:01:12PM -0700, Khanh N.
wrote:
> Hi,
> 
> I've been search for almost a week, and I think I'm at a dead end
without a
> solution.
> 
> Initially, I wanted to setup a Centos Samba server for Windows users of our
> company lab, and use our company's AD/LDAP for log-in without creating
an
> account for them.  It's all for just to simplify the user's log-in.
> 
> >From what I've found so far, is that Samba does not support
anonymous binding to
> an LDAP server.  My LDAP configuration on Centos works, as I can search and
SSH
> in using the company's AD/LDAP server.  All this is done I'm sure
with anonymous
> binding.
> 
> Is there another method to achieve what I wanted with Samba?  Is there a
way or
> tool that will copy the password from LDAP (after the user is instructed to
SSH
> in to the Samba server initially) to the system password file, and have
Samba
> synchronize with that?
Join the Samba server to the AD Domain. Use winbindd. There
are lots of HOWTO's available on this.

Jeremy.