samba - Sep 2015 - How to learn abut what is in the samba ldap directory

I once upon a time worked with DAP and watched LDAP being created as 
something that actually could work...

Showing my age here.

What little I have done with LDAP has been very clearly delineated so 
that I knew what was being done.  Here, with Samba, and I guess 
actually, it is AD, I have not found that.  Yet.  But there are always 
tools.

So I am looking at:  phpLDAPadmin

I know these things are dangerous in many ways.  there are ways to 
restrict access to only your local network, but then if an intruder got 
there...

But since I am still at the throw-away/learning stage, it seems worth 
installing to take a tour drive.

Has anyone here used it for their AD LDAP content?  Or anyother ldap 
directory?

On 06/09/15 18:08, Robert Moskowitz wrote:
> I once upon a time worked with DAP and watched LDAP being created as 
> something that actually could work...
>
> Showing my age here.
>
> What little I have done with LDAP has been very clearly delineated so 
> that I knew what was being done.  Here, with Samba, and I guess 
> actually, it is AD, I have not found that.  Yet.  But there are always 
> tools.
>
> So I am looking at:  phpLDAPadmin
>
> I know these things are dangerous in many ways.  there are ways to 
> restrict access to only your local network, but then if an intruder 
> got there...
>
> But since I am still at the throw-away/learning stage, it seems worth 
> installing to take a tour drive.
>
> Has anyone here used it for their AD LDAP content?  Or anyother ldap 
> directory?
>
>
>
I could never get phpLDAPadmin to work reliably with samba4, you could 
try LAM (LDAP Account Manager)

Rowland

Hello Robert,

Am 06.09.2015 um 19:08 schrieb Robert Moskowitz:
> I once upon a time worked with DAP and watched LDAP being created as
> something that actually could work...
what are your goals, by editing LDAP stuff in AD?

For beginners, I think ADUC (Active Directory User and Computer), which
is part of RSAT (https://wiki.samba.org/index.php/Installing_RSAT), is
the best way to change attributes on directory objects.

On each object you have an "Attributes" tab, that allows you to access
all attributes in an easy way.

Beside deleting some important objects (don't delete if you're not
knowing the results!), I think this is the easiest and safest way for
beginners.



Regards,
Marc

On 09/06/2015 01:26 PM, Marc Muehlfeld wrote:
> Hello Robert,
>
> Am 06.09.2015 um 19:08 schrieb Robert Moskowitz:
>> I once upon a time worked with DAP and watched LDAP being created as
>> something that actually could work...
> what are your goals, by editing LDAP stuff in AD?
>
> For beginners, I think ADUC (Active Directory User and Computer), which
> is part of RSAT (https://wiki.samba.org/index.php/Installing_RSAT), is
> the best way to change attributes on directory objects.
>
> On each object you have an "Attributes" tab, that allows you to
access
> all attributes in an easy way.
>
> Beside deleting some important objects (don't delete if you're not
> knowing the results!), I think this is the easiest and safest way for
> beginners.
I just want to understand what information is in the ldap directory.

What does the schema(s) containg?

What did the classicupgrade create?

What gets added when I add a server?

A user?

Did any of my users get added via the classicupgrade?

I know better than to change things with something like phpldapadmin.  I 
have messed up enough things in the past with phpmysqladmin!  :)

On Sun, 2015-09-06 at 13:08 -0400, Robert Moskowitz
wrote:
> I once upon a time worked with DAP and watched LDAP being created as 
> something that actually could work...
> 
> Showing my age here.
> 
> What little I have done with LDAP has been very clearly delineated so
> that I knew what was being done.  Here, with Samba, and I guess 
> actually, it is AD, I have not found that.  Yet.  But there are
> always 
> tools.
> 
> So I am looking at:  phpLDAPadmin
If you want a decent tool I suggest taking a look at Apache Directory
Studio.

Simo.
> I know these things are dangerous in many ways.  there are ways to 
> restrict access to only your local network, but then if an intruder
> got 
> there...
> 
> But since I am still at the throw-away/learning stage, it seems worth
> installing to take a tour drive.
> 
> Has anyone here used it for their AD LDAP content?  Or anyother ldap 
> directory?
> 
> 
>