samba - Feb 2018 - Migration from 3.6.25-0ubuntu0.12.04.10 to 4.x with passdb backend = ldapsam

On Wed, 21 Feb 2018 16:01:14 +0300
Vladimir Skubriev <skubriev at cvisionlab.com> wrote:
> Thank you for a tip.
> 
> I want to setup a `STANDALONE` server relying on an external OpenLDAP
> for authentication.
> 
> Is it possible on samba 4.x - ?
> 
Yes, but you will need to use nslcd.

Rowland

Using nslcd related to more newer versions on samba ?

Or it is a one of use cases how to setup authentication in samba through
openldap?

Is it possible to use sssd instead of nslcd ?

I already use sssd on machines to enumerate passwd, groups and done with
authentication.

I tried to found any useful data on the net in case of : samba4 standalone
openldap. But unfortunately does not found any useful information.

Nslcd came across my eyes, but I did not pay proper attention.


2018-02-21 17:29 GMT+03:00 Rowland Penny via samba <samba at
lists.samba.org>:
> On Wed, 21 Feb 2018 16:01:14 +0300
> Vladimir Skubriev <skubriev at cvisionlab.com> wrote:
>
> > Thank you for a tip.
> >
> > I want to setup a `STANDALONE` server relying on an external OpenLDAP
> > for authentication.
> >
> > Is it possible on samba 4.x - ?
> >
>
> Yes, but you will need to use nslcd.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Faithfully yours,

CVision Lab System Administrator
Vladimir Skubriev

On Wed, 21 Feb 2018 18:18:30 +0300
Vladimir Skubriev <skubriev at cvisionlab.com> wrote:
> Using nslcd related to more newer versions on samba ?
> 
> Or it is a one of use cases how to setup authentication in samba
> through openldap?
> 
> Is it possible to use sssd instead of nslcd ?
> 
> I already use sssd on machines to enumerate passwd, groups and done
> with authentication.
> 
> I tried to found any useful data on the net in case of : samba4
> standalone openldap. But unfortunately does not found any useful
> information.
> 
Sorry, but I take it all back, whilst I can get nslcd to get the users
info from ldap (okay AD, I don't have an ldap server), samba will not
work. Raising the log level shows that the Samba domain info (not to be
confused with AD domain info) is still required.

You might be able to make it work if you can add the Samba schema to
the external ldap server.

Rowland