samba - Feb 2019 - Samba 4.7 and Editposix/Trusted Ldapsam extension support.

Is there a page with support status of this feature in current samba
releases ?

What is the current status and future?

-- 
Best Regards,

Vladimir Skubriev
System Administrator
CVisionLab

+7.918.504.38.20
skubriev at cvisionlab.com
http://cvisionlab.com

You mean this :  
https://wiki.samba.org/index.php/Samba_Release_Planning 
 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Vladimir Skubriev via samba
> Verzonden: dinsdag 5 februari 2019 9:07
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Samba 4.7 and Editposix/Trusted Ldapsam 
> extension support.
> 
> Is there a page with support status of this feature in current samba
> releases ?
> 
> What is the current status and future?
> 
> -- 
> Best Regards,
> 
> Vladimir Skubriev
> System Administrator
> CVisionLab
> 
> +7.918.504.38.20
> skubriev at cvisionlab.com
> http://cvisionlab.com
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Something like this.

But this link has no info that I need.

On the roadmap: https://wiki.samba.org/index.php/Roadmap

There is information
<https://wiki.samba.org/index.php/Samba4/LDAP_Backend#.28De.29motivation>
about general purpose LDAP server as the backend (e.g. openLDAP).

But that's not what i was looking for.

I looking for status of `passdb backend = ldapsam` feature. This feature
implemented in `3.6.25`.

But when I try to configure this in 4.7, there is a some caveats prompting
that my system will not work.

For example:

root at server-storage:/#  net idmap set secret ACME PasswordClearText
ldap_url_parse_ext(ldap://localhost/)
ldap_init: trying /etc/ldap/ldap.conf
ldap_init: using /etc/ldap/ldap.conf
ldap_url_parse_ext(ldaps://ldap.acme.com)
ldap_init: HOME env is /root
ldap_init: trying /root/ldaprc
ldap_init: trying /root/.ldaprc
ldap_init: trying ldaprc
ldap_init: LDAPCONF env is NULL
ldap_init: LDAPRC env is NULL
The only currently supported backend are LDAP and rfc2307

Message `The only currently supported backend are LDAP and rfc2307` hints
that it is not supported.


вт, 5 февр. 2019 г. в 11:14, L.P.H. van Belle via samba <
samba at lists.samba.org>:
> You mean this :
> https://wiki.samba.org/index.php/Samba_Release_Planning
>
>
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> > Vladimir Skubriev via samba
> > Verzonden: dinsdag 5 februari 2019 9:07
> > Aan: samba at lists.samba.org
> > Onderwerp: [Samba] Samba 4.7 and Editposix/Trusted Ldapsam
> > extension support.
> >
> > Is there a page with support status of this feature in current samba
> > releases ?
> >
> > What is the current status and future?
> >
> > --
> > Best Regards,
> >
> > Vladimir Skubriev
> > System Administrator
> > CVisionLab
> >
> > +7.918.504.38.20
> > skubriev at cvisionlab.com
> > http://cvisionlab.com
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba


-- 
Best Regards,

Vladimir Skubriev
System Administrator
CVisionLab

+7.918.504.38.20
skubriev at cvisionlab.com
http://cvisionlab.com

On Tue, 5 Feb 2019 09:14:34 +0100
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> You mean this :  
> https://wiki.samba.org/index.php/Samba_Release_Planning 
>  
No, I don't think he does ;-)

The only wiki page about ldapsam editposix is this:

https://wiki.samba.org/index.php/Ldapsam_Editposix

I suppose it is like everything else in Samba, it is supported now, but
could be deprecated then removed at any time.

As for a future, I really do not think it has one, NT4-style domains
regularly get broken, both by Microsoft and Samba. All the developer
emphasis seems to be going down the AD path and unless great care is 
taken, it is very easy to break NT4-style domains.

I would advise everybody to upgrade to AD at their earliest
opportunity.

Rowland