search for: 26_ldap

...mba with a firewall, it only allows me to do ldap, try to configure it, but I can not make it work. when I made the domain controller, I only compiled samba from the source and did it domain controller. Should I make this guide so that it replaces by ldap? https://wiki.samba.org/index.php/Samba_%26_LDAP Regards, Carlos

...om for UID, GID, and UNIX groups. 5. Given information returned from step 4, check user authorization against share definition requirements and permit access for user with UID and GID set as per LDAP lookup. And it's essentially just: https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP that works with Samba 4.8.0 and winbindd instead of relying on the old Samba fallback mechanism. How can this be accomplished with winbind? Kind regards, Ryan P.S. This may be a fairly common use case, since each large organization may deploy Kerberos authentication via AD but relatively many...

...uthenticate using their domain login credentials (winbindd and Active Directory) but be authorized (i.e. perform user/group lookup) against a separate OpenLDAP server? This was easy in previous versions of Samba with the fallback mechanism (https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP). It seems to be more complicated once winbind must be involved. LONG VERSION It seems like SSSD, and people bringing it up, isn't very popular on the lists. Despite its mention below, I am happy with a solution that involves it or not, and I can work out how to modify it after I get something...

...k on the sssd-users mailing list. > After reading a lot about idmap conf and idmap backends, I'm thinking that what I've been doing is not expressible with idmap. What I need is what is described, much better than I did, here: https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP That is: Samba will authenticate against AD, and then utilize the normal 'getent' system calls to gather the uid/gid numbers, and those will come from OpenLDAP, and/or the local system files as configured within the nsswitch.conf file. Is this type of setup still possible? -- Norman G...

...amba server to be a domain controller, nor do I wish to join my samba server to an AD domain. I just want to authenticate users from OpenLDAP as if they were local users so they can mount a file share. Is this possible to do? Thanks [1] docs I'm using https://wiki.samba.org/index.php/Samba_%26_LDAP#Setting_up_PAM_and_NSS_to_use_LDAP [2] [global] workgroup = WORKGROUP server string = %h server (Samba, Ubuntu) dns proxy = no log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d server role = standalone server...

...put of "testparm" for one of the servers. Indeed I wanted to express "However, Samba on server01", I wasn't aware of this potential for misunderstanding, sorry. I don't know any recent SAMBA + LDAP documentation, I roughly follow https://wiki.samba.org/index.php/Samba_%26_LDAP and I did set up a PDC with smbldap-tools a long time ago, but I know that this is not a PDC right now. What are the differences for non PDC servers? When I tell Samba + NSS to use LDAP branch 'ou=server01,ou=smb,ou=Groups,dc=domain,dc=tld' for group information I don't expect that...

...omain users failed to be retrieved from the passwd file. The bigger confusion is around the configuration. Should I be able to use an ldap backend and get the domain user's credentials when the access a share? I have tried to follow the instructions from http://wiki.samba.org/index.php/Samba_%26_LDAP#Let_Samba_use_LDAP The PAM section doesn't match my distro and I ain't see any mention of ldap in /etc/security/* Can anyone help iron out some of the creases in my set-up? Thanks, Dermot. ==== BDC conf ===== [global] unix charset = LOCALE workgroup = MINE server string = SMB...

...gt; > > After reading a lot about idmap conf and idmap backends, I'm thinking > that what I've been doing is not expressible with idmap. > > What I need is what is described, much better than I did, here: > > https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP > > That is: > > Samba will authenticate against AD, and then utilize the normal > 'getent' system calls to gather the uid/gid numbers, and those will > come from OpenLDAP, and/or the local system files as configured > within the nsswitch.conf file. > > Is this...

...ap or something > else ? > > > > > when I made the domain controller, I only compiled samba from the > > source and did it domain controller. > > > > Should I make this guide so that it replaces by ldap? > > > > https://wiki.samba.org/index.php/Samba_%26_LDAP > > > > Possibly, but I very much doubt it, I think we are going to need more > info before we can help you ;-) > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba &gt...

...domain login credentials (winbindd and Active > Directory) but be authorized (i.e. perform user/group lookup) against > a separate OpenLDAP server? > > This was easy in previous versions of Samba with the fallback > mechanism (https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP). > It seems to be more complicated once winbind must be involved. > > LONG VERSION > It seems like SSSD, and people bringing it up, isn't very popular on > the lists. Its not that it isn't popular, it is that Samba cannot support it because Samba does not produce it. If you...

...services to the Unix sude but simply allow sharing of Unix file systems to Windows systems while authenticating against the AD. Usernames in Linux and in the AD are translated via a username map script. If I understand the instructions at https://wiki.samba.org/index.php/Samba%2C_Active_Directory_%26_LDAP correctly, I don't have to run winbind in this scenario, however, I've tried this with both winbind running and not running. Connecting to services from AD member Windows systems works without any problems. I can map Unix home areas and other shares and even the username translation works...

...e of this potential for misunderstanding, sorry. > > No Problem, it was just a misunderstanding, I misunderstood what you > meant, but I understand now. > >> I don't know any recent SAMBA + LDAP documentation, I roughly follow >> https://wiki.samba.org/index.php/Samba_%26_LDAP and I did set up a >> PDC with smbldap-tools a long time ago, but I know that this is not a >> PDC right now. What are the differences for non PDC servers? > > Not much, what you are running is a PDC, you just don't have any > clients. As for recent Samba with LDAP documen...

...Directory) but be authorized (i.e. perform user/group lookup) against > > > a separate OpenLDAP server? > > > > > > This was easy in previous versions of Samba with the fallback > > > mechanism ( > > https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP). > > > It seems to be more complicated once winbind must be involved. > > > > > > LONG VERSION > > > It seems like SSSD, and people bringing it up, isn't very popular on > > > the lists. > > Its not that it isn't popular, it is that Samba...

Hey all, I'm having some trouble figuring out ID mapping between AD and LDAP. Basically I've done what is described in this doc: http://wiki.samba.org/index.php/Samba%2C_Active_Directory_%26_LDAP because it comes very close what I need. Only Samba is aware of AD and because uids are kept aligned between my AD and LDAP, acls for users works just fine. Groups however are not kept aligned between LDAP and AD. For instance, I have a group in LDAP called "it_unix_posixgroup" and vi...

...o > I wish to join my samba server to an AD domain. I just want to > authenticate users from OpenLDAP as if they were local users so > they can mount a file share. Is this possible to do? > > Thanks > > > [1] docs I'm using > https://wiki.samba.org/index.php/Samba_%26_LDAP#Setting_up_PAM_and_NSS_to_use_LDAP > > > > [2] > [global] > workgroup = WORKGROUP > server string = %h server (Samba, Ubuntu) > dns proxy = no > log file = /var/log/samba/log.%m > max log size = 1000 > syslog = 0 > panic action = /usr/shar...

Just because it hasn't yet been mentioned, did you run 'smbpasswd -w <ldap-secret>' to pass samba the admin dn passwords? https://wiki.samba.org/index.php/Samba_%26_LDAP#Let_Samba_use_LDAP Kris Lou klou at themusiclink.net On Tue, Oct 16, 2018 at 2:24 PM, Andrew Bartlett via samba < samba at lists.samba.org> wrote: > On Tue, 2018-10-16 at 20:55 +0100, Rowland Penny via samba wrote: > > On Tue, 16 Oct 2018 12:13:16 -0700 > > Emil Henry via s...

...> 5. Given information returned from step 4, check user authorization against > share definition requirements and permit access for user with UID and GID > set as per LDAP lookup. > > And it's essentially just: > > https://wiki.samba.org/index.php/Samba,_Active_Directory_%26_LDAP I'd say it isn't, in the sense that you want to have share definition authorization, which are enforced by Samba (which then would require Samba to know about group membership et al.). If you don't have any share authorization, then UI guess you should be able to use filesystem UGO...

On Tue, 2018-10-16 at 20:55 +0100, Rowland Penny via samba wrote: > On Tue, 16 Oct 2018 12:13:16 -0700 > Emil Henry via samba <samba at lists.samba.org> wrote: > > > Hello! > > > > We have Samba v3 (3.5.10) working against an LDAP server, and need to > > upgrade to Samba v4 (4.7.1), RHEL 7 supports only v4. Tried multiple > > configs of the smb.conf

...ot;, I wasn't > aware of this potential for misunderstanding, sorry. No Problem, it was just a misunderstanding, I misunderstood what you meant, but I understand now. > I don't know any recent SAMBA + LDAP documentation, I roughly follow > https://wiki.samba.org/index.php/Samba_%26_LDAP and I did set up a > PDC with smbldap-tools a long time ago, but I know that this is not a > PDC right now. What are the differences for non PDC servers? Not much, what you are running is a PDC, you just don't have any clients. As for recent Samba with LDAP documentation, there isn't...

Greetings I am nearing being prepared to get our corporate network from Active Directory to samba3 with ldap. The last hurdle is to get an administrative interface to the ldap repository containing the users and Groups. I,m hoping for some recommendations. I have attempted the following. Samba Console: http://imc.sourceforge.net/samba-console.html The difficulty I'm having is that it is