search for: sambasam

I need to let my users change their password using PAM to preserve the existing ldap authentication system. How can I force pam to sync the smb password to the unix one. I am running Fedora 7 package on an x86-64 system. I have smb working via ldap and sambasam.schema (v3.0.24) I have unix password sync = yes but it should not come into play as I never plan to reset passwords via smbd. In '/etc/pam.d/system-auth' I was trying to use pam_smbpass.so The original pam script for password had password sufficient pam_ldap.so...

What specific ldap config files are used by samba when it's used as the backend db? I have followed the FDC Howto and setup the ldap data on a dedicated FDC server. From the samba machine I have been able to do 'ldapsearch -x -D "cn=dirmng" -W *' for all the sambaSam information. I have added the ldap data to smb.conf and set the passwd for the admin account. What appears to happen to me is that my ldap server is setup for simple authentication only while it looks like smb is not. How can I specify smb use simple authentication?

I'm working on getting Samba3 running in a RHEL4 environment. The components are; samba3-3.0.28-35 openldap-2.2.13-8.el4_6.4 smbldap-tools-0.9.4-1.el4.rf I already have a working and functional ldap installation. The rub is that the existing ldap accounts do not have any samba specific attributes. Samba by Example assumes that I'm initially creating an ldap database, where the

Hi people: I have a LDAP server running OpenLDAP that serves authentication purposes to services like ftp, imap, openvpn, etc. Now I implemented a Samba PDC based on LDAP. I did the configuration with Samba 3.2.5 on Debian Etch and smbldap-tools. I was able to join a WinXP workstation to my domain without problems but I can't login with any existing user in my LDAP directory. Then I added my

Hi, today I tried to migrate an old NT4 PDC to Samba 3 as described in http://samba.org/samba/docs/man/Samba-HOWTO-Collection/NT4Migration.html but with the Samba databases on LDAP: Whenever I tried that net rpc vampire -S NT4PDC -U administrator%passwd I received error messages that the users cannot be created. When I set debugging to level 2, it told me about Found bogus group

...(ou=Computers) to store host names. The process of a Windows/Samba domain member joining a Samba domain is a two stage one as each Samba client has to have a matching Posix account in the LDAP directory. After clicking OK on the client the server first creates the POSIX entry and then adds the SambaSam attributes. For whatever reason, when the ou=Computers entry was used, smbldap-tools added the POSIX entry into the Computers ou but then tried to read it back out from the Users ou. As the entry was non-existent in Users it cannot add the Samba attributes to the POSIX side and hence windows d...

.... We do not make a practice of ignoring our uses. I have been working on updating our documentation also as a result of feedback an dbug reports. You have never been ignored. The smbldap-tools should be configured to handle only the POSIX part of LDAP based accounts. Samba should handle all the sambaSAM components. Please review chapter 5 and give me your feedback. I am anxious to fix any problem you may have. Cheers, John T. On Thursday 26 May 2005 09:12, spu@corman.be wrote: > Ok, > > I re-read the script and the sambasamaccount is only added with -i option. > > My position...

Hi, I got samba 3.0.26a on my Fedora 7, and when i try to add users with smbpasswd -a username, it only works if the user exists as a linux user... i got a Centos 4.4 system with samba 3.0.10 and it works even if the user doesn't exists on the system. Can anyone explain me why this happens? is it from this new version (3.0.26a) or may be a problem of Fedora 7?

Alright now that samba can talk to LDAP I have a blank slate. I know I need to setup group mappings, but I'm a little confused about this. Since it's an ldap backend do the groups need to have unix counterparts? Should I use the net groupmap command to add the mappings or should I use an LDIF file? David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane, Suite

...DAP is running on the PDC itself. I can login to Linux as any LDAP user account suggesting that NSS Ldap is functioning correctly. Running getent passwd and getent group on the PDC provide a user and group list confirming I can set user and group ownership on any file or folder to a valid LDAP SambaSAM account and set permissions accordingly and these persmissions have the appropriate effect on user's access. The PDC's name is SMB1, the Domain is BGS. If I run net getlocalsid and net getlocasid BGS on the PDC I receive the same SID in the both cases. Smbldap-tools from Idealx.org w...

...s have already been added prior to the Samba installation using the ldapscripts package (also included in Debian). I understand that I have to run "smbpasswd -a" as root on the Samba server for each user that's supposed to be visible to (and usable by) Samba as well (a whole bunch of SambaSam* attributes gets added to a user's attribute set). What's not obvious to me is whether the userPassword attribute is changed after one has provided the passwd to the smbpasswd utility. (In conjunction with Kerberos, the value for the userPassword attribute always has a fixed notation like...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I managed to write a smb.conf so that the User Manager for Domains (NT Tool) can add users to the domain without any errors, but I don't know how the full name field (that is obtained from /etc/passwd) can be used . %$(ENVVAR) sounds to me like the right way to go, but I'm not an expert. I haven't found anything in that

How does the speed of SQL compare to the speed of LDAP? If the speeds are comparable, why bother with LDAP, which doesn't handle writes very well? Jim C. -- ----------------------------------------------------------------- | I can be reached on the following Instant Messenger services: | |---------------------------------------------------------------| | MSN: j_c_llings@hotmail.com AIM:

Folks, I have a new build of samba 3.3.0 ( stand alone file server ) which is configured to find all user data in an ldap directory, eg passdb backend = ldapsam. After testing I have confirmed that it all seems to work as it should with a test set of users. Now I need to figure out the best way to migrate the shares and users from the old system ( that used /etc/passwd to store user auth

I'm running samba 3.0.14a-6 on Debian GNU/Linux 2.4. I believe that I should be using pdbedit to add or modify users and their passwords, but I want to double-check that. I'd also like to suggest the documentation could be clearer. I had earlier versions installed, and the upgraded seems to have migrated me to the new password scheme. smb.conf has "passdb backend = tdbsam

Hi... If you have successfully gotten samba 3.0.14a (or any other recent samba version) to work with ldap, can you perhaps email me your various config files so I can figure out what I am doing wrong? Any help would be greatly appreciated. I've tried every thing I can think of, but I can't get samba 3.0.14a to work with ldap. The ldap server seems to be working and smbclient seems to

.... That's what I used to get when I didn't add the machine account to /etc/passwd first. >> >> > Ok, so now the question is this, when you try to join, are you giving it the root user or root equivilent (uid=0) account? Is it making the posix account but not modifying it with sambaSAM information? You are sure that everything is using ou=People (or whatever users container you're using)? I use the root account. When I started this quest I tried to get a root equivalent account to work and couldn't. I may revisit this now that I've overcome other obstacles. I tried...

Hi I am new to linux & Samba. I would like to setup Samba as a domain controller and using Fedora-ds for authentication. I have read some documents from www.samba.org but I am still in the mist. Here is my dumb questions about Samba as follows. 1. Is CENTOS4.6+SAMBA3.0.25 as PDC +FEDORA-DS possible? 2. Is this HOWTO from