search for: smbladp

hello, I 'm trying to configure samba to have all account users in ldap. i compiled it with ldapsam support, OK i have copied samba.schema under /etc/ldap/schema, OK i added the objetclass sambaaccount in all the users's dn in ldap db, OK I have defined the ldap configuration under smb.conf, OK I have defined a PDC, the samba one. but when i tried to connect from a windows client, it

I was in the process of setting up a new Samba 3.5.4 PDC with LDAP backend, over CentOS 5.5, when I came across a very strange behavior. After executing the smbladp-populate script, I was trying to grant the needed privileges to the group "Domain Admins" in order no to use "root" to manage the Windows domain. After successfully granting rights to the "Admin" user, there was no way to make this user benefit from them. Even the...

...= public samba folder guest ok = Yes inherit acls = Yes path = /home/samba/public read only = Yes Communication between PDC and Ldaps-Server works. Samba passwords from the users are used properly. Machine-account was added from as Ldif from an old and still working Samba 3 server, because smbladp is not in the SuSE-Repos. Adduser creates machine-accounts only in /etc/passwd and shadow, not in the ldap. bremen.ldif: # bremen$, Machines,hhi.hamburg.de dn: uid=bremen$,ou=Machines,dc=hhi,dc=hamburg,dc=de sambaLMPassword: XXXXXXXXXXXXXXXXXX sambaPrimaryGroupSID: S-1-5-21-XXXXXXXXXXXXXXXX...

...ld like to ask is what if I remove the following bit from smb.conf just to test and use smbldap tools to do the user/machine management? ldapsam:editposix = yes ldapsam:trusted = yes I assume I would have to setup the smbldap.conf and smbldap_bind.conf? What about the perl script in /usr/share/smbladp.pm? SID="S-1-5-21-2631908330-1812305667-41686038" (SID of the server) sambaDomain="mydomain" ldapTLS="0" suffix="dc=mydomain" usersdn="ou=Users,${suffix}" computersdn="ou=Computers,${suffix}" groupsdn="ou=Groups,${suffix}" idmap...

Hi Gruss, At this stage there is only one server, running 3.6.25 on Ubuntu12.04. The plan to get LDAP to work on this one. Then add the second server 4.x and the promote it to BDC and then demote this one. Just a side info, we didn't want to go tdbsam in both as I read it breaks the domain trust. The domain names are real ones. I ran the commands you suggested, nothing in reply. I tried