similar to: ldapsam:editposix & add machine script

Hi, I'm trying to make a "pure ldap" setup, whereas users, groups, id mappings and everything that is supported with LDAP be in the LDAP tree and managed directly by samba. That is, I'm using: ldapsam:trusted = yes ldapsam:editposix = yes And NOT using smbldap-*. My smb.conf is here: http://wiki.clueless.com.ar/SambaLdap/smb.conf-PDC I created the LDAP tree root

Hi, I'm reading http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html , http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-bdc.html and http://samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html and I'm still not quite sure... If I set up a network with one samba 3 PDC and a few samba 3 BDCs, all pointing to the same OpenLDAP server and

Hi, I'm not a seasoned samba user but I do have a little experience with it (mostly small setups with plain smbpasswd file and a few workstations). I also have some experience with OpenLDAP and I've even written some objectclasses and attributes when the standard ones weren't enough However, I'm trying to set up a midsized network using LDAP for SSO and I can't make samba

Hi, I'm having permissions problems connecting to a share when the gid of the directory shared is not the primary group of the user connecting to it. Maybe I faced it the wrong way, but I did read (and at least thought I understood) the 'File, directory and share access controls' section of the howto [0]. My users have either one or another 'primary group' (the one set in

Hi, I've been using dovecot for some time now, always with the setting: disable_plaintext_auth = yes so that no user can accidentally expose their username/password in the open. However, I'm now trying to configure a webmail client in a nearby server which doesn't support TLS or SSL IMAP connections :-( Is there any way to allow plaintext_auth only for a small set of IP

If I configure a samba PDC and then a samba BDC, do I need a machine trust account for the BDC? That is, do I have to run "net rpc join" on the BDC? Or manually create the account for the BDC in LDAP? -- Mariano Absatz - "El Baby" el.baby at gmail.com www.clueless.com.ar

Hi, I've been using an attribute template for some time without any problems. My accounts are on an LDAP server and I have an attribute maildropPath which is the maildir path for the user relative to /home/vmail That is, user "mabsatz at example.org" has, in attribute maildropPath the string "example.org/mabsatz", meaning that the maildir is in

Hi, I'm thoroughly RTFM'ing in order to find out what I'm doing wrong <http://lists.samba.org/archive/samba/2009-October/thread.html#151046> and I noticed that links from the *Samba-HOWTO-Collection* to the *manpages-3* don't work... the problem is that both documentation sets are on different directories but links don't include a path (nor absolute, nor relative).

Hi, recently I got my ldap server up an running and now I'd like to start to use it with our 600-user-300-windows-pc samba server. (Centos 5.4, samba-3.0.33-3.28, openldap-2.3.43, smbldap-tools-0.9.5-) So I started to read the samba how to, some books, a lot of postings and finaly tried first the smbldap-tools from idealx. After that I tried the Ldapsam:Editposix as this is the build in

Hi to everybody, I managed to setup ldapsam:editposix for Debian Lenny as described here: http://wiki.samba.org/index.php/Ldapsam_Editposix and had the impression that in order to add a Samba Unix client, it would be best to continue here: http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html However, in the ldapsam:editposix tutorial, the Administrator is mentioned instead of root

Hi, I am more or less following this tutorial Ldapsam Editposix = http://wiki.samba.org/index.php/Ldapsam_Editposix but can't quite get my domain to work. I think the issue is with the idmap part of the smb.conf but can't quite figure out what's wrong with it or what the correct format should be. My SMB.CONF file.... #interfaces = lo0 em0 127.0.0.1 bind interfaces only = no

Hey guys, I've gotten my samba + openldap running quite well, minus one problem (that I know about). I've read over plenty of documentation, the official and other wiki's and such. I believe I have winbind working correctly, so I assume I won't have to use external scripts to add groups/users/etc.. But isn't there something one must do in order for their OS (in my case

Hi, I'm sorry if this is a very FAQ, I've been googling around and searchin' the list archive and I'll gladly accept RTFMs with somehow precise URLs (including URLs to the list archives). I'm on the drawing board (no equipment yet) for a server farm that will have a SteelEye linux cluster behind to provide (among other services) with networked file access. The setup is

Hello list, I'm trying to setup Samba to use: ldapsam:editposix = yes but I'm having problems to add users via "smbpasswd -a". It seems smbpasswd tries to modify an existing entry (and falling of course) instead of adding a new entry. Is that a bug, a configuration problem, or intended behavior? Do I need to create a postixaccount entry prior to use "smbpasswd

I tried setting up a samba/ldap domain using the ldapsam:editposix feature, using the brief instructions at http://wiki.samba.org/index.php/Ldapsam_Editposix. Everything goes rather smoothly, and I can add XP machines and log into them as the Administrative user. I added a user to the server, then to samba/ldap using smbpasswd -a newuser ldapsearch -x shows the user & encrypted password, so

Hello list, have a samba 3.4.3 as domain controller with openldap as backend, using ldapsam:trusted = Yes and ldapsam:editposix = Yes and everything works like a charm. Now i would like to use this ldap for storing more information about my users; full name, phone, address and maybe even a picture. InetOrgPerson is the objectClass i would like to use since it's standard and has all i need and

Hi, I admit that this is OT, at least slightly. While I've successfully used the ldapsam:editposix module in conjunction with the "net sam" and "net rpc" toolchain, which provides me with both the POSIX and the Samba account info for each account stored centrally in an LDAP DIT, I would like to have the info related to an InetOrgPerson as well. What's the easiest

Something like this. But this link has no info that I need. On the roadmap: https://wiki.samba.org/index.php/Roadmap There is information <https://wiki.samba.org/index.php/Samba4/LDAP_Backend#.28De.29motivation> about general purpose LDAP server as the backend (e.g. openLDAP). But that's not what i was looking for. I looking for status of `passdb backend = ldapsam` feature. This

Is there a page with support status of this feature in current samba releases ? What is the current status and future? -- Best Regards, Vladimir Skubriev System Administrator CVisionLab +7.918.504.38.20 skubriev at cvisionlab.com http://cvisionlab.com

On Tue, 5 Feb 2019 11:56:05 +0300 Vladimir Skubriev <skubriev at cvisionlab.com> wrote: > вт, 5 февр. 2019 г. в 11:42, Rowland Penny via samba > <samba at lists.samba.org > >: > > > On Tue, 5 Feb 2019 11:31:53 +0300 > > Vladimir Skubriev via samba <samba at lists.samba.org> wrote: > > > > > Something like this. > > > > >