[Samba] Novell EDirectory as LDAP backend

[Rolf Offermanns]

Hi,
is anybody out there who is using Novell Edir. with samba?

I have searched the archive and found some random notes but no real 
success story.

Here is what I have achived so far. Maybe someone can give me some hints.

I have tried the samba-nds.schema that comes with the 2.2.7a tar ball.
While I was able to import/add it to EDir. it did not work for me, 
because the "lmPassword" and "ntPassword" attributes had a SyntaxID of 
"SYN_INTEGER" which I think is wrong, because samba tries to store some 
hex.Strings in these attributes. After changing them to "SYN_CI_STRING" 
I was able to authenticate against edir.

The only thing that does not work is to ldapadd or ldif import users 
with objectClass sambaAccount.

Adding posixAccount users and then adding the sambaAccount objectClass 
via Novells "ConsoleOne" works, so I guess this is a edir. specific 
problem which is OT here.

So right now, I can manually add machine and user accounts, join (W2K) 
clients to the samba domain and log in as an user. Changing passwords 
works, too.

I have attached the modified schema file.

Can anyone give me a hint about adding users w/o using ConsoleOne?
Setting this up with openldap was no problem at all, btw, but I have to 
use edirectory, because my university wants it that way.

Any help is greatly appreceated,
-Rolf