[Samba] exported LDAP DB > file > smbpasswd?

[aurfalien]

I am using pGina for authing, correct.

But when I map drive shares, I'll need some kind of authing mechanism.

My desire was this;

Since I already auth the user during there pGina login to Windows, I did not want to auth again for drive mapping to a Samba server.

But... since this SSO doesn't carry through to Samba as the Samba file server does not know who this person is requesting a drive map, they will need to input credentials.

What I would really LOVE is this;

Since authing has already been taking care of during log in, to be able to map a drive as that user w/o needing the input a password.

This way whatever they touch on the server will maintain there UID/GID or UGO rather.

This in effect will make Samba act as NFS in a way with regards to security (who are you and what are you allowed to do).

- aurf




On May 25, 2012, at 9:44 AM, Gaiseric Vandal wrote:

> pbdedit will export the "Windows" password from the "SambaNTPassword"
> field (won't it?)
> 
> My understanding was the pGina was using the unix password in the
> "userPassword"  field?    Or am I wrong?
> 
> 
> 
> 
> On 05/25/12 09:36, aurfalien wrote:
>> Now thats brilliant, elegant and simple.
>> 
>> Thanks Collen, looking forward to trying it.
>> 
>> - aurf
>> On May 25, 2012, at 2:31 AM, Collen wrote:
>> 
>>> Hi,
>>> 
>>> why not export with pdbedit and then import it again ?!
>>> no converting needed... (except for smb.conf that is.)
>>> 
>>> cheers.
>>> 
>>> On 25-5-2012 0:01, Gaiseric Vandal wrote:
>>>> Just what is in the documentation on samba.org.
>>>> 
>>>> Anything involving plain-text authentication seems to be discouraged.
>>>> 
>>>> 
>>>> 
>>>> On 05/24/12 17:56, aurfalien wrote:
>>>>>> On 05/24/12 16:25, aurfalien wrote:
>>>>>>> Hi all,
>>>>>>> 
>>>>>>> I am using OpenLDAP and over have ~800 users in its DB.
>>>>>>> 
>>>>>>> I would like to simply use Samba as a file server, no PDC.
>>>>>>> 
>>>>>>> I have been able to export my LDAP DB to a file containing hashes of users passwords.
>>>>>>> 
>>>>>>> Is there a way I can import this file to smbpasswd or other file that Samba understands so that my 800 some odd users won't have to re register there passwords?
>>>>>>> 
>>>>>>> I would really love to avoid having 800 annoyed users retyping there passwords for accessing shares.
>>>>>>> 
>>>>>>> I have them currently authenticating on Windows via an LDAP client (pGina).
>>>>>>> 
>>>>>>> - aurf
>>>>>> --
>>>>>> To unsubscribe from this list go to the following URL and read the
>>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>> -- 
>>> ---
>>> Collen Blijenberg - systeem/netwerk beheerder
>>> 
>>> -- 
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba