[Samba] Samba4 LDAP Integration with Asterisk

Mon Sep 9 04:03:22 MDT 2013

On 09/09/13 10:12, Victor Adsuar Abaldea wrote:
> Hi Penny,
>
> Thank you for response, but I'm not able to import Alterisk ldif into 
> SAMBA 4. I split the files in asterisk_attr.ldif and asterisk_obj.ldif 
> but still get the same error. I've been searching answer to this topic 
> and sincerely  and ldap syntax have been changed to Microsoft world. I 
> think the new Samba4 is a close project, Samba have jumped to Active 
> Directory and now the integration with other services are a utopia, 
> it's a pity because the new version it's a great step to go back.
>
> I post opinions about this topic.
> http://lifecs.likai.org/2013_06_01_archive.html
>
> In Asterisk forum none answer me, and I don't find anyone with a 
> response to How modify the schema. In this post 
> https://lists.samba.org/archive/samba/2013-January/170901.html you can 
> see a example and you will see the changes. oMSyntax is a Microsoft 
> variable! http://technet.microsoft.com/en-us/library/cc961740.aspx
>
> Samba 4 it's not compatible with OpenLdap ldif files. Maybe I'm wrong 
> and someone can open my mind...
>
> Thanks!
>
>
>
>
> On 6 September 2013 14:24, Rowland Penny <rowlandpenny at googlemail.com 
> <mailto:rowlandpenny at googlemail.com>> wrote:
>
>     On 06/09/13 11:04, Victor Adsuar Abaldea wrote:
>
>         Hi,
>
>         I am turning crazy. I try to integrate Asterisk 11.5.1 into
>         Samba4 LDAP,
>         but when I import the ldif file from contrib directory I get
>         this error.
>
>         ldbmodify -H /usr/local/samba/private/sam.ldb asterisk.ldif
>         --option="dsdb:schema update allowed"=true
>         ERR: (No such object) "objectclass: Cannot add
>         cn=asterisk,cn=schema,cn=config, parent does not exist!" on DN
>         cn=asterisk,cn=schema,cn=config at block before line 835
>         Modify failed after processing 0 records
>
>         LDAP and Asterisk are in diferents boxes. Please can someone
>         help me?
>
>         Thank you in advance!
>
>           *Victor Adsuar*
>         *Departamento de Sistemas*
>         *Teralco Tecnologías Informáticas*
>         vadsuar at teralco.com
>         <mailto:vadsuar at teralco.com><https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=micorreo@teralco.com>
>         www.teralco.com <http://www.teralco.com>
>
>         *AVISO LEGAL:
>
>         Este mensaje se dirige exclusivamente a su destinatario y
>         puede contener
>         información reservada y/o CONFIDENCIAL. Si Vd. no es el
>         destinatario
>         original no está autorizado a copiar o distribuir esta
>         comunicación a
>         ninguna otra persona. Si ha recibido este mensaje por error,
>         le rogamos nos
>         lo comunique inmediatamente por esta misma vía y proceda a su
>         borrado. **
>         Gracias**.*
>
>
>         *DISCLAIMER:
>
>         This message is intended exclusively for its addressee and may
>         contain
>         information that is CONFIDENTIAL and protected by professional
>         privilege.
>         If you are not the intended recipient you are hereby notified
>         that any
>         dissemination, copy or disclosure of this communication is
>         strictly
>         prohibited by law. If this message has been received in error,
>         please
>         immediately notify us via e-mail and delete it. **Thank** you.*
>
>         *
>         *
>
>         *
>         *
>
>         *Antes de imprimir este email piense bien si es necesario
>         hacerlo.*
>
>         *Cosider your environmental responsibility before printing
>         this enail*
>
>     Hi, split the ldif in two, one containing the attributes, the
>     other the objectclasses, add the attributes one first, then the
>     objectclasses.
>
>     Rowland
>
>
>
>
> -- 
>
> *Victor Adsuar*
> *Departamento de Sistemas*
> *Teralco Tecnologías Informáticas*
> vadsuar at teralco.com <mailto:vadsuar at teralco.com>
> · Tel. +34 965 68 87 02 · Móv. +34 627 26 87 54
> Avda. de Cartagena 1 Entlo, · 03195 El Altet - Elche (Alicante) · SPAIN ·
> www.teralco.com <http://www.teralco.com>
>
> /AVISO LEGAL:
> Este mensaje se dirige exclusivamente a su destinatario y puede 
> contener información reservada y/o CONFIDENCIAL. Si Vd. no es el 
> destinatario original no está autorizado a copiar o distribuir esta 
> comunicación a ninguna otra persona. Si ha recibido este mensaje por 
> error, le rogamos nos lo comunique inmediatamente por esta misma vía y 
> proceda a su borrado. //Gracias//./
>
>
> /DISCLAIMER:
> This message is intended exclusively for its addressee and may contain 
> information that is CONFIDENTIAL and protected by professional 
> privilege. If you are not the intended recipient you are hereby 
> notified that any dissemination, copy or disclosure of this 
> communication is strictly prohibited by law. If this message has been 
> received in error, please immediately notify us via e-mail and delete 
> it. //Thank//you./
>
> /
> /
>
> /
> /
>
> /Antes de imprimir este email piense bien si es necesario hacerlo./
>
> /Cosider your environmental responsibility before printing this enail/
>
OOPS, I missed that you are trying to use an LDAP ldif, this will not 
work, you need the Asterix schema and then run it through oLschema2ldif 
which you will find in /usr/local/samba/bin if you have compiled samba4 
yourself. The syntax for oLschema2ldif is:

/usr/local/samba/bin/oLschema2ldif -b <your samba4 base DN> -I 
</path/to/asterix.schema> -O </path/to/asterixad.ldif>

Where:
<your samba4 base DN> is the base of your AD i.e. DC=example,Dc=com
</path/to/asterix.schema> is the full path (including name) to where you 
have the asterix schema
</path/to/asterixad.ldif>  is the full path to where you want the new 
ldif to be created plus what you want the ldif to be called.

Once you have run oLschema2ldif, you will find your new AD ldif wherever 
you told the script to put it. Split this file into attributes & 
objectclasses and install these.

Rowland