LDAP an %variables

[Andrew Bartlett]

Marcel Ritter wrote:
> 
> On Sat, 3 Aug 2002, Andrew Bartlett wrote:
> 
> > Marcel Ritter wrote:
> > >
> > > Hi there!
> > >
> > > I recently set up a samba server with LDAP support. After some tests with
> > > different windows versions my profile was trashed. So I tried to store
> > > the profile in a subdirectory "%a" (which should resolve to the windows
> > > release WinNT Win2k etc.). Unfortunately this does not work when specified
> > > in LDAP.
> > >
> > > Is there a reason for this?
> > >
> > > I'd really like to use the %<var> statements in LDAP. I already hacked
> > > around a bit and it works for me (just copied one line!) - however I'd
> > > like to see it in the official release if there's no further technical
> > > problem I can't see by now.
> >
> > It has problems when you then store the expanded form - you lose the
> > LDAP magic on the first password change etc.
> >
> > To get around this, we came up with a way we have 'defaults' for certain
> > things, using the same stuff as the 'fudge it up' solution for
> > smbpasswd.  Except we don't store the expanded strings back, unless they
> > are modified by a client.
> 
> Is there another way to store profiles from different windows versions in
> different directories? I saw this behaviour on Novell and I'd really like
> to use a similar feature with samba.

Sure - just don't set it in LDAP, just use the smb.conf options.  They
*do* take the % modifiers.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net