[Samba] Changes to userPassword attribute in LDAP for machine accounts

Beast beast at setuid.com
Tue Aug 12 03:33:42 GMT 2003


Monday, August 11, 2003, 8:20:52 PM, Bernhard wrote:



> Beast schrieb:

>>userPassword is optional on posixAccount objectclass, why you need a
>>password for that?
>>
> Currently I am writing on a client management software. It gives the 
> Administrator complete control over their Windows 2000/XP machines from 
> a web interface. In this software the clients have to authenticate 
> themselves on the server. We decided to store as much machine specific 
> settings in LDAP as possible, because our Samba already stores machine 
> information in LDAP and we do not want to start a new data source.

1. Use acl to restrict access.
2. If you still want to synch passwd, write your own passwd changer
script to update the machine passwd also.


> Bernhard Czech


--beast




More information about the samba mailing list