[Samba] Re: Using Samba with LDAP and SSL

[Sam Hart]

Oh, if LDAP is just Samba's backend, then it should be transparent to 
Windows.

If you're talking about securing LDAP so that the Windows machines can't 
access it, then there's a variety of things you could do with ACLs in 
LDAP that would help out. Depending on which LDAP server you're using, 
setting this would be different.

* On 03-10-10, Jamrock wrote:

> 
> "Sam Hart" <hart at physics.arizona.edu> wrote in message
> news:Pine.LNX.4.44.0310100937510.2569-100000 at bohr.physics.arizona.edu...
> >> Well, as far as Samba is concerned, it isn't required for your Windows
> > workstation to contact the LDAP server.
> 
> True, but the documentation recommends the use of SSL if you are using the
> LDAP backend.   This encrypts the LDAP authentication data.
> 
> I have Samba 3.0 working with LDAP.  I need to secure it before I deploy it
> in a production environment.

-- 
Sam Hart
University/Work addr. <hart at physics.arizona.edu>
Personal addr. <criswell at geekcomix.com>
Alternative <criswell at tux4kids.net>
end