[Samba] Password sync
g.tranelli at inarcassa.it
g.tranelli at inarcassa.it
Fri Jul 2 09:12:37 GMT 2004
Hi all,
I have configured two samba-3.0.4 (PDC and BDC) with ldap (openldap).
My problem is that we have a third ldap in my company and I changed the source
of smbldap from idealx to sync that ldap.
I did a debug and samba calls the script in the right way, but, this is the
weird stuff, the script sync my two openldap servers but do not sync the third
ldap.
Running the script by hand it works perfectly, not through samba.
This is my smb.conf:
# Global parameters
[global]
workgroup = SMBV3DOMAIN
netbios name = SMBV3PDC
server string = Samba-Ldap PDC
domain logons = Yes
preferred master = Yes
domain master = Yes
local master = Yes
wins support = No
os level = 65
; bind interfaces only = true
; interfaces = 127.0.0.1 10.0.0.91 10.0.0.92
hosts deny = ALL
hosts allow = 127.0.0.1 10.0.0.0/255.0.0.0
security = user
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
mangling method = hash2
Dos charset = 850
Unix charset = ISO8859-1
load printers = No
panic action = "echo 'Samba V3 Panic' | /bin/mail -s 'Samba V3 Panic'
g.tranelli at inarcassa.it"
;
; for debug purpose only
log level = 101
log file = /var/log/samba/log.%m
passwd chat debug = Yes
; max log size = 0
syslog only = No
syslog = 10
;
passdb backend = ldapsam:ldap://localhost
encrypt passwords = Yes
unix password sync = Yes
ldap passwd sync = No
obey pam restrictions = No
passwd chat debug = Yes
passwd program = /usr/local/sbin/smbldap-passwd %u
passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new
password*" %n\n"
;
; logon script = netlogon.bat
; logon drive = L:
; logon home = \\SMBV3PDC\shared
; logon path = \\SMBV3PDC\profiles\%U
logon script =
logon drive =
logon home =
logon path =
;
; ldap admin dn = cn=samba,ou=Dsa,dc=example,dc=it
ldap admin dn = cn=samba,ou=Dsa,dc=example,dc=it
ldap suffix = dc=inarcassa,dc=it
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap idmap suffix = ou=Users
ldap machine suffix = ou=Computers
ldap ssl = No
ldap delete dn = No
;
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
; delete user script = /usr/local/sbin/smbldap-userdel "%u"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
; delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u"
"%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
;
More information about the samba
mailing list