[Samba] Re: Samba Anonymous LDAP Authentication

[adrian sender]

Hello Mathew.

You can easily make modifications to the /etc/ldap.conf

Something like this may be what you are after:

#/etc/ldap.conf

host    127.0.0.1 192.168.0.3   <---   note I have 2 ip addresses there, put 
in the IP of your master
base    dc=differentialdesign,dc=org
binddn  cn=Manager,dc=differentialdesign,dc=org
bindpw yourpassword

pam_password exop

nss_base_passwd ou=People,dc=differentialdesign,dc=org?one
nss_base_shadow ou=People,dc=differentialdesign,dc=org?one
nss_base_group  ou=Groups,dc=differentialdesign,dc=org?one
ssl     no


Substitute the appropriate values; however you will need your bindpw.

restart ldap and you should be able to "id username" on the client server.


Thanks,
Adrian Sender.


>From: "Matthew Crites" <mcrites at gmail.com>
>To: samba at lists.samba.org
>Subject: [Samba] Re: Samba Anonymous LDAP Authentication
>Date: Sat, 7 Oct 2006 10:07:16 -0400
>I would rather not join the server to the domain.  All I need is for
>the server to authenticate users against LDAP.  Thanks for your help.
>
>On 10/6/06, Matthew Crites <mcrites at gmail.com> wrote:
>>Hello all.  I have a Samba PDC server working great already.  However
>>on another host on the network I would like to setup a Samba server
>>that authenticates to the same LDAP server that my Samba PDC is using.
>>  However I want to do this anonymously without telling the second
>>server the admin password for LDAP.  I cannot seem to find any
>>documentation for anonymous LDAP authentication using Samba.  Do I
>>have to give Samba the admin password just to access authentication
>>records?
>>
>>--
>>Thanks,
>>Matthew Crites
>>
>