[Samba] limit user logon to

[Helmut Hullen]

Hallo, Troy,

Du meintest am 29.01.09:

> Miguel,

> Awesome answer.  Just what I needed to get me started.  I really
> appreciate your time!

> Troy

> On Wed, Jan 28, 2009 at 5:46 PM, Miguel Medalha
> <miguelmedalha at sapo.pt>wrote:

>>
>>  I have a question of a similar nature that I am going to post in a
>>> separate message in this forum, but what I would like to know is
>>> this:  Is there a comprehensive list of ALL of the attributes of a
>>> sambaSamAccount somewhere?  I would like to know all of the various
>>> things that you could control on a per user or per workstation
>>> basis using Samba and LDAP.
>>>
>>>    LDAP Admin:
>>>
>>>    http://ldapadmin.sourceforge.net/
>>>
>>>    You can also manage your directory with a browser using the
>>>    following (among many):
>>>
>>>    phpLDAPadmin
>>>    http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page
>>>
>>>    LDAP Account Manager
>>>    http://lam.sourceforge.net/
>>>
>>>
>>>
>> Every one of the above LDAP directory management programs will show
>> you the available object classes and their attributes. See "Schema
>> Browser" under the first two or "Schema" under the third one. You
>> can also manually open the samba3.schema under
>> "/etc/openldap/schema" and read them from there.
>>
>> Nevertheless, here it goes:
>>
>> The samba3.schema contains the following object classes:
>>
>> sambaConfig
>> sambaConfigOption
>> sambaDomain
>> sambaGroupMapping
>> sambaIdmapEntry
>> sambaSamAccount
>> sambaShare
>> sambaSidEntry
>> sambaTrustedDomainPassword
>> sambaTrustPassword
>> sambaUnixIdPool
>>
>> The attributes pertaining to the objectClass "sambaSamAccount" are
>> the following:
>>
>> *sambaSID
>> *uid,userid (inherited from core.schema)
>> cn,commonName (inherited from core.schema)
>> description (inherited from core.schema)
>> displayName (inherited from inetorgperson.schema)
>> sambaAcctFlags
>> sambaBadPasswordCount
>> sambaBadPasswordTime
>> sambaDomainName
>> sambaHomeDrive              sambaHomePath
>> sambaKickoffTime
>> sambaLMPassword
>> sambaLogoffTime
>> sambaLogonHours
>> sambaLogonScript
>> sambaLogonTime
>> sambaMungedDial
>> sambaNTPassword
>> sambaPasswordHistory
>> sambaPrimaryGroupSID
>> sambaProfilePath
>> sambaPwdCanChange
>> sambaPwdLastSet
>> sambaPwdMustChange
>> sambaUserWorkstations
>>
>> * The attributes marked with * are required attributes which MUST be
>> present. The others are optional and MAY be present.
>>
>>


Don't top post - please!
Don't full quote - please!
Thank you!


Viele Gruesse!
Helmut