[Samba] UNIX/Linux system authentication using Samba LDAP ?
miroslav.kes at gmail.com
Tue Nov 3 19:03:47 UTC 2020
I'm administrating a FreeBSD server in a an office where we do cross-platform development. People use both Linux and Windows workstations for the development.
I have an OpenLDAP server running on the FreeBSD server that used for both:
- system authentication of users on the server itself and the Linux workstations
- authentication of users for Samba shares on the server itself and for Samba servers running on the the Linux workstations.
It looks like the Samba authentication against the OpenLDAP server is not supported anymore.
The Release notes for Samba 4.13 state that:
"Samba 4.13 deprecates Samba's original domain controller mode. Sites using Samba as a Domain Controller should upgrade from the NT4-like 'classic' Domain Controller to a Samba Active Directory DC to ensure full operation with modern windows clients."
The FAQ states:
Do Samba AD DCs Support OpenLDAP or Other LDAP Servers as the Back End?
Active Directory requires features, such as ACLs stored within the directory and a different schema, that are not supported by LDAP servers.
It is quite annoying as there are other applications authenticated against the OpenLDAP server and suddenly the whole coexistence is gone. :-/
But anyway, is it possible to use the Samba's internal LDAP server and use it as a replacement of the OpenLDAP server?
If so, how does the administration (e.g. adding new attribute schemas for other applications) of the Samba LDAP server look like?
More information about the samba