2011/1/12 Konstantin Boyandin <temmo...@gmail.com>:
> smbldap-passwd may be called by non-root; thus,
> /etc/smbldap-tools/smbldap_bind>conf
> must be world-readable, and it keeps the passwords as plain text.

smbldap-passwd accesses to LDAP as a user who invoked itself.

This behavior is different from Samba itself as always accesses as
a user defined with "ldap admin dn".

So simply set 600 to smbldap_bind.conf will solve the problem.

Also you need to add "by self write" to both sambaLMPassword
and sambaNTPassword.

---
TAKAHASHI Motonobu <mo...@samba.gr.jp>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to