I am looking for some good tools to manage Samba users in LDAP.  It
looks like there are several good tools mentioned on the Samba Wiki, but
I am concerned mostly with the proper addition of new users to LDAP, in
particular, generating unique SIDs.  smbldap-useradd, for example,
generates the SIDs for primary user and group based off of a simple
formula based on the UID and GID, whereas Samba itself using a very
simple mechanism of storing the next free RID in an LDAP attribute.
Since I still plan to use the Add Computer to Domain wizard in Windows
for adding computers, I am concerned that an overlap could occur between
these two approaches.  AFAIK, there are no SQL-like feature in LDAP like
transactions, unique indices, or sequences that would allow multiple
mechanisms to generate a unique SID.  I wouldn't mind a tool like
pdbedit which goes through Samba to update the backend db, but I want it
to be scriptable and not ask for a password so I can integrate password
updates with other systems such as LDAP (using userPassword) and
Kerberos.
-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: 10A0 7AE2 DAF5 4780 888A  3FA4 DCEE BB39 7654 DE5B

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to