Re: [Samba] Re: More than one logon script, can I have?
> Hi !
>
> On Thu, Sep 18, 2003 at 12:11:10PM +0200, [EMAIL PROTECTED]
> wrote:
>
>> I create all logon script on the fly from ldap. I created a little
>> schema
>> with a script attribute and there I put all DOS-batch commands. At logon
>> time (preexec in [netlogon]) for every user all script-parts for the
>> groups the user belongs to, the room-script (rooms associate to IPs) for
>> the printer connection and at last the script from the user-entry if
>> there
>> is any script attribute are taken from ldap. It doesn't take much CPU
>> power and works since half a year without any faults.
>> I anything does not work ("Can't print!") I can still examine the
>> batch-file.
>
> But which logon-parameters could be used at the logon.
>
> Do I get the full dn ?
No. I use the %u, %I, %m
%u is equal to uid, I map %I manually to the room. With the uid I get all
groups the user belongs to and, if you wish, the branch, he is in.
I tried perl for creating, but I switched very soon to C. Otherwise every
logon would start the perl interpreter. My binary from C-source is just
12488 bytes. The source is a ugly mess, since I am a java programmer...
but anyway, it works and I don't touch the source as long I can avoid it.
Again: I got my private OID from IANA and invented my own schema. These
objectClasses are added to every entry concerned (all posixGroup e.g.)
Malte Müller
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: More than one logon script, can I have?
Hi !
On Thu, Sep 18, 2003 at 12:11:10PM +0200, [EMAIL PROTECTED] wrote:
> I create all logon script on the fly from ldap. I created a little schema
> with a script attribute and there I put all DOS-batch commands. At logon
> time (preexec in [netlogon]) for every user all script-parts for the
> groups the user belongs to, the room-script (rooms associate to IPs) for
> the printer connection and at last the script from the user-entry if there
> is any script attribute are taken from ldap. It doesn't take much CPU
> power and works since half a year without any faults.
> I anything does not work ("Can't print!") I can still examine the batch-file.
The idea of putting the scripts in the ldap-dir is good :-)
I saw the implementation of this on a novell-netware server.
They have also a LDAP-server for managing their user-accounts,
organized as trees, which have notes of locations, division and
users.
On every hierarchical-level you are able to define logon-skripts.
If a user does a login, the several skripts at the different levels
are merged together.
I this is would be also a great oppertunity for mananging samba-domains.
Through the dn it is easyly possible to get the informations, and
to merge the logon-scripts.
Maybe the standard samba-schema could be extented with that attribute ?
A script, maybe written in perl, could be executed as pre-exec,
and can create the logon-script on-the-fly.
But which logon-parameters could be used at the logon.
Do I get the full dn ?
Best regards
Marc Schoechlin
--
Gruss / Best regards | LF.net GmbH| fon +49 711 90074-413
Marc Schoechlin | Ruppmannstr. 27| fax +49 711 90074-33
[EMAIL PROTECTED] | D-70565 Stuttgart | http://www.lf.net
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: More than one logon script, can I have?
>> You don't have to use a batch file for a logon script. You
>> can use a Visual Basic script instead. You can use "Select
>> Case" to have it do different things for different users.
>
>
> Interesting idea, but that would mean that all users would have access
> to the script and could see what others were getting couldn't they?
>
>
> The example in the manual with Perl making a script on the fly looks
> interesting though. I haven't read it through yet, busy busy :(.
>
I create all logon script on the fly from ldap. I created a little schema
with a script attribute and there I put all DOS-batch commands. At logon
time (preexec in [netlogon]) for every user all script-parts for the
groups the user belongs to, the room-script (rooms associate to IPs) for
the printer connection and at last the script from the user-entry if there
is any script attribute are taken from ldap. It doesn't take much CPU
power and works since half a year without any faults.
I anything does not work ("Can't print!") I can still examine the batch-file.
Just my 0,02
Malte Müller
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: More than one logon script, can I have?
> You don't have to use a batch file for a logon script. You > can use a Visual Basic script instead. You can use "Select > Case" to have it do different things for different users. Interesting idea, but that would mean that all users would have access to the script and could see what others were getting couldn't they? The example in the manual with Perl making a script on the fly looks interesting though. I haven't read it through yet, busy busy :(. Max. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
