Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-12-03 Thread Andrew Bartlett
On Fri, 2012-11-30 at 08:28 -0500, Brian Gold wrote: > Hi all, > > > > I've been using samba for a few years now on a couple of file servers with a > tdbsam backend for our user accounts. We use openldap for the vast majority > of our identity management, so I would love to be able to tie into

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
On 11/30/12 16:11, Brian Gold wrote: On 2012-11-30 4:01 pm, Gaiseric Vandal wrote: So when you run pdbedit -Lv for a user, is the "Unix user" name is an account in ldap? If that is the case, then you probably just want to have a script that runs that runs thru a list of user names and they run

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Brian Gold
On 2012-11-30 4:01 pm, Gaiseric Vandal wrote: So when you run pdbedit -Lv for a user, is the "Unix user" name is an account in ldap? If that is the case, then you probably just want to have a script that runs that runs thru a list of user names and they runs ldapmodify to add the appropriate

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
So when you run pdbedit -Lv for a user, is the "Unix user" name is an account in ldap? If that is the case, then you probably just want to have a script that runs that runs thru a list of user names and they runs ldapmodify to add the appropriate samba attributes.In theory you can use pdb

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Brian Gold
On 2012-11-30 11:15 am, Gaiseric Vandal wrote: No, you wouldn't sync passwords to TDB. Does your LDAP entry for each user currently have a SambaSID value? Also, when you type "pdbedit -Lv someuser" you should see the unix account for the user. The unix account is either explicitly created

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
On 11/30/12 09:42, Brian Gold wrote: On 2012-11-30 9:22 am, Gaiseric Vandal wrote: Can you clarify one thing - why are you using the sambaNTPassword in openldap if openldap is not currently used samba authentication? I would have thought that you would use the standard password field. We

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Brian Gold
On 2012-11-30 9:22 am, Gaiseric Vandal wrote: Can you clarify one thing - why are you using the sambaNTPassword in openldap if openldap is not currently used samba authentication? I would have thought that you would use the standard password field. We are using the standard userPassword fi

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
Can you clarify one thing - why are you using the sambaNTPassword in openldap if openldap is not currently used samba authentication? I would have thought that you would use the standard password field. I use Samba 3.x DC's with an ldap back end. I also use the ldap backend for unix authe

[Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Brian Gold
Hi all, I've been using samba for a few years now on a couple of file servers with a tdbsam backend for our user accounts. We use openldap for the vast majority of our identity management, so I would love to be able to tie into this. We recently started using sambaNTPassword in openldap for rad