There is a way to sync passwords. It's not perfect but it works if you
can live with passwords stored as reversible encryption in samba4.
1. Allow clear text password by using samba-tools
2. Enable reversible encryption on each user (can be done with ms ad tool)
3. Make a query and use samba
On 26.2.2013 23:34, Andrew Bartlett wrote:
On Tue, 2013-02-26 at 18:16 +0200, Pekka L.J. Jalkanen wrote:
True, webservers can authenticate against AD in a similar fashion to
other LDAPs. But that's not the whole story.
The thing is that Samba 4 is designed from a ground up with AD in mind,
I'm in a situation where I should establish an external (i.e. non-AD)
LDAP directory for my employer for various web-based authentication
purposes. I don't think that Samba--or Windows AD, for that matter--in
and itself would be the best tool for this purpose; so far I've been
reviewing 389 DS,
Gesendet: Dienstag, 26. Februar 2013 15:01
An: samba@lists.samba.org
Betreff: [Samba] Synchronising password of some AD users with an external
LDAP?
I'm in a situation where I should establish an external (i.e. non-AD) LDAP
directory for my employer for various web-based authentication purposes. I
don't
PLJJ I know that if I were running a Windows AD, I could most likely
PLJJ accomplish what I want with--if nothing else--the 389 DS by using
PLJJ DS-provided Password Sync Service (see
PLJJ
: [Samba] Synchronising password of some AD users with an external
LDAP?
I'm in a situation where I should establish an external (i.e. non-AD) LDAP
directory for my employer for various web-based authentication purposes. I
don't think that Samba--or Windows AD, for that matter--in and itself
On 26.2.2013 17:16, Gregory Sloop wrote:
PLJJ I know that if I were running a Windows AD, I could most likely
PLJJ accomplish what I want with--if nothing else--the 389 DS by using
PLJJ DS-provided Password Sync Service (see
PLJJ
PLJJ I know that if I were running a Windows AD, I could most likely
PLJJ accomplish what I want with--if nothing else--the 389 DS by using
PLJJ DS-provided Password Sync Service (see
PLJJ
On Tue, 2013-02-26 at 18:16 +0200, Pekka L.J. Jalkanen wrote:
True, webservers can authenticate against AD in a similar fashion to
other LDAPs. But that's not the whole story.
The thing is that Samba 4 is designed from a ground up with AD in mind,
and AD itself has been designed with
