[OpenSUSE 10.3] SAMBA Active Directory authentication
 

Has anyone ever implemented this on OpenSUSE 10.3 successfully? I have various directories (eg. /srv/www/vhost/hr, /srv/www/vhost/acct etc.) that I want to give access to people based on where they are located in the Active Directory tree.

Thanks for any guide.

If the system already uses AD for authentication, then you should be able to use normal access controls such as acl's.

SuSE has a wizard for what kind of authentication to use. "kdesu yast2 users" -> Authentication Tab. Also read the latest "Using Samba" book. It has a section on Open Directory. I'm not a Windows sys admin so I can't speak from experience, but another user on this board was able to use AD authentication after I pointed out the wizard. There are other samba books "Samba 3 by Example" and "Samba 3 HOWTO & Reference Guide" that are available by installing SuSE's samba-doc package. LDAP integration is covered. If you don't currently use AD authentication for this SuSE host, then you may have a lot of work ahead, but the wizard may do most of the configuration for you. You may still need to configure the LDAP server to populate it with your Linux users.

AD authentication using the wizard has been broken in Opensuse from 10.3 onwards. It worked perfectly in 10.2... don't really know why no-one has fixed it yet (don't ask me, i'm no linux coder).