LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Samba or ldap (https://www.linuxquestions.org/questions/linux-networking-3/samba-or-ldap-160517/)

amir_h 03-21-2004 07:11 AM

Samba or ldap
 
There is a windows 2003 server whcih uses autentification with ldap i want to make a linux client for that server . i mean that the client should be in their domain and users should be able to log in. I don't know how to make it.
Use samba and embedldap in it or use Ldap embed samba?

if anyone help me about configring it i would be more thnkfull.

hob 03-21-2004 11:51 AM

Amir,

I think that making a Linux system a member server on an Active Directory domain is probably best done with Samba, using the 'Winbind' service to sync the accounts. Samba 3.0 can do this, and if you install the samba-doc package there will be a load of documentation under /usr/share/doc/samba which covers domain integration. The same docs are on-line at the Samba website.

One Win2003 specific problem I've read of is that you may have to enable "sign-or-seal" support in Samba to connect to Win2003 servers.

This is something I'm going to have to do at work myself over the next month, and it looks like it will take a bit of effort to get everything right, so good luck !

amir_h 03-22-2004 05:55 AM

thanx,
my problem is not just making it under the windows domain.
the problem is more sufficticated because samba and ldap are mixed together i know that it is not so common to make a linux cleint for window ;) i have once tested windbind i made the windows server crashed :confused: that's why I am asking for the ways.

do you mean using samba and inclue a ldap in the pam. or a module in samba.

hob 03-26-2004 07:31 AM

I'd be inclined to forget that Active Directory is an LDAP server, since it isn't going to be very Linux-friendly. I've now had a look at the docs on my test system and found a step-by-step guide here:

/usr/share/docs/samba-3.0.2/htmldocs/domain-member.html

The section "Samba ADS Domain Membership". It looks like the preferred method is for samba to use the Kerberos protocol to get the account information.

amir_h 03-27-2004 10:59 PM

Tanx for your help i got to read what i needed i hope it works!!!


All times are GMT -5. The time now is 12:51 PM.