LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Basic Samba Server or Active Directory Central Login via LAM/LDAP/SAMBA (https://www.linuxquestions.org/questions/linux-server-73/basic-samba-server-or-active-directory-central-login-via-lam-ldap-samba-812959/)

metallica1973 06-08-2010 04:53 PM

Basic Samba Server or Active Directory Central Login via LAM/LDAP/SAMBA
 
http://www.ldap-account-manager.org/

I used these previously and they are ok but...............

https://www6.software.ibm.com/develo...mba/index.html

http://wiki.zimbra.com/index.php?tit...imbra_Admin_UI

https://help.ubuntu.com/community/LD...x_and_Windows)

http://www.steve-lacey.com/blogarchi...s_a_wind.shtml

http://ubuntuforums.org/showthread.php?t=1184288

https://help.ubuntu.com/community/SingleSignO

http://www.howtoforge.com/centos-5.x...h-ldap-backend

Any thoughts

New2Linux2 06-08-2010 07:03 PM

I have successfully setup a Domain Controller for Windows 2000 Pro and Windows XP Pro clients using Samba on Debian. Just going through the instructions in Samba By Example did the trick for me. Prior to the 3.0 release of Samba, the DC was limited in functionality to that of a NT 4.0 DC (no Active Directory compatibility.) The good folks at Samba.org were working on getting Samba to act like an AD Domain Controller, but I haven't worked with it in a couple years so I'm not sure if that functionality is there yet.

Good luck and don't forget to post your progress here so others can learn from your example.

metallica1973 06-08-2010 11:02 PM

thanks

there seams to be a lot of data out there but is it reliable. I have been reluctant to use it but if I see that people use it more often and there are success stories than so be it. It is definitely cost effective in this economy. Any comments?

okcomputer44 06-09-2010 10:49 AM

Quote:

Originally Posted by metallica1973 (Post 3997329)
thanks

there seams to be a lot of data out there but is it reliable. I have been reluctant to use it but if I see that people use it more often and there are success stories than so be it. It is definitely cost effective in this economy. Any comments?

Hi,

I have the same problem with that docs as you have.
One says this, another one says that.

Try this book: http://www.amazon.co.uk/Foundations-...6097503&sr=1-3

There is a step-by-step configuration for samba with ldap.
I have not done it yet 100% on my test configuration. Because I'm doing a squid virtual machine with ldap authentication, and I don't have enough time to do that.

Anyway right now I can add samba users to the ldap server but unfortunatelly they can't able to authenticate agains the samba server.
Only the root and the Administrator users able to login properly. Somewhere still an issue lies. But this setup contain many things that howtoforge does not. For example /etc/pam.d/samba file on howtoforge does not mention the ldap authentication at all. (so how will that work without it?)

I'll reinstall the whole server later cause this already has Zimbra and Directory Server too. So it is a bit messy right now.

Laz.

metallica1973 06-09-2010 10:54 AM

There is a lot of documentation but every single one is different so I am a bit weary but I will move forward. I will check out that book. thanks

tracertong 06-09-2010 11:27 AM

The problem is that Server Message Block (or CIFS as it is now called), which Samba attempts to emulate, is a badly-documented protocol. In fact it is badly documented on a truly Biblical scale (with a cast of thousands... all of them baffled).

When the EU finally wrested the CIFS specs from Microsoft, they discovered that different versions of Vista and Windows 7 didn't implement it as documented in the official spec - mostly because no one in COSD really understood how it worked, either.

So, yeah, it's that bad because the vendor, of the system it is trying to emulate, has lost track of how their version works. Signals go into it and signals come back out again, and some of those signals are so puzzling they just get sent to the Windows equivalent of the null device (called \Device\NUL, unsurprisingly).


All times are GMT -5. The time now is 09:02 AM.