Re: Samba, ldap and adding machine accounts.
[Finn-Arne Johansen]
>> - Logging a user into a host in the SMB domain
>
> You mean the last logged on entry ?
I do not know what it changes in the different situations. I just
assume that samba behaves differently in these situations. I'm trying
to describe the situations, and hoped someone with real samba
knowledge could verify or extend the list of situations.
> + When creating a user.
> wlus still uses smbpasswd to setup the samba part of the account
I didn't list this as it is done by wlus, not samba as such. We could
add support to wlus for adding windows hashes, and that would make
user creating independent of samba.
>> What attributes does it need to read and write to in LDAP and where in
>> the LDAP tree does it need to read and write during these operations?
>
> the attributes with the samba prefix.
All of them, every time?
> Dont know. But we can, if we give samba access to it, make the unix
> password change when a user changes the samba password
I would rather have it the other way around, in preparation of
Cerebrum.
> If I got time, I will try to move the machines into the
> ou=Machines,ou=People subtree
I saw on IRC that you confirmed that this worked.
> Then I will try to create the needed samba-attributes (as root), and
> only let samba update the ones it needs to update
I would like to know which attributes are modified in which
situations.
> Then I will ty to block password updates from samba.
I look forward to the results.
Reply to: