Samba3 PDC with LDAP Auth 設定檔配置

這個版面主要討論 debian 在 server 端的應用問題, server 種類繁多..舉凡 Web Server 、 File Server、 DHCP Server..等等。

版主: 阿信

Samba3 PDC with LDAP Auth 設定檔配置

文章chuany » 週一 11月 03, 2003 2:05 pm

在這裡將 Samba3-Howto 中, 關於 Samba3 要使用 OpenLDAP 來當認證平台該如何設定, 做一個紀錄:

slapd.conf
代碼: 選擇全部
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/samba.schema

schemacheck     on

pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args

password-hash   {CRYPT}
lastmod         on
loglevel        256
database        ldbm
suffix          "dc=samba3,dc=com,dc=tw"
rootdn          "cn=Manager,dc=samba3,dc=com,dc=tw"
rootpw          {CRYPT}dksdljf33dlsWER
directory       /var/lib/ldap

index   objectClass     eq
index   cn              pres,sub,eq
index   sn              pres,sub,eq
index   uid             pres,sub,eq
index   displayName     pres,sub,eq
index   sambaSID        eq
index   sambaPrimaryGroupSID    eq
index   sambaDomainName         eq
index   default         sub

access  to attrs=sambaLMPassword,sambaNTPassword
        by dn="cn=admin,ou=People,dc=samba3,dc=com,dc=tw" write
        by * none


smb.conf
代碼: 選擇全部
[global]
         netbios name = samba3
         workgroup = sambagroup
         security = user
         log file = /var/log/samba.log
         log level = 1
         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=81
92
         wins support = yes
         domain logons = yes
         logon drive = p:
         logon home = \\samba3\%U
         os level = 99
         preferred master = yes
         encrypt passwords = yes
       
         ldap admin dn = "cn=Manager,dc=samba3,dc=com,dc=tw"
         ldap ssl = off
         passdb backend = ldapsam:ldap://samba3.com.tw
         ldap delete dn = no
         ldap user suffix = ou=People,dc=samba3,dc=com,dc=tw
         ldap group suffix = ou=Group,dc=samba3,dc=com,dc=tw
         ldap machine suffix = ou=Computers,dc=samba3,dc=com,dc=tw
         ldap suffix = ou=People,dc=samba3,dc=com,dc=tw

[pub]    path = /share/pub
         guest ok = yes
         writeable = yes
         create mode = 0666
         directory mode = 0777

[private]
         path = /share/private
         create mode = 0660
         directory mode = 0770
         read only = no
         guest ok = no

[homes]
         read only = no
         create mode = 0600
         directory mode = 0700
         guest ok = no

[netlogon]
         path = /share/netlogon
         read only = yes
         guest ok = yes

[profiles]
         path = /share/profiles
         read only = no
         create mask = 0600
         directory mask = 0700


BaseDN + Manager LDIF
代碼: 選擇全部
dn: dc=samba3,dc=com,dc=tw
objectClass: dcObject
objectClass: organization
dc: samba3
description: Samba-3 Network LDAP Example
o: Samba-3 BaseDN

dn: cn=Manager,dc=samba3,dc=com,dc=tw
objectClass: organizationalRole
cn: Manager
description: Directory Manager


People + admin People LDIF
代碼: 選擇全部
dn: ou=People,dc=samba3,dc=com,dc=tw
objectClass: top
objectClass: organizationalUnit
ou: People

dn: cn=admin,ou=People,dc=samba3,dc=com,dc=tw
objectClass: top
objectClass: organizationalRole
objectClass: simpleSecurityObject
cn: admin
userPassword:


Groups + admin Group LDIF
代碼: 選擇全部
dn: ou=Groups,dc=samba3,dc=com,dc=tw
objectClass: top
objectClass: organizationalUnit
ou: People

dn: cn=admin,ou=Groups,dc=samba3,dc=com,dc=tw
objectClass: top
objectClass: organizationalRole
objectClass: simpleSecurityObject
cn: admin
userPassword:


Computers + admin Computers LDIF
代碼: 選擇全部
dn: ou=Computers,dc=samba3,dc=com,dc=tw
objectClass: top
objectClass: organizationalUnit
ou: People

dn: cn=admin,ou=Computers,dc=samba3,dc=com,dc=tw
objectClass: top
objectClass: organizationalRole
objectClass: simpleSecurityObject
cn: admin
userPassword:
:wq chuany
chuany
摩托學園!學園長們
摩托學園!學園長們
 
文章: 268
註冊時間: 週二 9月 03, 2002 5:37 am
來自: chuany.net

re:Samba3 PDC with LDAP Auth 設定檔配置

文章chuany » 週五 11月 21, 2003 6:01 am

這裡有相當不錯的參考資料
http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html
:wq chuany
chuany
摩托學園!學園長們
摩托學園!學園長們
 
文章: 268
註冊時間: 週二 9月 03, 2002 5:37 am
來自: chuany.net


回到 debian server

誰在線上

正在瀏覽這個版面的使用者:沒有註冊會員 和 1 位訪客