Hello !
I trying sync ldap users with users samba.
I´m using a interface, by create ldap users.
So, when ldap user be created, i want account e password samba be created.
No my smb.conf I put the follow
lines:
ldap admin dn = cn=admin,dc=def,dc=mg,dc=gov,dc=br
ldap group suffix = ou = groups
ldap machine suffix = ou = computers
ldap passwd sync = yes
encrypt passwords = Yes
ldap suffix = dc=def,dc=mg,dc=gov,dc=br
ldap ssl = no
ldap user suffix = ou = defensory
smb ports = 445 139
add user script = /usr/sbin/smbldap-useradd -a -m "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to
group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
passwd program = /usr/sbin/smbldap-passwd -s "%u"
passdb backend = ldapsam:ldap://10.65.8.95
passdb backend = tdbsam
hosts allow = 127.0.0.1, 10.65.8.0/255.255.252.0
pam password change = yes
passwd program = /usr/bin/passwd %u
I configure in sladp.conf:
include /etc/ldap/schema/ppolicy.schema
moduleload ppolicy.so
overlay ppolicy
access to attrs=userPassword,shadowLastChange,sambaPwdMustChange,sambaLMPassword,sambaPwdLastSet,sambaNTPassword
by
dn="cn=admin,dc=def,dc=mg,dc=gov,dc=br" write
by anonymous auth
by self write
by * none
The user ldap is done, but samba user is not created.
See some logs:
Jan 18 16:09:01 defensoria slapd[6210]: conn=2455 fd=50 ACCEPT from IP=10.65.8.95:54507 (IP=0.0.0.0:389)
So its bad.
root@replica:/etc/ldap# smbclient -L 10.65.8.95 -U xbox
Enter xbox's
password:
session setup failed: NT_STATUS_LOGON_FAILURE
Thanks !
Rodrigo Faria Tavares