[ale] ldap and Samba

[hbbs at comcast.net]

It's indeed lengthy, but what you probably care about the most is in Chapter 5.

You're butting up against the limits of my understanding, but it sounds as though in the scenario you describe, there does not have to be a Windows security domain at all as long as Win2K3 can authenticate users via LDAP on its own.  If so, you would have Win2K3, Samba, *and* Linux all three authenticating users via LDAP.  My inclination, though - and I'm going to be doing much the same thing here shortly - would be to center Linux and Samba around LDAP and hang Windows domains off of Samba, i.e., use a Samba PDC.  

- Jeff

 -------------- Original message ----------------------
From: Geoffrey <lists at serioustechnology.com>
> hbbs at comcast.net wrote:
> > It's covered quite solidly in
> > http://www.samba.org/samba/docs/Samba3-ByExample.pdf.  It's been a
> > fixture on one of my KDE screens for at least a couple of weeks.
> 
> Ouch, quite a lengthy document.  So a couple of quick questions if you 
> don't mind.  Here is what we are trying to accomplish:
> 
> We will have a Samba server that a Windows 2003 server will access 
> shares for users.  We want users logging into the windows server via 
> rdesktop to authenticate via ldap.  Access to the Samba server should 
> authenticate via ldap as well.  Bottom line, single sign in for all 
> services.
> 
> Also, is it possible to do this without making the Samba server a PDC?
> 
> Thanks for any insight..
> 
> > 
> > - Jeff
> > 
> > 
> > -------------- Original message ---------------------- From: Geoffrey
> > <lists at serioustechnology.com>
> >> Hey folks, I'm looking for pointers on ldap authentication for a
> >> Samba server.  Anyone done this?
> >> 
> >> -- Until later, Geoffrey
> >> 
> >> Those who would give up essential Liberty, to purchase a little 
> >> temporary Safety, deserve neither Liberty nor Safety. - Benjamin
> >> Franklin _______________________________________________ Ale
> >> mailing list Ale at ale.org http://mail.ale.org/mailman/listinfo/ale
> > 
> > _______________________________________________ Ale mailing list 
> > Ale at ale.org http://mail.ale.org/mailman/listinfo/ale
> > 
> 
> 
> -- 
> Until later, Geoffrey
> 
> Those who would give up essential Liberty, to purchase a little
> temporary Safety, deserve neither Liberty nor Safety.
>   - Benjamin Franklin
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale