Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-10 Thread Adam Tauno Williams
On Wed, 2010-03-10 at 08:38 +0100, Götz Reinicke - IT-Koordinator wrote: Adam Tauno Williams schrieb: On Mon, 2010-03-08 at 11:04 -0500, Gaiseric Vandal wrote: But in terms of an address book, if someone has an LDAP address book client (e.g. thunderbird) you can't prevent them from trying

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-10 Thread Götz Reinicke - IT-Koordinator
Adam Tauno Williams schrieb: ... Aside: Although in the end I think you'll find LDAP makes a very crappy addressbook soluton. Why that? For us e.g the purpose of the addressbook is to have name and e-mail-address available; postal Address, phonenumber etc should not be in our directory.

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-09 Thread Adam Tauno Williams
On Mon, 2010-03-08 at 11:04 -0500, Gaiseric Vandal wrote: smb.conf will list where samba searches in ldap. ldap suffix=o=abc.com ldap user suffix=ou=employees,ou=people ldap group suffix = ou=groups ldap machine suffix=ou=machines,ou=people I think the main challenge will be configuring

[Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Götz Reinicke - IT-Koordinator
Hi, recently I started to evaluate and think about setting up a central LDAP system for authentification and phonebook. I'm also new to LDAP. There is a lot of doc and well documented how tos, and I came across the following question: Where is the search scope for samba defiend? Or is the LDAP

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Gaiseric Vandal
smb.conf will list where samba searches in ldap. e.g. ldap suffix=o=abc.com ldap user suffix=ou=employees,ou=people ldap group suffix = ou=groups ldap machine suffix=ou=machines,ou=people I think the main challenge will be configuring access control lists. If you have a server you only

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Brother Railgun of Reason
On Mon, Mar 08, 2010 at 11:04:42AM -0500, Gaiseric Vandal wrote: But in terms of an address book, if someone has an LDAP address book client (e.g. thunderbird) you can't prevent them from trying to recursively query ou=people,) vs ou=students.You can advise end users whether they

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Götz Reinicke - IT-Koordinator
Hi, the ACLs are indeed one of the importent topics. Therefore I was hoping, that samba searches sub-trees for the login and auth information. Than I could set up LDAP ACLs so samba looks up all information in the tree for all groups (we do have only one fileserver for all user groups togehter)