Darren,

> I am wanting to have the *** new *** Samba server authenticate against
> an LDAP server on a different image?  Is that possible or should I have
> both services (ldap, samba) on the same linux image?

This is a tricky setup, but SLES9 makes it easier with OpenLDAP and yast
modules. First a disclaimer - I don't have this setup in production, I
just have hacked around with it to understand it.

I would guess it would be better to have your Samba server separate from
your OpenLDAP server. If you do a default SLES9 install, then OpenLDAP is
installed and configured.  If you then add users or groups throught yast,
they should go into LDAP and not into /etc/passwd, /etc/group.  You should
be able to logon to that server using an LDAP user/password.

Then install another SLES9 but choose "skip configuration" on the LDAP and
CA management screen.  Rather, point the LDAP client to the first LDAP
server on the screen that follows.  Now you should be able to logon to the
second server with the user ID/password defined on the first.

Then configure Samba to use LDAP. The yast modules are very helpful here -
trying to do this manually via smb.conf and ldap.conf is fraught with
error.  I spoke about this at the most recent SHARE.  There are
presentations on http://linuxvm.org/present/ under SHARE 104 - session
numbers 9207 and 9206.  When you have configured that, you should be able
to get Samba shares with both local users and LDAP users.

"Mike MacIsaac" <[EMAIL PROTECTED]>   (845) 433-7061

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to