Hello,

I’m working on a setup with backend meta, the aim of the setup is to have a 
LDAP database for our Samba 3.

We already have a LDAP but we don’t wan’t to change the schema, so I’ve build a 
LDAP server on Centos with a local database for samba (cn=samba) and I plan to 
use meta to do the merge (and the translucent to save locally new fields for 
existing users).

I’ve successfully deploy the meta backend but it work in readonly mode, I can’t 
write on it…

Here is my config, if someone can give me a clue, that would be great :-)

#######################################################################
# Samba Database
#######################################################################

database                bdb
directory               "/var/db/openldap/samba-directory"
suffix                  "cn=samba"
rootdn                  "uid=samba_root,cn=users,cn=samba"
rootpw                  {SSHA}---

access to * 
        by dn.exact="uid=samba_root,cn=users,dc=example,dc=com,dc=meta" write
        by * read

#######################################################################
# Meta Database
#######################################################################

database                meta
suffix                  "dc=example,dc=com,dc=meta"

## Main database dc=example,dc=com mapped to dc=example,dc=com,dc=meta
uri                     "ldap://192.168.2.200/dc=example,dc=com,dc=meta";
suffixmassage           "dc=example,dc=com,dc=meta" "dc=example,dc=com"

## Mapping for specific Samba node
uri                     
"ldap://127.0.0.1:1389/sambaDomainName=EXAMPLE,dc=example,dc=com,dc=meta";
suffixmassage           "sambaDomainName=EXAMPLE,dc=example,dc=com,dc=meta" 
"sambaDomainName=EXAMPLE,cn=samba"

uri                     
"ldap://127.0.0.1:1389/cn=idmap,dc=example,dc=com,dc=meta";
suffixmassage           "cn=idmap,dc=example,dc=com,dc=meta" "cn=idmap,cn=samba"

uri                     
"ldap://127.0.0.1:1389/cn=nt-computers,dc=example,dc=com,dc=meta";
suffixmassage           "cn=nt-computers,dc=example,dc=com,dc=meta" 
"cn=nt-computers,cn=samba"

access to * 
        by dn.exact="uid=samba_root,cn=users,dc=example,dc=com,dc=meta" write

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to