hello,

current samba (3.0.25b) on centos4.6, and ldap running on top of centos5.1.

whenever a user change password from his/her windows pc, only the
samba password is updated. the posix password is not, and in fact,
when logging in to the linux shell, the user must use the same 'old'
password.

using smbldap-passwd commandline tool from root and user account, both
passwords were updated.

before i migrated the ldap from old gentoo box to centos, i have my
samba and posix passwrods synchronization workfing just fine when
changing the password from windows.

here is my relevant smb.conf:

...
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        passdb backend = ldapsam:ldap://dir-a.core.domain.com
        add user script = /etc/samba/smbldap-useraddq.sh "%u"
        add machine script = /usr/sbin/smbldap-useradd -w "%u"
        delete user script = /usr/sbin/smbldap-userdel "%u"
        add group script = /usr/sbin/smbldap-groupadd -p "%g"
        delete group script = /usr/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
        ldap admin dn = cn=Manager,dc=domain,dc=com
        ldap group suffix = ou=Groups
        ldap machine suffix = ou=Computers
        ldap idmap suffix = ou=Idmap
        ldap passwd sync = Yes
        ldap suffix = dc=prg,dc=esm
        ldap user suffix = ou=Users
        ldap delete dn = Yes
        ldap ssl = start_tls
        ldapsam:trusted = Yes
...

i also tried packages found here
http://ftp.sernet.de/pub/samba/tested/rhel/4/. same problem.

do you think i have problem with my ldap server? any tips?

thanks.

--edel
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph

Reply via email to