Re: [Freeipa-users] where to put computer accounts... ?

2016-11-24 Thread lejeczek



On 24/11/16 15:10, Simo Sorce wrote:

On Thu, 2016-11-24 at 12:59 +, lejeczek wrote:

.. in order to satisfy classic Samba (which still uses
openldap for user db backend but needs computer unix
account) which complains:
Failed to find a Unix account for yourcomp$

?

If this is on a client machine for its own computer account I would
think of adding it to the local user database, if you have to distribute
it via LDAP you'll have to create actual user accounts ion the directory
I guess.

Simo.


yes distributed, yes but where, just where all users go: 
cn=users,cn=accounts or some other container perhaps?
I don't suppose ipa host* tool would be the means to put 
these computers where "regular" hosts go?

mthx.
L

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] where to put computer accounts... ?

2016-11-24 Thread Simo Sorce
On Thu, 2016-11-24 at 12:59 +, lejeczek wrote:
> .. in order to satisfy classic Samba (which still uses 
> openldap for user db backend but needs computer unix 
> account) which complains:
> Failed to find a Unix account for yourcomp$
> 
> ?

If this is on a client machine for its own computer account I would
think of adding it to the local user database, if you have to distribute
it via LDAP you'll have to create actual user accounts ion the directory
I guess.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project