Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-28 Thread Andrew Bartlett
On Thu, 2012-05-24 at 16:25 -0400, aurfalien wrote: Hi all, I am using OpenLDAP and over have ~800 users in its DB. If you have sambaNTPassword values and have Samba connected to it as it's passdb backend, you can extract it using pdbedit -w. Otherwise (unless you stored cleartext), it is

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread Collen
Hi, why not export with pdbedit and then import it again ?! no converting needed... (except for smb.conf that is.) cheers. On 25-5-2012 0:01, Gaiseric Vandal wrote: Just what is in the documentation on samba.org. Anything involving plain-text authentication seems to be discouraged. On

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread aurfalien
Now thats brilliant, elegant and simple. Thanks Collen, looking forward to trying it. - aurf On May 25, 2012, at 2:31 AM, Collen wrote: Hi, why not export with pdbedit and then import it again ?! no converting needed... (except for smb.conf that is.) cheers. On 25-5-2012 0:01,

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread Gaiseric Vandal
pbdedit will export the Windows password from the SambaNTPassword field (won't it?) My understanding was the pGina was using the unix password in the userPassword field?Or am I wrong? On 05/25/12 09:36, aurfalien wrote: Now thats brilliant, elegant and simple. Thanks Collen, looking

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread aurfalien
I am using pGina for authing, correct. But when I map drive shares, I'll need some kind of authing mechanism. My desire was this; Since I already auth the user during there pGina login to Windows, I did not want to auth again for drive mapping to a Samba server. But... since this SSO doesn't

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread aurfalien
I would also like to add that since Samba and in effect Windows does not behave like Nix with regards to who you are and what you are trying to do, looks like I will have to integrate PDC functionality into my LDAP server :( Man, this easily quadruples my over all LDAP database, gross. But at

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread Gaiseric Vandal
I understand what you are trying to accomplish. However I do not know which LDAP field is used for the pGina password- I believe it is userPassword but I am not sure. If seems to me you have three options 1. Crack the unix passwords so you can create matching windows passwords. 2. Configure

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-24 Thread Gaiseric Vandal
Presumably with the PGINA/LDAP solution, the has method is something unix-compatible (e.g. unix crypt+md5, or SSHA) that is hard to break with a password cracking program? Are the LDAP transmissions done in the clear? If so, you could sniff the traffic and capture the passwords. (You may

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-24 Thread aurfalien
Hi Gaiseric, I tried w/o success in configuring Samba + PAM last night. Do you know now of any documentation that would help? - aurf On May 24, 2012, at 5:35 PM, Gaiseric Vandal wrote: Presumably with the PGINA/LDAP solution, the has method is something unix-compatible (e.g. unix

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-24 Thread Gaiseric Vandal
Just what is in the documentation on samba.org. Anything involving plain-text authentication seems to be discouraged. On 05/24/12 17:56, aurfalien wrote: Hi Gaiseric, I tried w/o success in configuring Samba + PAM last night. Do you know now of any documentation that would help? - aurf