Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Gaiseric Vandal
If you have an existing LDAP structure, there will still be a separate 
field for the Windows password.


For samba 3.x,  you can specify either an local backend or an ldap 
backend.  You can not specify some attributes in ldap but not 
others. If you want to set up Samba to use LDAP backend you will 
need to have some admin privileges to on the LDAP server.


On 10/03/13 14:32, Garey wrote:

Donny Brooks  mdah.state.ms.us> writes:


Hello,

Am 03.10.2013 18:17, schrieb Garey:

I am trying to figure out if I can setup samba to verify only passwords
against LDAP and keep everything else local.

Can you be a bit more specific what you intend to do?

Regards,
Marc

I want all group and user info local on the samba server, but verify
passwords against LDAP. So the only thing LDAP is used for is verify the
password.

LDAP still will need a username to go with the password. Could you tell us

exactly why you want users local

instead of in LDAP?

Large corporate LDAP server that keeps passwords. Just want to use it for
passwords so users don't have another one to keep track of. But I need to
control the users who can access the server and local groups that set their
rights to information.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
Donny Brooks  mdah.state.ms.us> writes:

> > > Hello,
> > > 
> > > Am 03.10.2013 18:17, schrieb Garey:
> > > > I am trying to figure out if I can setup samba to verify only passwords
> > > > against LDAP and keep everything else local.
> > > 
> > > Can you be a bit more specific what you intend to do?
> > > 
> > > Regards,
> > > Marc
> > 
> > I want all group and user info local on the samba server, but verify
> > passwords against LDAP. So the only thing LDAP is used for is verify the
> > password. 
> 
> LDAP still will need a username to go with the password. Could you tell us
exactly why you want users local
> instead of in LDAP?

Large corporate LDAP server that keeps passwords. Just want to use it for
passwords so users don't have another one to keep track of. But I need to
control the users who can access the server and local groups that set their
rights to information. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Donny Brooks
 
 
 
On Thursday, October 3, 2013 12:56 PM CDT, Garey  
wrote: 
 
> Marc Muehlfeld  marc-muehlfeld.de> writes:
> 
> > Hello,
> > 
> > Am 03.10.2013 18:17, schrieb Garey:
> > > I am trying to figure out if I can setup samba to verify only passwords
> > > against LDAP and keep everything else local.
> > 
> > Can you be a bit more specific what you intend to do?
> > 
> > Regards,
> > Marc
> 
> I want all group and user info local on the samba server, but verify
> passwords against LDAP. So the only thing LDAP is used for is verify the
> password. 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
 
LDAP still will need a username to go with the password. Could you tell us 
exactly why you want users local instead of in LDAP?
-- 

Donny B. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
Marc Muehlfeld  marc-muehlfeld.de> writes:

> Hello,
> 
> Am 03.10.2013 18:17, schrieb Garey:
> > I am trying to figure out if I can setup samba to verify only passwords
> > against LDAP and keep everything else local.
> 
> Can you be a bit more specific what you intend to do?
> 
> Regards,
> Marc

I want all group and user info local on the samba server, but verify
passwords against LDAP. So the only thing LDAP is used for is verify the
password. 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Marc Muehlfeld

Hello,

Am 03.10.2013 18:17, schrieb Garey:

I am trying to figure out if I can setup samba to verify only passwords
against LDAP and keep everything else local.


Can you be a bit more specific what you intend to do?


Regards,
Marc



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
Hoover, Tony  sal.ksu.edu> writes:

> We are using pGina (pgina.org) for lab logins.  pGina is a pluggable
> authentication system, similar to PAM except for Windows.  
> 
> pGina allows us to separate the user authentication from the account
> information. User credentials are checked against LDAP, MySQL, or other
> authentication source. If credentials are correct, the computer is logged in
> with a pre-defined windows account.
> 
> Hope this helps.
> 
> Tony

That's interesting, but I would like Samba to use the LDAP server rather
than the Windows client itself. Trying to avoid install on/modifying the
windows clients. Too many of them. 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Hoover, Tony
We are using pGina (pgina.org) for lab logins.  pGina is a pluggable
authentication system, similar to PAM except for Windows.  

pGina allows us to separate the user authentication from the account
information. User credentials are checked against LDAP, MySQL, or other
authentication source. If credentials are correct, the computer is logged in
with a pre-defined windows account.

Hope this helps.

Tony


---
CONFIDENTIALITY WARNING:
Pseudo-legal disclaimers do not buy you or your employer any legal
recourse for leaked information.  E-mail messages should never contain
privileged or confidential information.  Always treat e-mail as
"public". 

 
-Original Message-
From: [email protected] [mailto:[email protected]]
On Behalf Of Garey
Sent: Thursday, October 03, 2013 11:18 AM
To: [email protected]
Subject: [Samba] Use LDAP for passwords ONLY

I am trying to figure out if I can setup samba to verify only passwords
against LDAP and keep everything else local. 

Anyone know how to set this up? 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba