Samba PDC with LDAP backend

[Ruel Luchavez]

On Mon, Jul 20, 2009 at 4:04 PM, Johan Hendriks <Johan at double-l.nl> wrote:

> >> On Sat, Jul 18, 2009 at 12:53:40PM +0800, Ruel Luchavez typed:
> >> > On Sat, Jul 18, 2009 at 11:43 AM, Olivier Nicole <on at cs.ait.ac.th>
> >> wrote:
> >> >
> >> > >
> >> > > > Still it does not start the LDAP, hers my /etc/rc.conf:
> >> > > >
> >> > > >         slapd_flags='-h
> "ldapi://%2fvar%2frun%2fopenldap%2fldapi/
> >> > > ldaps://
> >> > > > / ldap://127.0.0.1/"'
> >>
> >> You try to start slapd with ssl/tls support (ldaps), but I didn't see
> any
> >> TLS parameters in the slapd.conf file you posted.
> >>
> >> Ruben
> >>
> >>
> >Hey Ruben,
>
> >Is it necessary to have ssl/tls support?
>
> >My goal is to build a Samba PDC on FreeBSD with a ldap backend. This
> will
> >not authenticate ssh users just a plain samba server for our windows
> >clients.
>
>
> >More ideas are very WELCOME...
>
>
> >Thanks.....:-)
> >--
> >Rhuel
> >FreeBSD user since 6.0
> >Happy BSD use...
> >Country:Philippines
> >Zip Code:8000
>
> You do not need to add ssl/tls it is some extra security.
> But First try to make sure the ldap server start.
> 192.168.5.0 is nota n ipadres but a network, i do not know fors ure but
> i thougt it need an ipadres like 192.168.5.1
>
> But try this one First and look i fit starts.
> slapd_flags='-h \"ldapi://%2fvar%2frun%2fopenldap%2fldapi/
> ldap://0.0.0.0/ ldap://127.0.0.1/\"'
>
> It will listen on all your ip's available on your system.
>
> If it does still not start then look at the configuration of your
> slapd.conf file
>
> Regards,
> Johan Hendriks
> (Sylhouette)
>
>
>
>
> No virus found in this outgoing message.
> Checked by AVG - www.avg.com
> Version: 8.5.392 / Virus Database: 270.13.20/2249 - Release Date:
> 07/19/09 17:59:00
>

Hey Mr. Johan (Sylhoutte)

Thanks for your reply, are you the author of this link? because I posted a
reply on your comment their

http://forums.freebsd.org/showthread.php?t=770&page=2

But anyway..Thanks for your time!!! Back to my problem

I know this is running
 >>slapd_flags='-h \"ldapi://%2fvar%2frun%2fopenldap%2fldapi/
ldap://0.0.0.0/ ldap://127.0.0.1/\"'

as is issue a command ps -aux | grep slap, hers whats the box give to me
#ps -aux | grep slap
ldap   1273  0.0  6.6 341992  7816  ??  Is    4:17PM   0:00.14
/usr/local/libexec/slapd -h ldapi://%2fvar%2frun%2fopenldap%2fldapi/
ldaps://127.0.0.1/ ldap://192.168.5.200/ -u l

Does it means it is running OR not?

and her's my slapd.conf

include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema
include         /usr/local/etc/openldap/schema/samba.schema

loglevel 256

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

#Additional config
#access to attrs=userpPassword
#       by dn="uid=root,ou=People,dc=mydomain,dc=local" write
#       by dn="cn=Manager,dc=mydomain,dc=local" write
#       by anonymoud auth
#       by self write
#       by * none
#access to dn.base=""by * read
#access to *
#       by dn="cn=Manager,dc=mydomain,dc=local" write
#       by * read

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
moduleload      back_bdb

#######################################################################
# BDB database definitions
#######################################################################

database        bdb
suffix          "dc=mydomain,dc=local"
rootdn          "cn=Manager,dc=mydomain,dc=local"
#rootpw = very-secure-password
rootpw          secret

directory       /usr/local/var/db/openldap-data

# Indices to maintain

index   objectClass     eq
index   cn              pres,sub,eq
index   sn              pres,sub,eq
index   uid             pres,sub,eq
index   displayName     pres,sub,eq
index   uidNumber               eq
index   gidNumber               eq
index   memberUID               eq
index   sambaSID                eq
index   sambaPrimaryGroupSID    eq
index   sambaDomainName         eq
index   default                 sub


Hoping you have more ideas on this...

Thanks for your immediate reply..
-- 

rHueL
FreeBSD user since 6.0
Happy BSD use...
Country:Philippines
Zip Code:8000