[K12OSN] Re: SMBLDAP script with Fedora Core 4? (John Baillie)
cliebow at downeast.net
cliebow at downeast.net
Fri Jul 8 23:31:20 UTC 2005
email wont send the big file..any other way i can ship it to you??> Chuck,
>
> I will gladly take you up on that offer to see the script. As for
> browsing the database, phpldapadmin does this quite well, though
> creating objects is a different story (at least for the couple I
> tried). Easier to use the smbldap-useradd script to get the right
> settings.
>
> Dave ...
>
> cliebow at downeast.net wrote:
>
> >can you ue ldapbrowser to easily look at the structure..if you can read
> >bash i can send you my xcript which methodically goes thru creation of each
> >file...nowhere near as elegant as Matt's but might help to
understand...chuck\
> >
> >
> >>Thanks for straightening out that issue.
> >>
> >>Ldap appears to be working as far as Matt's scripts bulk adding users.
> >>Apparently, part of my problem is that smbldap-populate didn't finish
> >>correctly. Then there is whole issue with getting all the passwords set
> >>correctly in the various places. But the other issue is that it turns
> >>out that both the latest versions of webmin and phpldapadmin do not work
> >>correctly with the Samba 3 schema that is included in the fc4 release
> >>(or updated with yum udpate). Rerunning smbldap-populate and reverting
> >>to phpldapadmin-0.9.5 lets me look at and manipulate the database.
> >>Also, while Matts bulk add scripts now work as correctly, I am not sure
> >>what the fields are at this point. Can I specify the uidNumber like you
> >>can also specify the gidNumber?
> >>
> >>If I find time, I will try a clean install to make sure I know what was
> >>going on, but for now ... it seems to work.
> >>
> >>As I always think give me a generally healthy tree and I will always
> >>find a way to climb out on the one rotten branch.
> >>
> >>Sincerely,
> >>Dave Hopkins
> >>
> >>
> >>
> >>cliebow at downeast.net wrote:
> >>
> >>
> >>
> >>>/etc/ldap.conf governs the client side of
ldap.../etc/openldap/ldap.conf is
> >>>part of the server side..
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>>Matt Oquist wrote:
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>>Date: Thu, 07 Jul 2005 19:31:40 -0400
> >>>>>>From: John Baillie <jbaillie at stmarys-school.org>
> >>>>>>Subject: Re: [K12OSN] SMBLDAP script with Fedora Core 4?
> >>>>>>
> >>>>>>Just curious, why not deploy on FC3 (which has already proved it's
self)
> >>>>>>on existing known good hardware?
> >>>>>>
> >>>>>>John
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>That's definitely what I would recommend. In general it's a much
> >>>>>better idea to stick with tried-and-true solutions in high-pressure
> >>>>>situations. Who's to say that even if you get Samba/LDAP working the
> >>>>>next problem won't be just as vexing?
> >>>>>
> >>>>>One of the beautiful things about FOSS is that you have control over
> >>>>>your own upgrade cycle; nobody can force you to upgrade (unless you
> >>>>>have support contracts). I understand the appeal of wanting to run
> >>>>>the newest stuff, especially since you will have other FC4/K12LTSP4.4
> >>>>>servers later and you'd like this one to match them. But it's not
> >>>>>worth the pain you're experiencing, IMO.
> >>>>>
> >>>>>Anyhow, I'm d/ling FC4 right now, but I won't get to testing it before
> >>>>>tonight, and in any case I'll only be testing the 32-bit version.
> >>>>>
> >>>>>--matt
> >>>>>
> >>>>>
> >>>>>------------------------------------------------------------------------
> >>>>>
> >>>>>_______________________________________________
> >>>>>K12OSN mailing list
> >>>>>K12OSN at redhat.com
> >>>>>https://www.redhat.com/mailman/listinfo/k12osn
> >>>>>For more info see <http://www.k12os.org>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>Currently, it is very close to working. The entire issue right now is
> >>>>one of authentication and what needs to be where in what files. Which
> >>>>leads to one confusing question. There are two ldap.conf files that get
> >>>>set up, one is in /etc , the other is in /etc/openldap. Both have been
> >>>>modified, but which one is essential? At present, I can browse the ldap
> >>>>directory with either phpldapadmin or webmin, or use ldapsearch, but ...
> >>>>can't add anything to it because of some credential issues. This is so
> >>>>very close to working.
> >>>>
> >>>>As for moving to FC4 instead of FC3. I understand your position
> >>>>perfectly. In fact, I originally had fc3 (64bit) installed, and was
> >>>>still seeing issues, so I decided to just accept the penalty and move to
> >>>>fc4. Also, I do this as a volunteer for the school, and they are happy
> >>>>to be 'bleeding' edge on some of these things since it has worked very
> >>>>well for the last 4 years and I have the time, most days. Finally,
> >>>>there are some new features in the latest version of webmin that remove
> >>>>the crisis issue for me in terms of user creation/modification. The
> >>>>school is fully operational with the current hardware/software setup (I
> >>>>have RH9 K12LTSP servers) so ... I try and sort this out. I just hope
> >>>>that the members of the list can tolerate my rantings as I slowly learn
> >>>>what is needed to make this work.
> >>>>
> >>>>Thanks!!!! It is really, really appreciated.
> >>>>
> >>>>Dave Hopkins
> >>>>
> >>>>_______________________________________________
> >>>>K12OSN mailing list
> >>>>K12OSN at redhat.com
> >>>>https://www.redhat.com/mailman/listinfo/k12osn
> >>>>For more info see <http://www.k12os.org>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>---------------------------------------------
> >>>This message was sent from Downeast.Net.
> >>>http://ellsworthme.com/
> >>>
> >>>
> >>>_______________________________________________
> >>>K12OSN mailing list
> >>>K12OSN at redhat.com
> >>>https://www.redhat.com/mailman/listinfo/k12osn
> >>>For more info see <http://www.k12os.org>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>_______________________________________________
> >>K12OSN mailing list
> >>K12OSN at redhat.com
> >>https://www.redhat.com/mailman/listinfo/k12osn
> >>For more info see <http://www.k12os.org>
> >>
> >>
> >>
> >
> >
> >---------------------------------------------
> >This message was sent from Downeast.Net.
> >http://ellsworthme.com/
> >
> >
> >_______________________________________________
> >K12OSN mailing list
> >K12OSN at redhat.com
> >https://www.redhat.com/mailman/listinfo/k12osn
> >For more info see <http://www.k12os.org>
> >
> >
> >
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>
---------------------------------------------
This message was sent from Downeast.Net.
http://ellsworthme.com/
More information about the K12OSN
mailing list