|
From: Jelmer V. <je...@sa...> - 2016-02-12 21:39:54
|
What you're describing is exactly what pdb is - that abstraction. pdb is only used with NT style DCs. With AD DC your only option is LDAP. Jelmer On 12 February 2016 07:21:51 GMT+00:00, "Václav Klecanda" <ven...@gm...> wrote: >I my case, SAMBA is only translator from/to obscure M$oft protocols to >linux hosted file share. So Samba even does not need to know any users, >just it has to have some facility (plugin, or even connection to >HTTP(s) >endpoint allowing leave all impl detail to any programming lang) that >can >tell to samba: "user with this ID is within this groups, login hours, >or >whatever info needed to operate". LDAP is not the only way to store >info... >:) Am i Wrong? > >On 9 February 2016 at 22:12, Jelmer Vernooij <je...@sa...> wrote: > >> On Mon, Feb 08, 2016 at 07:53:32PM +0100, Herwin Weststrate wrote: >> > On 02/07/2016 09:54 PM, Václav Klecanda wrote: >> > > Hi, I'd like to know what is the lates state of this project and >if >> > > there is still some people iterresting in it. If so, where can I >find >> > > latest docs and code? >> > >> > The code has been updated for Samba releases in the 3.x-branch. I >> > haven't really made any official releases on sourceforge, but you >can >> > always use the svn branches at >> > http://sourceforge.net/p/pdbsql/code/HEAD/tree/branches/, the name >of >> > the branch indicates the version. Docs are included in the >branches. I >> > also have a clone living at https://github.com/herwinw/pdbsql, it >> > contains a 3.6 branch that has been minimized (pdsql_36_light). >I've got >> > that one on a production server and it works. >> > >> > The SQL modules have not really changed the last years, except for >> > changes required for newer Samba versions. pdb_multi also kind of >works, >> > but the whole idea behind it is a bit tricky, I would advise >against >> > using that in production unless you're willing to give it a long >test >> run. >> > >> > Samba 4 is not supported, that has been a complete rewrite of the >core >> > and I couldn't really find where it stored the users in the four >minutes >> > I tried looking at them. I know S4 has a Python-interpreter >embedded >> > into it, so I'm hoping that instead of compiling a plugin it would >be >> > possible to just load a python script of a few lines that fetches >users >> > from a database. But since S4 also includes an LDAP server it might >be >> > worth a try to see if you could just use that LDAP to store your >users >> > instead of the database. I kind of got a liking to systems that >work out >> > of the box the last years ;) >> Samba 4 is not a rewrite of the core. passdb is still there, and >pdbsql >> should still work (module a bunch of minor API changes). >> >> However, passdb is not used if you use samba in AD DC mode - just if >> you use it as a traditional NT4-style domain controller. A thing like >> pdbsql isn't possible with the AD DC since all users are stored in >> the internal LDAP server. >> >> Cheers, >> >> Jelmer >> >> >> >------------------------------------------------------------------------------ >> Site24x7 APM Insight: Get Deep Visibility into Application >Performance >> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month >> Monitor end-to-end web transactions and take corrective actions now >> Troubleshoot faster and improve end-user experience. Signup Now! >> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 >> > > >------------------------------------------------------------------------ > >------------------------------------------------------------------------------ >Site24x7 APM Insight: Get Deep Visibility into Application Performance >APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month >Monitor end-to-end web transactions and take corrective actions now >Troubleshoot faster and improve end-user experience. Signup Now! >http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 |