Setting Up CIFS Server (Samba) In an LDAP Environment

Setting Up CIFS Server (Samba) in an LDAP Environment
9
-will extend the schema on this server for the posixAccount objectclass and attributes
necessary to store all of your info, like passwd,group,hosts,services, etc…
-will cause your base dn for user and group searches to be your suffix.
-will start your ldapux client daemon.
NOTE: at this point the ldapux daemon is running, but no one is using it yet – your pam.conf
file will have to be changed (see /etc/pam.conf.ldap as an example) and your nsswitch.conf
will also have to be updated to use ldap.
Don’t do this yet!
Migrate all your data stores to the Netscape directory
server:
cd /opt/ldapux/migrate
./migrate_all_online.sh
EXAMPLE migration session:
Enter the X.500 naming context you wish to import into: [] dc=alf,dc=cpqcorp,dc=net
Enter the name of your LDAP server [ldap]: rkm-nt.alf.cpqcorp,net
Enter the manager DN: [cn=manager,o=hp.com]:
uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot
Enter the credentials to bind with: <enter password you set for admin user when you installed
Netscape Directory Server>
Importing into dc=alf,dc=cpqcorp,dc=net...
Creating naming context entries...
Migrating aliases...
Migrating groups...
Migrating hosts...
Migrating networks...
Migrating users...
Migrating protocols...
Migrating rpcs...
Migrating services...
Migrating netgroups...
Migrating netgroups (by user)...
Migrating netgroups (by host)...
Your data has been migrated to the following ldif file: /tmp/nis.1942.ldif
Do you wish to import that file into your directory now (y/n): y
NOTE: At this point you have an ldap server with everything you would need to use as a
backing store for pam and nsswitch. You need this first, as CIFS Server is going to share
some attributes from the posixAccount objectclass with the sambaAccount objectclass that
we are going to extend the schema with in the next steps.
Set nsswitch.conf to use ldap as a store:
(back up you current nsswitch.conf file first, if you have one!)
cp /etc/nsswitch.ldap /etc/nsswitch.conf