![如何配置 samba 以使用 ladp attr“userPassword”密码,或者配置 ldap 当 attr“userPassword”改变时“sambaNTPassword”也会改变?](https://linux22.com/image/671425/%E5%A6%82%E4%BD%95%E9%85%8D%E7%BD%AE%20samba%20%E4%BB%A5%E4%BD%BF%E7%94%A8%20ladp%20attr%E2%80%9CuserPassword%E2%80%9D%E5%AF%86%E7%A0%81%EF%BC%8C%E6%88%96%E8%80%85%E9%85%8D%E7%BD%AE%20ldap%20%E5%BD%93%20attr%E2%80%9CuserPassword%E2%80%9D%E6%94%B9%E5%8F%98%E6%97%B6%E2%80%9CsambaNTPassword%E2%80%9D%E4%B9%9F%E4%BC%9A%E6%94%B9%E5%8F%98%EF%BC%9F.png)
我安装了samba-4.1.12-24.el7_1.x86_64和openldap-2.4.39-7.el7.centos.x86_64和自助密码为 ladp 用户更改密码。
我注意到自助密码将改变 ldap 属性用户密码的价值。
配置完 smaba 后,我现在可以从我的 Windows PC 登录到\文件服务器\共享帐户在 ldap 中存在成功。
但看起来 samba 会使用sambaNT密码作为用户密码所以,我的问题是: 1. 是否可以使用 ldap attr 配置 samba用户密码2. 如果问题 1 的答案为否,当用户更改 ldap 属性时有什么方法用户密码从自助密码, 然后sambaNT密码也会改变吗?
ldap 中的用户信息之一是:
dn: uid=test,ou=people,dc=example,dc=com
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
ou: people
cn: test
sn: test
uid: test
userPassword: {SHA}fEqNCco3Yq9h5ZUglD3CZJT4lBs=
mail: [email protected]
sambaSID: S-1-5-21-2877438406-135960529-4133751732-1102
sambaNTPassword: 9b33b03590e779419a0a162519590025
sambaPwdLastSet: 1447826752
uidNumber: 1102
homeDirectory: /home/test
sambaPrimaryGroupSID: S-1-5-21-2877438406-135960529-4133751732-5000
gidNumber: 5000
samba配置:
testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[printers]"
Processing section "[shared]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
workgroup = DY-FILESERVER
netbios name = SMBSERVER
server string = Samba Server Version %v
passdb backend = ldapsam:ldap://localhost
log file = /var/log/samba/log.%m
max log size = 50
ldap admin dn = cn=root,dc=example,dc=com
ldap suffix = dc=example,dc=com
ldap user suffix = ou=people
idmap config * : backend = tdb
cups options = raw
[homes]
comment = Home Directories
read only = No
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
print ok = Yes
browseable = No
[shared]
comment = shared dir for ldap users
path = /opt/ftpdata
writable = yes
read only = No
答案1
抱歉,我没有读过完整的文档自助密码,也可以配置为改变
$samba_mode = true;
经过此配置后,自助密码将更改两个属性 userPassword sambaNTpassword