Groups > Novell > Identiry Manager Engine drivers > Re: Provisioning Novell Samba Users




Provisioning Novell Samba Users

Provisioning Novell Samba Users
Wed, 14 May 2008 03:56:02 GMT
Is it possible to create Samba users if we are using Novell Samba?  

I see that the Samba iManager Plug-In is adding the sambaSamAccount aux
class and is populating the attributes sambaAcctFlags,
sambaPrimaryGroupSID and the sambaSID attributes.  The UP policy
assigned I assume is all that is required for the password since that
is working.

The trick seems to be the sambaSID attribute.

Anyway, any help is appreciated!


-- 
Troy Moreland
------------------------------------------------------------------------
tbmoreland's Profile: http://forums.novell.com/member.php?userid=14837
View this thread: http://forums.novell.com/showthread.php?t=327799
Post Reply
Re: Provisioning Novell Samba Users
Wed, 14 May 2008 04:05:25 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A Samba user is just a LUM-enabled user with some extra attributes in
eDirectory.  There is a CoolSolution for LUM-enabling users already.
You could also use the NX Settings driver that is part of IDM to do at
least the LUM-enabling though in reality any Null/Loopback driver can do
this easily enough.

Good luck.





tbmoreland wrote:
| Is it possible to create Samba users if we are using Novell Samba?
|
| I see that the Samba iManager Plug-In is adding the sambaSamAccount aux
| class and is populating the attributes sambaAcctFlags,
| sambaPrimaryGroupSID and the sambaSID attributes.  The UP policy
| assigned I assume is all that is required for the password since that
| is working.
|
| The trick seems to be the sambaSID attribute.
|
| Anyway, any help is appreciated!
|
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIKmUE3s42bA80+9kRAm7QAJ4y3Jw9gXhbig24NhNxal0vUI8D0wCeNYUm
vTPycK95XZOshHfqQcpqPg0=
=zQ2+
Post Reply
Re: Provisioning Novell Samba Users
Wed, 14 May 2008 14:46:02 GMT
I know how to provision users for Linux.  I'm specifically curious about
the Samba piece.  Like I mentioned earlier, the tricky attribute appears
to be the sambaSID attribute.  Can I just put whatever value I want
there with a driver and the user will be valid to Samba?

ab@novell.com;1556751 Wrote: 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> A Samba user is just a LUM-enabled user with some extra attributes in
> eDirectory.  There is a CoolSolution for LUM-enabling users already.
> You could also use the NX Settings driver that is part of IDM to do at
> least the LUM-enabling though in reality any Null/Loopback driver can
> do
> this easily enough.
> 
> Good luck.
> 
> 
> 
> 
> 
> tbmoreland wrote:
> | Is it possible to create Samba users if we are using Novell Samba?
> |
> | I see that the Samba iManager Plug-In is adding the sambaSamAccount
> aux
> | class and is populating the attributes sambaAcctFlags,
> | sambaPrimaryGroupSID and the sambaSID attributes.  The UP policy
> | assigned I assume is all that is required for the password since
> that
> | is working.
> |
> | The trick seems to be the sambaSID attribute.
> |
> | Anyway, any help is appreciated!
> |
> |
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - 'Enigmail: A simple interface for
> OpenPGP email security' (http://enigmail.mozdev.org)
> 
> iD8DBQFIKmUE3s42bA80+9kRAm7QAJ4y3Jw9gXhbig24NhNxal0vUI8D0wCeNYUm
> vTPycK95XZOshHfqQcpqPg0=
> =zQ2+
> -----END PGP SIGNATURE-----


-- 
Troy Moreland
------------------------------------------------------------------------
tbmoreland's Profile: http://forums.novell.com/member.php?userid=14837
View this thread: http://forums.novell.com/showthread.php?t=327799
Post Reply
Re: Provisioning Novell Samba Users
Wed, 14 May 2008 14:54:23 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

As mentioned, there is one.... just not publicly-released.

Good luck.





tbmoreland wrote:
| I know how to provision users for Linux.  I'm specifically curious about
| the Samba piece.  Like I mentioned earlier, the tricky attribute appears
| to be the sambaSID attribute.  Can I just put whatever value I want
| there with a driver and the user will be valid to Samba?
|
| ab@novell.com;1556751 Wrote:
| A Samba user is just a LUM-enabled user with some extra attributes in
| eDirectory.  There is a CoolSolution for LUM-enabling users already.
| You could also use the NX Settings driver that is part of IDM to do at
| least the LUM-enabling though in reality any Null/Loopback driver can
| do
| this easily enough.
|
| Good luck.
|
|
|
|
|
| tbmoreland wrote:
| | Is it possible to create Samba users if we are using Novell Samba?
| |
| | I see that the Samba iManager Plug-In is adding the sambaSamAccount
| aux
| | class and is populating the attributes sambaAcctFlags,
| | sambaPrimaryGroupSID and the sambaSID attributes.  The UP policy
| | assigned I assume is all that is required for the password since
| that
| | is working.
| |
| | The trick seems to be the sambaSID attribute.
| |
| | Anyway, any help is appreciated!
| |
| |
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIKv0d3s42bA80+9kRAhAvAJ0WJEjVCTbjnLMg6KOe2s5N1gZ8PwCePZh4
qRSLsvZGLwoAmy/0XZC9vZ4=
=uo+k
Post Reply
Re: Provisioning Novell Samba Users
Wed, 14 May 2008 18:11:46 GMT
I THINK I remember seeing the code inside the LinuxUnix Settings driver, 
dump an example into a Designer workspace and check.  I THINK there is 
an attribute you need to get from the Server object (domainSID or 
somesuch) and then you need to append a unique RID to it, which you get 
from the object and increment?  Or am I remembering this wrong...


tbmoreland wrote:
> I know how to provision users for Linux.  I'm specifically curious about
> the Samba piece.  Like I mentioned earlier, the tricky attribute appears
> to be the sambaSID attribute.  Can I just put whatever value I want
> there with a driver and the user will be valid to Samba?
> 
> ab@novell.com;1556751 Wrote: 
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> A Samba user is just a LUM-enabled user with some extra attributes in
>> eDirectory.  There is a CoolSolution for LUM-enabling users already.
>> You could also use the NX Settings driver that is part of IDM to do at
>> least the LUM-enabling though in reality any Null/Loopback driver can
>> do
>> this easily enough.
>>
>> Good luck.
>>
>>
>>
>>
>>
>> tbmoreland wrote:
>> | Is it possible to create Samba users if we are using Novell Samba?
>> |
>> | I see that the Samba iManager Plug-In is adding the sambaSamAccount
>> aux
>> | class and is populating the attributes sambaAcctFlags,
>> | sambaPrimaryGroupSID and the sambaSID attributes.  The UP policy
>> | assigned I assume is all that is required for the password since
>> that
>> | is working.
>> |
>> | The trick seems to be the sambaSID attribute.
>> |
>> | Anyway, any help is appreciated!
>> |
>> |
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.2 (GNU/Linux)
>> Comment: Using GnuPG with Mozilla - 'Enigmail: A simple interface for
>> OpenPGP email security' (http://enigmail.mozdev.org)
>>
>> iD8DBQFIKmUE3s42bA80+9kRAm7QAJ4y3Jw9gXhbig24NhNxal0vUI8D0wCeNYUm
>> vTPycK95XZOshHfqQcpqPg0=
>> =zQ2+
>> -----END PGP SIGNATURE-----
> 
Post Reply
<< Previous 1 2 Next >>
( Page 1 of 2 )
about | contact