Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Feb 2005 16:01:32 +0100 (CET)
From:      Joerg Pulz <Joerg.Pulz@frm2.tum.de>
To:        Bob Hall <rjhjr@cox.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: samba ldap
Message-ID:  <20050228155237.J14200@hades.admin.frm2>
In-Reply-To: <20050228142545.GA29039@kongemord.krig.net>
References:  <iclbhy.5pe8jc@webmail.tuwien.ac.at> <20050228081224.Y14200@hades.admin.frm2> <20050228142545.GA29039@kongemord.krig.net>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 28 Feb 2005, Bob Hall wrote:

> On Mon, Feb 28, 2005 at 11:56:49AM +0100, Florian Hengstberger wrote:
>> Disabled by default? Sorry, but I've never specified any
>> ldap options in my smb.conf but the server always tries
>> to authentificate the users with an ldap server.
>
> With or without LDAP compiled in, Samba shouldn't be asking for LDAP
> unless you specified it in smb.conf. Look in smb.conf and post the
> "passdb backend" setting.
>
> I played with LDAP for a while, so I have
> 	;   passdb backend = ldapsam
> The semicolon makes the line inactive. My installation uses tdbsam by
> default.

Hi,

this is completely true for net/samba3. but as he's using net/samba which 
is currently samba-2.2.12 this is wrong. in the samba-2.2.xx series the 
ldapsam backend is a compile time option, so you can either have tdbsam OR 
smbpasswd OR ldapsam. this behavior was changed when switching over to 
samba-3.x where one can specify a different passdb backend in the smb.conf 
file if it was built. this offers the possibility to build a "passdb 
backend chain".

anyway, please make sure that the /etc/make.conf ! not smb.conf file 
contains NO WITH_LDAP=yes line and recompile net/samba WITHOUT specifying 
WITH_LDAP=yes on the command line.
the resulting smbd should not be linked against libldap or liblber.
if it is still linked against these two lib's there must be something 
wrong in the port.

regards
Joerg

- -- 
The beginning is the most important part of the work.
 				-Plato
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCIzJOSPOsGF+KA+MRAsrHAKCg1l5J0840dWvvBvnRe+RDQjMwgwCeKUSa
NyLHxI2FXw2hypJjKAs0EHc=
=iIUf
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050228155237.J14200>