linux samba 配置ldap认证,支持openldap认证的samba的配置

Install samba ,config samba and smbldap-tools

Install samba

# rpm -ivh /mnt/cdrom/Server/samba-common-3.0.23c-2

# rpm -ivh /mnt/cdrom/Server/samba-3.0.23c-2

# rpm -ivh /mnt/cdrom/Server/samba-clients-3.0.23c-2

Config /etc/samba/smb.conf

# Global parameters

[global]

workgroup = gtsc_samba

netbios name = ldap

security = user

server string = Samba Server created by GTSC Hu Changwen

encrypt passwords = yes

ldap password sync = Yes

passwd program = /usr/sbin/smbldap-passwd -u %u

passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n"

log level = 3

syslog = 0

log file = /var/log/samba/log.%m

max log size = 100000

time server = Yes

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

Dos charset = UTF-8

Unix charset = UTF-8

logon script = logon.bat

logon drive = H:

logon home =

logon path =

domain logons = no

domain master = no

os level = 65

preferred master = no

wins support =yes

passdb backend = ldapsam:ldap://127.0.0.1/

ldap admin dn = cn=manager,dc=dne,dc=com

ldap suffix = dc=dne,dc=com

ldap group suffix = ou=Groups

ldap user suffix = ou=Users

ldap machine suffix = ou=Computers

ldap idmap suffix = ou=Idmap

add user script = /usr/sbin/smbldap-useradd -m "%u"

delete user script = /usr/sbin/smbldap-userdel "%u"

add machine script = /usr/sbin/smbldap-useradd -t 0 -w "%u"

add group script = /usr/sbin/smbl