4 069
contributi
Samba e OpenLDAP: creare un controller di dominio con Debian Lenny: differenze tra le versioni
Samba e OpenLDAP: creare un controller di dominio con Debian Lenny (visualizza wikitesto)
Versione delle 18:20, 28 gen 2010
, 28 gen 2010→Configurazione
| Riga 402: | Riga 402: | ||
'''/etc/smbldap-tools/smbldap.conf''': | '''/etc/smbldap-tools/smbldap.conf''': | ||
<pre> | <pre> | ||
############################################################################## | ############################################################################## | ||
## | ## | ||
| Riga 410: | Riga 407: | ||
# ############################################################################## | # ############################################################################## | ||
# Put your own SID. To obtain this number do: "net getlocalsid". | # Put your own SID. To obtain this number do: "net getlocalsid". | ||
SID="S-1-5-21-125945932-740595490-3132273231" | SID="S-1-5-21-125945932-740595490-3132273231" | ||
# Domain name the Samba server is in charged. | # Domain name the Samba server is in charged. | ||
sambaDomain="DOMINIO" | sambaDomain="DOMINIO" | ||
realm="DOMINIO.LOCAL" | |||
############################################################################## | ############################################################################## | ||
# | # | ||
| Riga 421: | Riga 419: | ||
############################################################################## | ############################################################################## | ||
# Slave LDAP server | # Slave LDAP server | ||
slaveLDAP="127.0.0.1" | slaveLDAP="127.0.0.1" | ||
# Slave LDAP port | # Slave LDAP port | ||
slavePort="389" | slavePort="389" | ||
# Master LDAP server: needed for write operations | # Master LDAP server: needed for write operations | ||
masterLDAP="127.0.0.1" | masterLDAP="127.0.0.1" | ||
# Master LDAP port | # Master LDAP port | ||
masterPort="389" | masterPort="389" | ||
# Use TLS for LDAP | # Use TLS for LDAP | ||
# If set to 1, this option will use start_tls for connection | # If set to 1, this option will use start_tls for connection | ||
ldapTLS="1" | |||
# How to verify the server's certificate (none, optional or require) | # How to verify the server's certificate (none, optional or require) | ||
verify="require" | verify="require" | ||
# CA certificate | # CA certificate | ||
cafile="/etc/ | cafile="/etc/ldap/ssl/cacert.pem" | ||
# certificate to use to connect to the ldap server | # certificate to use to connect to the ldap server | ||
clientcert="/etc/ | clientcert="/etc/ldap/ssl/servercrt.pem" | ||
# key certificate to use to connect to the ldap server | # key certificate to use to connect to the ldap server | ||
clientkey="/etc/ | clientkey="/etc/ldap/ssl/serverkey.pem" | ||
# LDAP Suffix | # LDAP Suffix | ||
suffix="dc=dominio,dc=local" | suffix="dc=dominio,dc=local" | ||
# Where are stored Users | # Where are stored Users | ||
usersdn="ou=Users,${suffix}" | usersdn="ou=Users,${suffix}" | ||
# Where are stored Computers | # Where are stored Computers | ||
computersdn="ou=Computers,${suffix}" | computersdn="ou=Computers,${suffix}" | ||
# Where are stored Groups | # Where are stored Groups | ||
groupsdn="ou=Groups,${suffix}" | groupsdn="ou=Groups,${suffix}" | ||
# Where are stored Idmap entries (used if samba is a domain member server) | # Where are stored Idmap entries (used if samba is a domain member server) | ||
idmapdn="ou=Idmap,${suffix}" | |||
# Where to store next uidNumber and gidNumber available for new users and groups | # Where to store next uidNumber and gidNumber available for new users and groups | ||
sambaUnixIdPooldn="sambaDomainName=${sambaDomain},${suffix}" | sambaUnixIdPooldn="sambaDomainName=${sambaDomain},${suffix}" | ||
# Default scope Used | # Default scope Used | ||
scope="sub" | scope="sub" | ||
# Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA, CLEARTEXT) | # Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA, CLEARTEXT) | ||
hash_encrypt="MD5" | hash_encrypt="MD5" | ||
| Riga 470: | Riga 463: | ||
# passwords if you use "$1$%.8s". This parameter is optional! | # passwords if you use "$1$%.8s". This parameter is optional! | ||
crypt_salt_format="%s" | crypt_salt_format="%s" | ||
############################################################################## | ############################################################################## | ||
# | # | ||