TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)?

I'm currently trying to move away from GOsa as our LDAP management tool. (Also I'm changing cyrus to dovecot, but that's taken care of.) I want to get away from solutions like GOsa, because it was hard for us to enhance their software for our need while staying up to date with their code. Also the project had the latest release in 2012. I would like to edit our users with general purpose ldap interfaces like Apache Directory Studio or similar.

Since we use the directory also for storing our samba accounts, I realized that GOsa did more in that department than I thought. I don't want to manually generate the different samba password hashes (sambaLMPassword, sambaNTPassword) and the non human readable fields (sambaPwdLastSet, sambaMungedDial) myself. Also managing the ids could be something that the tool should do. Is there any way between tools like GOsa and LAM and the complete manual approach? Or do I have to use smbldap-tools on the console and edit the rest in ADS? :/


Edit: samba 4, but in classic mode

  • samba version? If it's samba => 4 in ADS mode then you can use the windows native tools (dsa.msc, dsadd, dsmod, I guess in powershelll as well). – natxo asenjo Apr 14 '16 at 18:08
  • Thank for your answer. But that would be the same as using the smbldap-tools, wouldn't it? That would mean two different tools for samba and the rest. But it is in classic mode though. – Jakob Lenfers Apr 14 '16 at 18:12
  • dsa.msc is something easier to delegate than the smbldap-tools, but if you do not run samba as an AD controller, then you are more limited. – natxo asenjo Apr 14 '16 at 19:39
  • that's true, it is easier to delegate. – Jakob Lenfers Apr 14 '16 at 23:25

ADS does this somewhat but probably not to the full extent you're talking about. That said, it is open source so if you have the development time behind this it might not be that infeasible.


LAM isn't that far off from what you're looking for, however, I would note that in my search for something similar I figured out that really what I was looking for was federated access and centralized access management. Our company will inevitably move on to SSO, so having these things in the roadmap was important.

Those tools will accomplish what you're looking for in a more programmatic fashion as you mentioned.

  • Thanks, I don't have the manpower at the moment to program that ourselves. LAM seems useful, but I can stay with gosa then. – Jakob Lenfers Apr 18 '16 at 6:39
  • Depending on what you're looking to get out of it Gluu Server might be something to look into. gluu.org – Matt O. Apr 18 '16 at 6:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.