1

TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)?

I'm currently trying to move away from GOsa as our LDAP management tool. (Also I'm changing cyrus to dovecot, but that's taken care of.) I want to get away from solutions like GOsa, because it was hard for us to enhance their software for our need while staying up to date with their code. Also the project had the latest release in 2012. I would like to edit our users with general purpose ldap interfaces like Apache Directory Studio or similar.

Since we use the directory also for storing our samba accounts, I realized that GOsa did more in that department than I thought. I don't want to manually generate the different samba password hashes (sambaLMPassword, sambaNTPassword) and the non human readable fields (sambaPwdLastSet, sambaMungedDial) myself. Also managing the ids could be something that the tool should do. Is there any way between tools like GOsa and LAM and the complete manual approach? Or do I have to use smbldap-tools on the console and edit the rest in ADS? :/

Thanks!

Edit: samba 4, but in classic mode

4
  • samba version? If it's samba => 4 in ADS mode then you can use the windows native tools (dsa.msc, dsadd, dsmod, I guess in powershelll as well). Commented Apr 14, 2016 at 18:08
  • Thank for your answer. But that would be the same as using the smbldap-tools, wouldn't it? That would mean two different tools for samba and the rest. But it is in classic mode though. Commented Apr 14, 2016 at 18:12
  • dsa.msc is something easier to delegate than the smbldap-tools, but if you do not run samba as an AD controller, then you are more limited. Commented Apr 14, 2016 at 19:39
  • that's true, it is easier to delegate. Commented Apr 14, 2016 at 23:25

1 Answer 1

1

ADS does this somewhat but probably not to the full extent you're talking about. That said, it is open source so if you have the development time behind this it might not be that infeasible.

https://www.ldap-account-manager.org/lamcms/

LAM isn't that far off from what you're looking for, however, I would note that in my search for something similar I figured out that really what I was looking for was federated access and centralized access management. Our company will inevitably move on to SSO, so having these things in the roadmap was important.

Those tools will accomplish what you're looking for in a more programmatic fashion as you mentioned.

2
  • Thanks, I don't have the manpower at the moment to program that ourselves. LAM seems useful, but I can stay with gosa then. Commented Apr 18, 2016 at 6:39
  • Depending on what you're looking to get out of it Gluu Server might be something to look into. gluu.org
    – Matt O.
    Commented Apr 18, 2016 at 6:45

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .