samba ldap howto (1).pdf

Vista previa de texto
The SAMBA-LDAP-PDC Howto
9.3
Revision : 1.24
smbldap-tools
To manipulate groups, we’ve developped a collection of PERL scripts named smbldap-tools :
they provide all the tools you need to manage user and groups accounts, in a LDAP directory.
Because Samba use posixGroup, those scripts may be used to manage Unix and Windows
(Samba) accounts. As most of existing software are LDAP aware, you can use your SAMBALDAP PDC to be an unique source of authentification, and the smbldap-tools may offer
you a good base to manage user accounts datas.
In this Howto, we have used the following tools to manage groups :
• smbldap-groupadd.pl : to add a new group,
• smbldap-userdel.pl : to delete an existing group,
• smbldap-usermod.pl : to modify any group datas (mostly to add or remove an user from
a given group).
TODO: write this piece of doc. Show how to manager user and group affectation (removing
1 user from 1 group without too much manipulation when 1000 groups...).
9.4
idxldapaccounts
If you prefer nice GUI to shell, you should have a look on the idxldapaccounts Webmin
module. See http://webmin.idealx.com/.
TODO: write documentation for these tools
page 27/56
