update to 0.9.10
smbldap-tools-slapd.conf: added missing indexes [release 0.9.10-1mamba;Fri Jul 19 2013]
This commit is contained in:
parent
91b42815aa
commit
94f1eab138
@ -1,2 +1,6 @@
|
|||||||
# smbldap-tools
|
# smbldap-tools
|
||||||
|
|
||||||
|
Smbldap-tools is a set of perl scripts designed to manage user and group accounts stored in an LDAP directory. They can be used both by users and administrators of Linux systems:
|
||||||
|
* administrators can perform users and groups management operations, in a way similar to the standard useradd or groupmod commands
|
||||||
|
* users can change their LDAP password from the command line and get/change personnal informations
|
||||||
|
|
||||||
|
|||||||
57
smbldap-tools-0.9.10-administrator_and_guest.patch
Normal file
57
smbldap-tools-0.9.10-administrator_and_guest.patch
Normal file
@ -0,0 +1,57 @@
|
|||||||
|
diff -Nru smbldap-tools-0.9.10/smbldap-populate.pl smbldap-tools-0.9.10.patched/smbldap-populate.pl
|
||||||
|
--- smbldap-tools-0.9.10/smbldap-populate.pl 2012-03-05 09:59:44.000000000 +0100
|
||||||
|
+++ smbldap-tools-0.9.10.patched/smbldap-populate.pl 2013-07-19 12:41:41.328175838 +0200
|
||||||
|
@@ -48,13 +48,13 @@
|
||||||
|
print_banner;
|
||||||
|
print "Usage: $0 [-abegiklmru?] [ldif]\n";
|
||||||
|
print " -a user administrator login name (default: root)\n";
|
||||||
|
- print " -b user guest login name (default: nobody)\n";
|
||||||
|
+ print " -b user guest login name (default: guest)\n";
|
||||||
|
print " -e file export ldif file\n";
|
||||||
|
print " -g gidNumber first uidNumber to allocate (default: 1000)\n";
|
||||||
|
print " -i file import ldif file\n";
|
||||||
|
- print " -k uidNumber administrator's uidNumber (default: 0)\n";
|
||||||
|
- print " -l uidNumber guest's uidNumber (default: 999)\n";
|
||||||
|
- print " -m gidNumber administrator's gidNumber (default: 0)\n";
|
||||||
|
+ print " -k uidNumber administrator's uidNumber (default: 65400)\n";
|
||||||
|
+ print " -l uidNumber guest's uidNumber (default:65401)\n";
|
||||||
|
+ print " -m gidNumber administrator's gidNumber (default: 512)\n";
|
||||||
|
print " -r ridNumber first sambaNextRid to allocate (default: 1000)\n";
|
||||||
|
print " -R ridBase sambaAlgorithmicRidBase (none)\n";
|
||||||
|
print " -u uidNumber first uidNumber to allocate (default: 1000)\n";
|
||||||
|
@@ -97,7 +97,7 @@
|
||||||
|
|
||||||
|
my $guestName = $Options{'b'};
|
||||||
|
if (!defined($guestName)) {
|
||||||
|
- $guestName = "nobody";
|
||||||
|
+ $guestName = "guest";
|
||||||
|
}
|
||||||
|
|
||||||
|
my $adminUidNumber=$Options{'k'};
|
||||||
|
@@ -114,7 +114,7 @@
|
||||||
|
my $guestUidNumber=$Options{'l'};
|
||||||
|
my $guestRid = 501;
|
||||||
|
if (!defined($guestUidNumber)) {
|
||||||
|
- $guestUidNumber = "999";
|
||||||
|
+ $guestUidNumber = "65401";
|
||||||
|
} else {
|
||||||
|
if (defined($algorithmicRidBase)) {
|
||||||
|
## For backward compatibility with smbldap-tools 0.9.6 and older
|
||||||
|
@@ -124,7 +124,7 @@
|
||||||
|
|
||||||
|
my $adminGidNumber=$Options{'m'};
|
||||||
|
if (!defined($adminGidNumber)) {
|
||||||
|
- $adminGidNumber = "0";
|
||||||
|
+ $adminGidNumber = "512";
|
||||||
|
}
|
||||||
|
|
||||||
|
print "Populating LDAP directory for domain $domain ($config{SID})\n";
|
||||||
|
@@ -261,7 +261,7 @@
|
||||||
|
sambaNTPassword => "XXX",
|
||||||
|
sambaAcctFlags => "[U ]",
|
||||||
|
sambaSID => "$config{SID}-$adminRid",
|
||||||
|
- loginShell => "/bin/false",
|
||||||
|
+ loginShell => "/bin/bash",
|
||||||
|
gecos => "Netbios Domain Administrator",
|
||||||
|
);
|
||||||
|
push(@entries, $entry);
|
||||||
49
smbldap-tools-0.9.10-fix_minUidGid.patch
Normal file
49
smbldap-tools-0.9.10-fix_minUidGid.patch
Normal file
@ -0,0 +1,49 @@
|
|||||||
|
diff -Nru smbldap-tools-0.9.10.orig/smbldap-populate.pl smbldap-tools-0.9.10/smbldap-populate.pl
|
||||||
|
--- smbldap-tools-0.9.10.orig/smbldap-populate.pl 2013-07-19 12:44:07.021667805 +0200
|
||||||
|
+++ smbldap-tools-0.9.10/smbldap-populate.pl 2013-07-19 12:49:28.371837517 +0200
|
||||||
|
@@ -50,14 +50,14 @@
|
||||||
|
print " -a user administrator login name (default: root)\n";
|
||||||
|
print " -b user guest login name (default: guest)\n";
|
||||||
|
print " -e file export ldif file\n";
|
||||||
|
- print " -g gidNumber first uidNumber to allocate (default: 1000)\n";
|
||||||
|
+ print " -g gidNumber first uidNumber to allocate (default: 10000)\n";
|
||||||
|
print " -i file import ldif file\n";
|
||||||
|
print " -k uidNumber administrator's uidNumber (default: 65400)\n";
|
||||||
|
print " -l uidNumber guest's uidNumber (default:65401)\n";
|
||||||
|
print " -m gidNumber administrator's gidNumber (default: 512)\n";
|
||||||
|
- print " -r ridNumber first sambaNextRid to allocate (default: 1000)\n";
|
||||||
|
- print " -R ridBase sambaAlgorithmicRidBase (none)\n";
|
||||||
|
- print " -u uidNumber first uidNumber to allocate (default: 1000)\n";
|
||||||
|
+ print " -r ridNumber first sambaNextRid to allocate (default: 10000)\n";
|
||||||
|
+ print " -R ridBase sambaAlgorithmicRidBase (10000)\n";
|
||||||
|
+ print " -u uidNumber first uidNumber to allocate (default: 10000)\n";
|
||||||
|
print " -? show this help message\n";
|
||||||
|
|
||||||
|
exit (1);
|
||||||
|
@@ -75,20 +75,23 @@
|
||||||
|
|
||||||
|
my $firstuidNumber=$Options{'u'};
|
||||||
|
if (!defined($firstuidNumber)) {
|
||||||
|
- $firstuidNumber=1000;
|
||||||
|
+ $firstuidNumber=10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
my $firstgidNumber=$Options{'g'};
|
||||||
|
if (!defined($firstgidNumber)) {
|
||||||
|
- $firstgidNumber=1000;
|
||||||
|
+ $firstgidNumber=10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
my $firstridNumber=$Options{'r'};
|
||||||
|
if (!defined($firstridNumber)) {
|
||||||
|
- $firstridNumber=1000;
|
||||||
|
+ $firstridNumber=10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
my $algorithmicRidBase = $Options{'R'};
|
||||||
|
+if (!defined($algorithmicRidBase)) {
|
||||||
|
+ $algorithmicRidBase=10000;
|
||||||
|
+}
|
||||||
|
|
||||||
|
my $adminName = $Options{'a'};
|
||||||
|
if (!defined($adminName)) {
|
||||||
80
smbldap-tools-slapd.conf
Normal file
80
smbldap-tools-slapd.conf
Normal file
@ -0,0 +1,80 @@
|
|||||||
|
#
|
||||||
|
# Configuration for Samba
|
||||||
|
#
|
||||||
|
# See slapd.conf(5) for details on configuration options.
|
||||||
|
# This file should NOT be world readable.
|
||||||
|
#
|
||||||
|
include /etc/openldap/schema/core.schema
|
||||||
|
include /etc/openldap/schema/cosine.schema
|
||||||
|
include /etc/openldap/schema/inetorgperson.schema
|
||||||
|
include /etc/openldap/schema/nis.schema
|
||||||
|
include /etc/openldap/schema/samba.schema
|
||||||
|
|
||||||
|
# Define global ACLs to disable default read access.
|
||||||
|
|
||||||
|
# Do not enable referrals until AFTER you have a working directory
|
||||||
|
# service AND an understanding of referrals.
|
||||||
|
#referral ldap://root.openldap.org
|
||||||
|
|
||||||
|
pidfile /var/run/openldap/slapd.pid
|
||||||
|
argsfile /var/run/openldap/slapd.args
|
||||||
|
|
||||||
|
# Load dynamic backend modules:
|
||||||
|
# modulepath /usr/sbin/openldap
|
||||||
|
# moduleload back_bdb.la
|
||||||
|
# moduleload back_hdb.la
|
||||||
|
# moduleload back_ldap.la
|
||||||
|
|
||||||
|
# Sample security restrictions
|
||||||
|
# Require integrity protection (prevent hijacking)
|
||||||
|
# Require 112-bit (3DES or better) encryption for updates
|
||||||
|
# Require 63-bit encryption for simple bind
|
||||||
|
# security ssf=1 update_ssf=112 simple_bind=64
|
||||||
|
|
||||||
|
# Sample access control policy:
|
||||||
|
# Root DSE: allow anyone to read it
|
||||||
|
# Subschema (sub)entry DSE: allow anyone to read it
|
||||||
|
# Other DSEs:
|
||||||
|
# Allow self write access
|
||||||
|
# Allow authenticated users read access
|
||||||
|
# Allow anonymous users to authenticate
|
||||||
|
# Directives needed to implement policy:
|
||||||
|
# access to dn.base="" by * read
|
||||||
|
# access to dn.base="cn=Subschema" by * read
|
||||||
|
# access to *
|
||||||
|
# by self write
|
||||||
|
# by users read
|
||||||
|
# by anonymous auth
|
||||||
|
#
|
||||||
|
# if no access controls are present, the default policy
|
||||||
|
# allows anyone and everyone to read anything but restricts
|
||||||
|
# updates to rootdn. (e.g., "access to * by * read")
|
||||||
|
#
|
||||||
|
# rootdn can always read and write EVERYTHING!
|
||||||
|
|
||||||
|
#######################################################################
|
||||||
|
# BDB database definitions
|
||||||
|
#######################################################################
|
||||||
|
|
||||||
|
database bdb
|
||||||
|
suffix __suffix__
|
||||||
|
rootdn __rootdn__
|
||||||
|
# Cleartext passwords, especially for the rootdn, should
|
||||||
|
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
|
||||||
|
# Use of strong authentication encouraged.
|
||||||
|
rootpw secret
|
||||||
|
# The database directory MUST exist prior to running slapd AND
|
||||||
|
# should only be accessible by the slapd and slap tools.
|
||||||
|
# Mode 700 recommended.
|
||||||
|
directory /var/lib/openldap-data
|
||||||
|
# Indices to maintain
|
||||||
|
index uid,uidNumber,gidNumber eq
|
||||||
|
index cn,mail,surname,givenname eq,subinitial
|
||||||
|
index sambaSID eq
|
||||||
|
index sambaPrimaryGroupSID eq
|
||||||
|
index sambaDomainName eq
|
||||||
|
index objectclass eq
|
||||||
|
index sambaSIDList eq
|
||||||
|
index sambaGroupType eq
|
||||||
|
index displayName eq
|
||||||
|
loglevel none
|
||||||
75
smbldap-tools-smb.conf.master
Normal file
75
smbldap-tools-smb.conf.master
Normal file
@ -0,0 +1,75 @@
|
|||||||
|
[global]
|
||||||
|
unix charset = LOCALE
|
||||||
|
workgroup = __sambaDomain__
|
||||||
|
passdb backend = ldapsam:ldap://127.0.0.1:389
|
||||||
|
username map = /etc/samba/smbusers
|
||||||
|
log level = 1
|
||||||
|
syslog = 0
|
||||||
|
log file = /var/log/samba/%m
|
||||||
|
max log size = 50
|
||||||
|
smb ports = 139
|
||||||
|
name resolve order = wins bcast hosts
|
||||||
|
time server = Yes
|
||||||
|
printcap name = CUPS
|
||||||
|
show add printer wizard = No
|
||||||
|
add user script = /usr/sbin/smbldap-useradd -m "%u"
|
||||||
|
delete user script = /usr/sbin/smbldap-userdel "%u"
|
||||||
|
add group script = /usr/sbin/smbldap-groupadd -p "%g"
|
||||||
|
delete group script = /usr/sbin/smbldap-groupdel "%g"
|
||||||
|
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
|
||||||
|
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
|
||||||
|
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
|
||||||
|
add machine script = /usr/sbin/smbldap-useradd -w "%u"
|
||||||
|
logon script = scripts\logon.bat
|
||||||
|
logon path = \\%L\profiles\%U
|
||||||
|
logon drive = X:
|
||||||
|
domain logons = Yes
|
||||||
|
preferred master = Yes
|
||||||
|
wins support = Yes
|
||||||
|
ldap admin dn = __rootdn__
|
||||||
|
ldap group suffix = ou=Groups
|
||||||
|
ldap idmap suffix = ou=Idmap
|
||||||
|
ldap machine suffix = ou=People
|
||||||
|
ldap suffix = __suffix__
|
||||||
|
ldap user suffix = ou=People
|
||||||
|
ldap ssl = no
|
||||||
|
idmap backend = ldap:ldap://127.0.0.1
|
||||||
|
idmap uid = 10000-20000
|
||||||
|
idmap gid = 10000-20000
|
||||||
|
map acl inherit = Yes
|
||||||
|
|
||||||
|
[homes]
|
||||||
|
comment = Home Directories
|
||||||
|
valid users = %S
|
||||||
|
read only = No
|
||||||
|
browseable = No
|
||||||
|
|
||||||
|
[printers]
|
||||||
|
comment = SMB Print Spool
|
||||||
|
path = /var/spool/samba
|
||||||
|
guest ok = Yes
|
||||||
|
printable = Yes
|
||||||
|
browseable = No
|
||||||
|
|
||||||
|
[netlogon]
|
||||||
|
comment = Network Logon Service
|
||||||
|
path = /var/lib/samba/netlogon
|
||||||
|
guest ok = Yes
|
||||||
|
locking = No
|
||||||
|
|
||||||
|
[profiles]
|
||||||
|
comment = Profile Share
|
||||||
|
path = /var/lib/samba/profiles
|
||||||
|
read only = No
|
||||||
|
profile acls = Yes
|
||||||
|
|
||||||
|
[profdata]
|
||||||
|
comment = Profile Data Share
|
||||||
|
path = /var/lib/samba/profdata
|
||||||
|
read only = No
|
||||||
|
profile acls = Yes
|
||||||
|
|
||||||
|
[print$]
|
||||||
|
comment = Printer Drivers
|
||||||
|
path = /var/lib/samba/drivers
|
||||||
|
write list = root
|
||||||
231
smbldap-tools-smbldap.conf
Normal file
231
smbldap-tools-smbldap.conf
Normal file
@ -0,0 +1,231 @@
|
|||||||
|
# $Id: smbldap.conf 26 2010-11-15 14:28:01Z mm1 $
|
||||||
|
#
|
||||||
|
# smbldap-tools.conf : Q & D configuration file for smbldap-tools
|
||||||
|
|
||||||
|
# This code was developped by IDEALX (http://IDEALX.org/) and
|
||||||
|
# contributors (their names can be found in the CONTRIBUTORS file).
|
||||||
|
#
|
||||||
|
# Copyright (C) 2001-2002 IDEALX
|
||||||
|
#
|
||||||
|
# This program is free software; you can redistribute it and/or
|
||||||
|
# modify it under the terms of the GNU General Public License
|
||||||
|
# as published by the Free Software Foundation; either version 2
|
||||||
|
# of the License, or (at your option) any later version.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with this program; if not, write to the Free Software
|
||||||
|
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
|
||||||
|
# USA.
|
||||||
|
|
||||||
|
# Purpose :
|
||||||
|
# . be the configuration file for all smbldap-tools scripts
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
#
|
||||||
|
# General Configuration
|
||||||
|
#
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
# Put your own SID. To obtain this number do: "net getlocalsid".
|
||||||
|
# If not defined, parameter is taking from "net getlocalsid" return
|
||||||
|
SID="__SID__"
|
||||||
|
|
||||||
|
# Domain name the Samba server is in charged.
|
||||||
|
# If not defined, parameter is taking from smb.conf configuration file
|
||||||
|
# Ex: sambaDomain="IDEALX-NT"
|
||||||
|
sambaDomain="__sambaDomain__"
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
#
|
||||||
|
# LDAP Configuration
|
||||||
|
#
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
# Notes: to use to dual ldap servers backend for Samba, you must patch
|
||||||
|
# Samba with the dual-head patch from IDEALX. If not using this patch
|
||||||
|
# just use the same server for slaveLDAP and masterLDAP.
|
||||||
|
# Those two servers declarations can also be used when you have
|
||||||
|
# . one master LDAP server where all writing operations must be done
|
||||||
|
# . one slave LDAP server where all reading operations must be done
|
||||||
|
# (typically a replication directory)
|
||||||
|
|
||||||
|
# Slave LDAP server
|
||||||
|
# Ex: slaveLDAP=127.0.0.1
|
||||||
|
# If not defined, parameter is set to "127.0.0.1"
|
||||||
|
#slaveLDAP="ldap.iallanis.info"
|
||||||
|
|
||||||
|
# Slave LDAP port
|
||||||
|
# If not defined, parameter is set to "389"
|
||||||
|
#slavePort="389"
|
||||||
|
|
||||||
|
# Master LDAP server: needed for write operations
|
||||||
|
# Ex: masterLDAP=127.0.0.1
|
||||||
|
# If not defined, parameter is set to "127.0.0.1"
|
||||||
|
#masterLDAP="ldap.iallanis.info"
|
||||||
|
|
||||||
|
# Master LDAP port
|
||||||
|
# If not defined, parameter is set to "389"
|
||||||
|
#masterPort="389"
|
||||||
|
|
||||||
|
# Use TLS for LDAP
|
||||||
|
# If set to 1, this option will use start_tls for connection
|
||||||
|
# (you should also used the port 389)
|
||||||
|
# If not defined, parameter is set to "0"
|
||||||
|
#ldapTLS="1"
|
||||||
|
|
||||||
|
# Use SSL for LDAP
|
||||||
|
# If set to 1, this option will use SSL for connection
|
||||||
|
# (standard port for ldaps is 636)
|
||||||
|
# If not defined, parameter is set to "0"
|
||||||
|
#ldapSSL="0"
|
||||||
|
|
||||||
|
# How to verify the server's certificate (none, optional or require)
|
||||||
|
# see "man Net::LDAP" in start_tls section for more details
|
||||||
|
verify="none"
|
||||||
|
|
||||||
|
# CA certificate
|
||||||
|
# see "man Net::LDAP" in start_tls section for more details
|
||||||
|
#cafile="/etc/smbldap-tools/ca.pem"
|
||||||
|
|
||||||
|
# certificate to use to connect to the ldap server
|
||||||
|
# see "man Net::LDAP" in start_tls section for more details
|
||||||
|
#clientcert="/etc/smbldap-tools/smbldap-tools.iallanis.info.pem"
|
||||||
|
|
||||||
|
# key certificate to use to connect to the ldap server
|
||||||
|
# see "man Net::LDAP" in start_tls section for more details
|
||||||
|
#clientkey="/etc/smbldap-tools/smbldap-tools.iallanis.info.key"
|
||||||
|
|
||||||
|
# LDAP Suffix
|
||||||
|
# Ex: suffix=dc=IDEALX,dc=ORG
|
||||||
|
suffix="__suffix__"
|
||||||
|
|
||||||
|
# Where are stored Users
|
||||||
|
# Ex: usersdn="ou=Users,dc=IDEALX,dc=ORG"
|
||||||
|
# Warning: if 'suffix' is not set here, you must set the full dn for usersdn
|
||||||
|
usersdn="ou=People,${suffix}"
|
||||||
|
|
||||||
|
# Where are stored Computers
|
||||||
|
# Ex: computersdn="ou=Computers,dc=IDEALX,dc=ORG"
|
||||||
|
# Warning: if 'suffix' is not set here, you must set the full dn for computersdn
|
||||||
|
computersdn="ou=Computers,${suffix}"
|
||||||
|
|
||||||
|
# Where are stored Groups
|
||||||
|
# Ex: groupsdn="ou=Groups,dc=IDEALX,dc=ORG"
|
||||||
|
# Warning: if 'suffix' is not set here, you must set the full dn for groupsdn
|
||||||
|
groupsdn="ou=Groups,${suffix}"
|
||||||
|
|
||||||
|
# Where are stored Idmap entries (used if samba is a domain member server)
|
||||||
|
# Ex: groupsdn="ou=Idmap,dc=IDEALX,dc=ORG"
|
||||||
|
# Warning: if 'suffix' is not set here, you must set the full dn for idmapdn
|
||||||
|
idmapdn="ou=Idmap,${suffix}"
|
||||||
|
|
||||||
|
# Where to store next uidNumber and gidNumber available for new users and groups
|
||||||
|
# If not defined, entries are stored in sambaDomainName object.
|
||||||
|
# Ex: sambaUnixIdPooldn="sambaDomainName=${sambaDomain},${suffix}"
|
||||||
|
# Ex: sambaUnixIdPooldn="cn=NextFreeUnixId,${suffix}"
|
||||||
|
sambaUnixIdPooldn="sambaDomainName=${sambaDomain},${suffix}"
|
||||||
|
|
||||||
|
# Default scope Used
|
||||||
|
scope="sub"
|
||||||
|
|
||||||
|
# Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA, CLEARTEXT)
|
||||||
|
hash_encrypt="SSHA"
|
||||||
|
|
||||||
|
# if hash_encrypt is set to CRYPT, you may set a salt format.
|
||||||
|
# default is "%s", but many systems will generate MD5 hashed
|
||||||
|
# passwords if you use "$1$%.8s". This parameter is optional!
|
||||||
|
crypt_salt_format="%s"
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
#
|
||||||
|
# Unix Accounts Configuration
|
||||||
|
#
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
# Login defs
|
||||||
|
# Default Login Shell
|
||||||
|
# Ex: userLoginShell="/bin/bash"
|
||||||
|
userLoginShell="/bin/bash"
|
||||||
|
|
||||||
|
# Home directory
|
||||||
|
# Ex: userHome="/home/%U"
|
||||||
|
userHome="/home/%U"
|
||||||
|
|
||||||
|
# Default mode used for user homeDirectory
|
||||||
|
userHomeDirectoryMode="700"
|
||||||
|
|
||||||
|
# Gecos
|
||||||
|
userGecos="System User"
|
||||||
|
|
||||||
|
# Default User (POSIX and Samba) GID
|
||||||
|
defaultUserGid="513"
|
||||||
|
|
||||||
|
# Default Computer (Samba) GID
|
||||||
|
defaultComputerGid="515"
|
||||||
|
|
||||||
|
# Skel dir
|
||||||
|
skeletonDir="/etc/skel"
|
||||||
|
|
||||||
|
# Default password validation time (time in days) Comment the next line if
|
||||||
|
# you don't want password to be enable for defaultMaxPasswordAge days (be
|
||||||
|
# careful to the sambaPwdMustChange attribute's value)
|
||||||
|
defaultMaxPasswordAge="180"
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
#
|
||||||
|
# SAMBA Configuration
|
||||||
|
#
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
# The UNC path to home drives location (%U username substitution)
|
||||||
|
# Just set it to a null string if you want to use the smb.conf 'logon home'
|
||||||
|
# directive and/or disable roaming profiles
|
||||||
|
# Ex: userSmbHome="\\PDC-SMB3\%U"
|
||||||
|
userSmbHome=""
|
||||||
|
|
||||||
|
# The UNC path to profiles locations (%U username substitution)
|
||||||
|
# Just set it to a null string if you want to use the smb.conf 'logon path'
|
||||||
|
# directive and/or disable roaming profiles
|
||||||
|
# Ex: userProfile="\\PDC-SMB3\profiles\%U"
|
||||||
|
userProfile=""
|
||||||
|
|
||||||
|
# The default Home Drive Letter mapping
|
||||||
|
# (will be automatically mapped at logon time if home directory exist)
|
||||||
|
# Ex: userHomeDrive="H:"
|
||||||
|
userHomeDrive="H:"
|
||||||
|
|
||||||
|
# The default user netlogon script name (%U username substitution)
|
||||||
|
# if not used, will be automatically username.cmd
|
||||||
|
# make sure script file is edited under dos
|
||||||
|
# Ex: userScript="startup.cmd" # make sure script file is edited under dos
|
||||||
|
userScript="scripts/logon.bat"
|
||||||
|
|
||||||
|
# Domain appended to the users "mail"-attribute
|
||||||
|
# when smbldap-useradd -M is used
|
||||||
|
# Ex: mailDomain="idealx.com"
|
||||||
|
mailDomain="__mailDomain__"
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
#
|
||||||
|
# SMBLDAP-TOOLS Configuration (default are ok for a RedHat)
|
||||||
|
#
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
# Allows not to use smbpasswd (if with_smbpasswd="0" in smbldap.conf) but
|
||||||
|
# prefer Crypt::SmbHash library
|
||||||
|
with_smbpasswd="0"
|
||||||
|
smbpasswd="/usr/bin/smbpasswd"
|
||||||
|
|
||||||
|
# Allows not to use slappasswd (if with_slappasswd="0" in smbldap.conf)
|
||||||
|
# but prefer Crypt:: libraries
|
||||||
|
with_slappasswd="0"
|
||||||
|
slappasswd="/usr/sbin/slappasswd"
|
||||||
|
|
||||||
|
# comment out the following line to get rid of the default banner
|
||||||
|
# no_banner="1"
|
||||||
|
|
||||||
13
smbldap-tools-smbldap_bind.conf
Normal file
13
smbldap-tools-smbldap_bind.conf
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
# $Id: smbldap_bind.conf 26 2010-11-15 14:28:01Z mm1 $
|
||||||
|
#
|
||||||
|
############################
|
||||||
|
# Credential Configuration #
|
||||||
|
############################
|
||||||
|
# Notes: you can specify two differents configuration if you use a
|
||||||
|
# master ldap for writing access and a slave ldap server for reading access
|
||||||
|
# By default, we will use the same DN (so it will work for standard Samba
|
||||||
|
# release)
|
||||||
|
slaveDN="__slaveDN__"
|
||||||
|
slavePw="secret"
|
||||||
|
masterDN="__masterDN__"
|
||||||
|
masterPw="secret"
|
||||||
129
smbldap-tools.spec
Normal file
129
smbldap-tools.spec
Normal file
@ -0,0 +1,129 @@
|
|||||||
|
Name: smbldap-tools
|
||||||
|
Version: 0.9.10
|
||||||
|
Release: 1mamba
|
||||||
|
Summary: A set of perl scripts designed to manage user and group accounts stored in an LDAP directory
|
||||||
|
Group: System/Tools
|
||||||
|
Vendor: openmamba
|
||||||
|
Distribution: openmamba
|
||||||
|
Packager: Silvan Calarco <silvan.calarco@mambasoft.it>
|
||||||
|
URL: https://gna.org/projects/smbldap-tools/
|
||||||
|
Source: http://download.gna.org/smbldap-tools/sources/%{version}/smbldap-tools-%{version}.tar.gz
|
||||||
|
Source1: smbldap-tools-smbldap.conf
|
||||||
|
Source2: smbldap-tools-smbldap_bind.conf
|
||||||
|
Source3: smbldap-tools-slapd.conf
|
||||||
|
Source4: smbldap-tools-smb.conf.master
|
||||||
|
Patch0: smbldap-tools-0.9.10-administrator_and_guest.patch
|
||||||
|
Patch1: smbldap-tools-0.9.10-fix_minUidGid.patch
|
||||||
|
License: GPL
|
||||||
|
## AUTOBUILDREQ-BEGIN
|
||||||
|
BuildRequires: perl-Crypt-SmbHash
|
||||||
|
BuildRequires: perl-devel
|
||||||
|
BuildRequires: perl-Net-LDAP
|
||||||
|
## AUTOBUILDREQ-END
|
||||||
|
Requires(post):samba-server
|
||||||
|
Requires: samba-winbind
|
||||||
|
Requires(post):openldap-server
|
||||||
|
Requires(post):libnss_ldap
|
||||||
|
Requires(post):pam_ldap
|
||||||
|
Requires: openldap-clients
|
||||||
|
BuildArch: noarch
|
||||||
|
BuildRoot: %{_tmppath}/%{name}-%{version}-root
|
||||||
|
|
||||||
|
%description
|
||||||
|
Smbldap-tools is a set of perl scripts designed to manage user and group accounts stored in an LDAP directory. They can be used both by users and administrators of Linux systems:
|
||||||
|
* administrators can perform users and groups management operations, in a way similar to the standard useradd or groupmod commands
|
||||||
|
* users can change their LDAP password from the command line and get/change personnal informations
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%setup -q
|
||||||
|
%patch0 -p1
|
||||||
|
%patch1 -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
%configure
|
||||||
|
%make
|
||||||
|
|
||||||
|
%install
|
||||||
|
[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
|
||||||
|
%makeinstall
|
||||||
|
|
||||||
|
install -d -m0755 %{buildroot}%{_sysconfdir}/smbldap-tools
|
||||||
|
install -d -m0755 %{buildroot}%{_mandir}/man8
|
||||||
|
|
||||||
|
cp -a %{SOURCE1} %{buildroot}%{_sysconfdir}/smbldap-tools/smbldap.conf
|
||||||
|
cp -a %{SOURCE2} %{buildroot}%{_sysconfdir}/smbldap-tools/smbldap_bind.conf
|
||||||
|
install -D -m0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/openldap/slapd-samba.conf.example
|
||||||
|
install -D -m0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/samba/smb.conf.master
|
||||||
|
for i in smbldap-[gpu]*;
|
||||||
|
do
|
||||||
|
pod2man --section=8 $i > %{buildroot}%{_mandir}/man8/$i.8
|
||||||
|
done
|
||||||
|
|
||||||
|
#. initialize the ldap directory
|
||||||
|
# $ smbldap-populate
|
||||||
|
#. If not already done : "smbpasswd -w secret" to set up
|
||||||
|
# the ldap admin password in secrets.tdb
|
||||||
|
|
||||||
|
%clean
|
||||||
|
[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
|
||||||
|
|
||||||
|
%post
|
||||||
|
if [ $1 -eq 1 ]; then
|
||||||
|
# new install
|
||||||
|
. %{_sysconfdir}/sysconfig/network
|
||||||
|
conf_hostname=${HOSTNAME}
|
||||||
|
[ -e %{_sysconfdir}/openldap/slapd.conf ] && {
|
||||||
|
suffix=`grep ^suffix %{_sysconfdir}/openldap/slapd.conf | awk '{ print $2 }'`
|
||||||
|
rootdn=`grep ^rootdn %{_sysconfdir}/openldap/slapd.conf | awk '{ print $2 }'`
|
||||||
|
sid=`net getlocalsid 2>/dev/null| awk '{ print $6 }'`
|
||||||
|
sambadomain=`grep "[[:space:]]*workgroup =" %{_sysconfdir}/samba/smb.conf | awk '{ print $3 }'`
|
||||||
|
}
|
||||||
|
[ "$suffix" -a "$rootdn" ] && {
|
||||||
|
sed -i "s|\"__suffix__\"|$suffix|
|
||||||
|
s|__SID__|$sid|
|
||||||
|
s|__sambaDomain__|$sambadomain|
|
||||||
|
s|__mailDomain__|$conf_hostname|" \
|
||||||
|
%{_sysconfdir}/smbldap-tools/smbldap.conf
|
||||||
|
sed -i "s|\"__slaveDN__\"|$rootdn|
|
||||||
|
s|\"__masterDN__\"|$rootdn|" \
|
||||||
|
%{_sysconfdir}/smbldap-tools/smbldap_bind.conf
|
||||||
|
sed -i "s|__sambaDomain__|$sambadomain|
|
||||||
|
s|__suffix__|$suffix|
|
||||||
|
s|__rootdn__|$rootdn|" \
|
||||||
|
%{_sysconfdir}/samba/smb.conf.master
|
||||||
|
sed -i "s|__suffix__|$suffix|
|
||||||
|
s|__rootdn__|$rootdn|" \
|
||||||
|
%{_sysconfdir}/openldap/slapd-samba.conf.example
|
||||||
|
}
|
||||||
|
fi
|
||||||
|
:
|
||||||
|
|
||||||
|
%files
|
||||||
|
%defattr(-,root,root)
|
||||||
|
%attr(644,root,root) %config(noreplace) %{_sysconfdir}/smbldap-tools/smbldap.conf
|
||||||
|
%attr(600,root,root) %config(noreplace) %{_sysconfdir}/smbldap-tools/smbldap_bind.conf
|
||||||
|
%{_sysconfdir}/samba/smb.conf.master
|
||||||
|
%{_sysconfdir}/openldap/slapd-samba.conf.example
|
||||||
|
%{_sbindir}/smbldap-*
|
||||||
|
%{perl_vendorlib}/smbldap_tools.pm
|
||||||
|
%{_mandir}/man8/smbldap-*.8*
|
||||||
|
%doc COPYING
|
||||||
|
#ChangeLog README TODO
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Fri Jul 19 2013 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.10-1mamba
|
||||||
|
- update to 0.9.10
|
||||||
|
- smbldap-tools-slapd.conf: added missing indexes
|
||||||
|
|
||||||
|
* Mon Apr 11 2011 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.6-4mamba
|
||||||
|
- set scripts/logon.bat as default logon script
|
||||||
|
|
||||||
|
* Tue Mar 29 2011 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.6-3mamba
|
||||||
|
- added patch to change minimum UID and GID from 1000 to 10000
|
||||||
|
|
||||||
|
* Thu Mar 17 2011 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.6-2mamba
|
||||||
|
- support automatic configuration on first install
|
||||||
|
|
||||||
|
* Wed Mar 09 2011 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.6-1mamba
|
||||||
|
- package created by autospec
|
||||||
|
smbldap-tools-0.9.6-fix_minUidGid.patch
|
||||||
Loading…
Reference in New Issue
Block a user