RE: [Fedora-directory-users] Samba/Fedora DS/Windows Password Sync

[Bliss, Aaron]

Phil,
After you setup your native windows domain, you can join your samba
server to the domain and configure it to use the domain controller for
authentication.

Aaron 

-----Original Message-----
From: fedora-directory-users-bounces(a)redhat.com
[mailto:[e-mail]] On Behalf Of Phil
Allred
Sent: Thursday, March 08, 2007 9:15 PM
To: fedora-directory-users(a)redhat.com
Subject: [Fedora-directory-users] Samba/Fedora DS/Windows Password Sync

Here at Brooklyn Law School, we use Fedora DS together with a samba 
schema quite succesfully.   All students and most faculty log in to  lab

computers and desktops  that are members of  a Samba domain. We avoid 
using NT servers as much as possible for open source reasons, but our 
faculty is hoping we can move them to an exchange server running on NT 
2003.  In a test environment, we were able to get password sync 
happening between an NT server and a replica of our DS,  but are 
wondering how to keep our samba passwords updated.  Currently, we have a

web front end pointed at a perl script loosely based on the smb-ldap 
scripts from IDEALX.  These keep our sambantpassword, sambalmpassword, 
and unix passwords synced. 

 If we continue to use this script to update passwords on Fedora DS, 
will fedora pick up the password and send it down to the windows 
server?  I assume there is not much I could do to get it to work in the 
other direction, which would be ok -- we would require users to continue

to change their passwords through our web front end.

Any thoughts or suggestions would be greatly appreciated.


Phil Allred

--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Confidentiality Notice:
The information contained in this electronic message is intended for the exclusive use of
the individual or entity named above and may contain privileged or confidential
information.  If the reader of this message is not the intended recipient or the employee
or agent responsible to deliver it to the intended recipient, you are hereby notified that
dissemination, distribution or copying of this information is prohibited.  If you have
received this communication in error, please notify the sender immediately by telephone
and destroy the copies you received.