Doubt about integration between Samba 4 and OpenLDAP

[Cairo Campos]

I need to continuously synchronize OpenLDAP users and passwords with a Samba 4 DC. However, this doesn't seem to be a good idea due to incompatibilities.

Searching the internet, I saw some pages mentioning SSSD, so that I can use OpenLDAP as the basis of authentication for Samba 4.

Currently, my production Samba 4 domain uses internal LDAP and DNS.

I wanted material or documentation that showed me how to make the switch to using SSSD robustly.

Can you help me?

[Alejandro Lopez]

Hi Cairo,

Most of the documentation is hosted on https://sssd.io There you will find
from how to build it, test it and how to collaborate upto how to install
it, configure it and use it.

HTH,

On Thu, Aug 10, 2023 at 6:37 PM Cairo Campos 
wrote:
> I need to continuously synchronize OpenLDAP users and passwords with a
> Samba 4 DC. However, this doesn't seem to be a good idea due to
> incompatibilities.
>
> Searching the internet, I saw some pages mentioning SSSD, so that I can
> use OpenLDAP as the basis of authentication for Samba 4.
>
> Currently, my production Samba 4 domain uses internal LDAP and DNS.
>
> I wanted material or documentation that showed me how to make the switch
> to using SSSD robustly.
>
> Can you help me?
> _______________________________________________
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Spike White]

Redhat also has some good documentation and white papers about "directly
integrating Linux servers to AD".

for instance, Red Hat Enterprise Linux 8 Integrating RHEL systems directly
with Windows Active Directory
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/pdf/integrating_rhel_systems_directly_with_windows_active_directory/red_hat_enterprise_linux-8-integrating_rhel_systems_directly_with_windows_active_directory-en-us.pdf

You want to skip to the sssd sections.

That is, if you're using a RHEL-flavor Linux.  You didn't specify which
Linux flavor you use.

Spike

On Fri, Aug 11, 2023 at 2:38 AM Alejandro Lopez  wrote:
> Hi Cairo,
>
> Most of the documentation is hosted on https://sssd.io There you will
> find from how to build it, test it and how to collaborate upto how to
> install it, configure it and use it.
>
> HTH,
>
> On Thu, Aug 10, 2023 at 6:37 PM Cairo Campos 
> wrote:
> > I need to continuously synchronize OpenLDAP users and passwords with a
> > Samba 4 DC. However, this doesn't seem to be a good idea due to
> > incompatibilities.
> >
> > Searching the internet, I saw some pages mentioning SSSD, so that I can
> > use OpenLDAP as the basis of authentication for Samba 4.
> >
> > Currently, my production Samba 4 domain uses internal LDAP and DNS.
> >
> > I wanted material or documentation that showed me how to make the switch
> > to using SSSD robustly.
> >
> > Can you help me?
> > _______________________________________________
> > sssd-users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > Do not reply to spam, report it:
> > https://pagure.io/fedora-infrastructure/new_issue
>
> --
> Alejandro
> _______________________________________________
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue