Fwd: [K12OSN] Samba/LDAP how-to in OO format

[Gavin Henry]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This has come from the K12OSN project and I have it now on:

http://FedoraNEWS.ORG/ghenry/ldap 

It's waiting for me to finish tagging/cleaning it.

Would someone like to Docbook it up for the docs project? I have permission to 
do what ever to it.

I am also on the LDAP team for tldp.org but not really done much about it, but 
this is a very good one to go into it.

I have these points which I sent to him:

1. The backend ldap should be bdb not ldbm (discussed very in depth on the
OpenLDAP lists).

2. You should really have access controls on the LDAP database, as anyone can
then read your hashed password over the wire, unless, which I didn't notice,
you only have the LDAP server listening on localhost?

3. You should be using TLS.

4. Could you do a wee conclusion, rounding everything off.




P.S. I just found this one on his site:

http://www.vcs.u52.k12.me.us/LDAP/The_SAMBA-LDAP_How-to.html

I don't know which is newer, but this one seems more complete.

I'll check.

Gavin.

I think this comes from:

http://samba.idealx.org/smbldap-howto.en.html


- ----------  Forwarded Message  ----------

Subject: [K12OSN] Samba/LDAP how-to in OO format
Date: Wednesday 16 Jun 2004 03:28
From: "David Trask" <dtrask at vcs.u52.k12.me.us>
To: K12OSN at redhat.com

http://web.vcs.u52.k12.me.us/linux/Samba-LDAP.sxw

here's the Samba LDAP how-to in OO format

David N. Trask
Technology Teacher/Coordinator
Vassalboro Community School
dtrask at vcs.u52.k12.me.us
(207)923-3100


_______________________________________________
K12OSN mailing list
K12OSN at redhat.com
https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>

- -------------------------------------------------------

- -- 
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 587369
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E ghenry at suretecsystems.com

Open Source. Open Solutions.

http://www.suretecsystems.com/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA0KKxgNqd7Kng8UoRArTHAKDcOAa52LJQGuaEDeRo1GyTHd2VwQCfdxO8
SCZNaH+RdbzGzGx8cPaLdJs=
=6Ckx
-----END PGP SIGNATURE-----