CHAPTER 7 N
188 CHAPTER 7 N
CHAPTER 7 N
190 CHAPTER 7 N
CHAPTER 7 N
192 CHAPTER 7 N
CHAPTER 7 N
194 CHAPTER 7 N
CHAPTER 7 N
CHAPTER 8
Configuring OpenLDAP
Centralizing User Management
You can use the Lightweight Directory Access Protocol (LDAP) to manage user, group,
and other configuration information in a centralized way. Centralized user management
is the purpose for which LDAP is most commonly used. In such a configuration, one
server is used as the LDAP server and contains all information that users need to log on to
the network. From the client computers, users send their credentials to the LDAP server
in order to authenticate.
To set up an LDAP Directory server, you need to configure the LDAP Directory. This
Directory contains all information that is required for users to log on to the network. The
advantage of the LDAP Directory is that it is compatible with the X.500 standard, which is
used by other Directory services as well. Some Directory services that use the X.500 stan-
dard are Microsoft Active Directory and Novell eDirectory.
NNote To distinguish between an LDAP Directory and a directory in the file system, I’ll refer to an LDAP
Directory with an uppercase D and to a file system directory with a lowercase d.
Using the LDAP Directory
LDAP gives access to the Directory, a hierarchically structured database in which you
can store different kinds of configuration data. In an e-mail environment, for example,
you can use the LDAP Directory to store usernames and their corresponding e-mail
addresses, thus setting up LDAP as a service to look up the e-mail address for a given
user. You can also store different configuration information in the LDAP, such as the con-
figuration of your DHCP servers or your DNS database. All this information is stored in
a hierarchical structure.
197
198 CHAPTER 8 N
CHAPTER 8 N
200 CHAPTER 8 N
CHAPTER 8 N
202 CHAPTER 8 N
CHAPTER 8 N
204 CHAPTER 8 N
CHAPTER 8 N
206 CHAPTER 8 N
CHAPTER 8 N
208 CHAPTER 8 N
CHAPTER 8 N
210 CHAPTER 8 N
CHAPTER 8 N
212 CHAPTER 8 N
CHAPTER 8 N
214 CHAPTER 8 N
CHAPTER 8 N
216 CHAPTER 8 N
CHAPTER 8 N
218 CHAPTER 8 N
CHAPTER 8 N
220 CHAPTER 8 N
CHAPTER 8 N
222 CHAPTER 8 N
CHAPTER 8 N
224 CHAPTER 8 N
CHAPTER 8 N
226 CHAPTER 8 N
CHAPTER 8 N
228 CHAPTER 8 N
CHAPTER 8 N
230 CHAPTER 8 N
CHAPTER 9
Integrating Samba
Making It Work with Windows
You may already have a Samba server up and running in your network. Many people
do, because it’s such an easy and convenient solution to offer file sharing to Windows
clients. Few people, however, have a Samba server that is integrated with other operat-
ing systems used in their environment. Achieving such integration is the focus of this
chapter. In this chapter you’ll first read a short section on how to quickly and easily set
up a simple Samba server that offers file sharing and nothing more. In that section you
will use the oi^l]oos` command to add individual user accounts. Sure, that works, but
it’s not a very sophisticated solution if you have many users to manage, because you
need to create every user account twice.
Following the short introduction, there are three sections that explain how to truly
integrate Samba in your network. The first section explains how to integrate Samba with
LDAP, which is useful because it provides one centralized location from which you can
manage user accounts. Next, you’ll read how to set up your Samba server as a Windows
NT 4–style Primary Domain Controller (PDC). This solution explains how you can replace
a current Windows NT 4 server with Samba without your users even noticing the change.
The last section explains how to integrate Samba in Active Directory. It teaches you how
to set up Samba as a member server in Active Directory. Currently, making it more than
a member server still isn’t possible, because Samba version 4, which is supposed to make
that possible, is not in a stable state yet.
Setting Up Samba the Easy Way
In this section you’ll learn the easy way to set up Samba. It explains how you can define
a share and create a Samba user that has access to this share. At the end of this section,
you’ll learn how to test whether this share is working properly.
Setting up Samba the easy way involves the following general steps, each of which is
explained in detail in the sections that follow:
231
232 CHAPTER 9 N
CHAPTER 9 N
234 CHAPTER 9 N
CHAPTER 9 N
236 CHAPTER 9 N
CHAPTER 9 N