From owner-freebsd-questions@FreeBSD.ORG  Sat Mar 13 09:25:41 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5FAC016A4CE
	for <freebsd-questions@freebsd.org>;
	Sat, 13 Mar 2004 09:25:41 -0800 (PST)
Received: from as9-2-1.bi.s.bonet.se (as9-2-1.bi.s.bonet.se [217.215.7.177])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2703743D45
	for <freebsd-questions@freebsd.org>;
	Sat, 13 Mar 2004 09:25:40 -0800 (PST)
	(envelope-from peo@intersonic.se)
Received: from intersonic.se (kreutzman.h.inter-sonic.com [172.16.2.17])
	by as9-2-1.bi.s.bonet.se (Postfix) with ESMTP
	id E49062890AC; Sat, 13 Mar 2004 18:25:35 +0100 (CET)
Message-ID: <40534413.2010805@intersonic.se>
Date: Sat, 13 Mar 2004 18:25:39 +0100
From: Per olof Ljungmark <peo@intersonic.se>
Organization: Intersonic AB
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040211
X-Accept-Language: en-us, en, sv
MIME-Version: 1.0
To: Antoine Jacoutot <ajacoutot@lphp.org>
References: <4051DBE9.2010002@intersonic.se>
	<1079119055.40520ccf3007c@webmail.lphp.org>
In-Reply-To: <1079119055.40520ccf3007c@webmail.lphp.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: FreeBSD <freebsd-questions@freebsd.org>
Subject: Re: nss_ldap/pam_ldap, what am I missing?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Mar 2004 17:25:41 -0000

Antoine Jacoutot wrote:
>>The ultimate goal is to create a Samba PDC, but seems far away ay the 
>>moment...
> 
> I have this kind of setup working perfectly. Tell me what you need.

I need to figure out the interaction between OpenLDAP and the PAM
system. LDAP is working fine, Samba is fine.

/usr/local/etc/openldap/ldap.conf:
(/etc/ldap.conf and /usr/local/etc/ldap.conf are symlinked to above)

HOST    127.0.0.1
BASE    dc=<mydomain>,dc=<dom>
nss_base_passwd dc=<mydomain>,dc=<dom>?sub
nss_base_shadow dc=<mydomain>,dc=<dom>?sub
nss_base_group  ou=Groups,dc=<mydomain>,dc=<dom>?one
ssl             no
pam_password    md5

I guess what I lack is understanding of how the PAM system works, what
to add in pam.d and finally what (password) scripts would be useful when
using Samba 3 in FreeBSD.

If you have a similar setup working I am very interested in how it was
accomplished.

Any input highly appriciated!

Per olof