Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
 HP CIFS Server 3.0g Administrator's Guide version A.02.03.01: HP-UX 11i v1, v2 and v3 > Chapter 6 LDAP Integration Support

Configuring the HP CIFS Server
» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

spacerspacerspacer
spacer
spacer
  		 
 

You must set up and configure your HP CIFS Server to enable the LDAP feature support.

LDAP Configuration Parameters

The following is the list of new global parameters available for you to configure the HP CIFS Server to enable the LDAP feature. These parameters are set in the /etc/opt/samba/smb.conf file under global parameters.

[global]

Any global setting defined here will be used by the HP CIFS Server with the LDAP support.

Table 6-3 Global Parameters

Parameter

Description
ldap port Specifies the TCP port number used to connect to the LDAP directory server. By default, this parameter is set to 389.
ldap serverSpecifies the host name of the Directory Server where you want to store your data.
ldap suffixSpecifies the base of the directory tree where you want to add users and machine accounts information. It is also used as the Distinguished Name (DN) of the search base, which tells LDAP where to start the search for the entry. For example, if your base DN is "dc=org, dc=hp, dc=com", then you need to set the value of ldapsuffix = "dc=org, dc=hp, dc=com".
ldap user suffixSpecifies the base of the directory tree where you want to add users information. If you do not specify this parameter, HP CIFS Server uses the value of ldap suffix. For example, ldap user suffix = "ou=People".
ldap group suffixSpecifies the base of the directory tree where you want to add groups information. If you do not specify this parameter, HP CIFS Server uses the value of ldap suffix instead. For example, ldap group suffix = "ou=Groups".
ldap admin dn Specifies the user Distinguished Name (DN) used by the HP CIFS Server to connect to the LDAP directory server when retrieving user account information. The ldap admin dn is used in conjunction with the admin dn password stored in the /var/opt/samba/private/secrets.tdb file. For example, ldap admin dn = "cn = directory manager".
ldap delete dnSpecifies whether a delete operation in the ldapsam deletes the complete entry or only the attributes specific to Samba. The default value is No.
ldap passwd syncSpecifies whether the HP CIFS Server should sync the LDAP password with the NT and LM hashes for normal accounts on a password change. This option can be set to one of three values:

  • Yes: Update the LDAP, NT and LM passwords and update the pwdLastSet time.

  • No: Update NT and LM passwords and update the pwdLastSet time.

  • Only: Only update the LDAP password and let the LDAP server do the rest.

The default value is No.

ldap replication sleep When Samba is requested to write to a read-only LDAP replica, it is redirected to talk to the read-write master server. This server then replicates the changes back to the local server. The replication might take some seconds, especially over slow links. Certain client activities can become confused by the 'success' that does not immediately change the LDAP back-end's data. This option simply causes Samba to wait a short time and allows the LDAP server to catch up. The value is specified in milliseconds, the maximum value is 5000 (5 seconds). By default, ldapreplication sleep = 1000 (1 second).
ldap timeoutSpecifies in seconds how long the HP CIFS Server waits for the LDAP server to respond to the connect request if the LDAP server is down or unreachable. The defualt value is 15 (in seconds).
ldap ssl Specifies the Secure Sockets Layer (SSL) support. HP CIFS Server A.02.03 or later supports theldap ssl = start_tls option. Specifies Yes to enable this feature using the port number 636 to connect to the LDAP directory server. If you choose to use Start TLS, set it to start_tls to enable SSL using port number 389 to connect to the LDAP directory server. To disable SSL , set it to No. By default, this parameter is set to No.

 

Configuring LDAP Feature Support

After installing the HP CIFS Server, the existing configuration continues to operate as currently configured. To enable the LDAP support, you must configure the relative LDAP configuration parameters in the /etc/opt/samba/smb.conf file by using the SWAT tool or the editor.

NOTE: HP recommends that new installation customers run the samba_setup program to set up and configure the HP CIFS Server.

You can quickly run the samba_setup program to configure the HP CIFS Server with the LDAP feature support as follows:

  1. Run the following commands to enable the LDAP feature: 

    $ export PATH=$PATH:/opt/samba/bin
$ samba_setup

    When running the samba_setup program, you will be asked whether you want to use LDAP or not. Press Yes to use LDAP, and press No to disable LDAP.

  2. Reply to the samba_setup program to configure the following global LDAP parameters in the /etc/opt/samba/smb.conf file:

    • ldap server

    • ldap port

    • ldap suffix

    • ldap admin dn

    • ldap ssl

    • ldap user suffix

    • ldap group suffix

    • ldap idmap suffix

    • ldap machine suffix

    • ldap delete dn

    • ldap passwd sync

    • ldap replication sleep

    • ldap timeout

    See “LDAP Configuration Parameters”, for detailed information on how to configure these new parameters.



Migrating Your data to the Directory Server
  		 


Creating Samba Users in the Directory  
Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2007 Hewlett-Packard Development Company, L.P.