Using PassSync, changing the passwords from the AD/NT side will also
change passwords on the Fedora DS side. It will not however change the
Samba passwords. If you have "ldap passwd sync = yes" in your Samba
config, then you can use smbpasswd to change all passwords at the same
time. If you migrate over to an AD server in place of Samba, you can use
domain logins and have users change their password in Windows which
would also change the Fedora DS password as well.
Jeff
Phil Allred wrote:
Here at Brooklyn Law School, we use Fedora DS together with a samba
schema quite succesfully. All students and most faculty log in to
lab computers and desktops that are members of a Samba domain. We
avoid using NT servers as much as possible for open source reasons,
but our faculty is hoping we can move them to an exchange server
running on NT 2003. In a test environment, we were able to get
password sync happening between an NT server and a replica of our DS,
but are wondering how to keep our samba passwords updated. Currently,
we have a web front end pointed at a perl script loosely based on the
smb-ldap scripts from IDEALX. These keep our sambantpassword,
sambalmpassword, and unix passwords synced.
If we continue to use this script to update passwords on Fedora DS,
will fedora pick up the password and send it down to the windows
server? I assume there is not much I could do to get it to work in
the other direction, which would be ok -- we would require users to
continue to change their passwords through our web front end.
Any thoughts or suggestions would be greatly appreciated.
Phil Allred
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Jeff Gamsby
Center for X-Ray Optics
Lawrence Berkeley National Laboratory
(510) 486-7783
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
