How it possible to use Samba as a Fileserver with AD, but using another LDAP server for SSH-Login?
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file server which uses the AD for handling identities and auth, but in future, the system should be able to authenticate against the LDAP-Server for ssh and the Windows Users should not be able to log in.
I have some Ideas how I could work this issue out:
- Setup only LDAP and use Kerberos Inter-realm trust (don't know if this can work)
Install the samba fileserver in a container like LXC
Using
default_domain_suffixin SSSD to set up the LDAP as primary ID Provider and just specify the AD Domain in the Samba Configuration (not sure if this would work)
In sum: What is the correct way of setting up LDAP and AD on one Linux machine and use AD only for Samba and the LDAP Server for general authentication in the system?
samba ldap active-directory kerberos sssd
edited Jul 5 at 13:22
SivaPrasath
3,69811636
asked Jul 5 at 12:16
stefan
1
add a comment |Â
up vote
0
down vote
favorite
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file server which uses the AD for handling identities and auth, but in future, the system should be able to authenticate against the LDAP-Server for ssh and the Windows Users should not be able to log in.
I have some Ideas how I could work this issue out:
- Setup only LDAP and use Kerberos Inter-realm trust (don't know if this can work)
Install the samba fileserver in a container like LXC
Using
default_domain_suffixin SSSD to set up the LDAP as primary ID Provider and just specify the AD Domain in the Samba Configuration (not sure if this would work)
In sum: What is the correct way of setting up LDAP and AD on one Linux machine and use AD only for Samba and the LDAP Server for general authentication in the system?
samba ldap active-directory kerberos sssd
edited Jul 5 at 13:22
SivaPrasath
3,69811636
asked Jul 5 at 12:16
stefan
1
Why not use the AD for authn/authz on Linux instead of a whole separate LDAP server? We use Active Directory for our user/group/authentication/authorization via SSSD and it works just fine.
– jayhendren
Jul 5 at 19:25
Samba DC supports rfc2307 which is the extension that allows using LDAP as NIS. Enable that and you can use Samba for both Windows users and other Linux authentication including SSH
– Hesham Ahmed
Jul 8 at 19:47
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file server which uses the AD for handling identities and auth, but in future, the system should be able to authenticate against the LDAP-Server for ssh and the Windows Users should not be able to log in.
I have some Ideas how I could work this issue out:
- Setup only LDAP and use Kerberos Inter-realm trust (don't know if this can work)
Install the samba fileserver in a container like LXC
Using
default_domain_suffixin SSSD to set up the LDAP as primary ID Provider and just specify the AD Domain in the Samba Configuration (not sure if this would work)
In sum: What is the correct way of setting up LDAP and AD on one Linux machine and use AD only for Samba and the LDAP Server for general authentication in the system?
samba ldap active-directory kerberos sssd
edited Jul 5 at 13:22
SivaPrasath
3,69811636
asked Jul 5 at 12:16
stefan
1
We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server.
Now we would like to set up a Samba file server which uses the AD for handling identities and auth, but in future, the system should be able to authenticate against the LDAP-Server for ssh and the Windows Users should not be able to log in.
I have some Ideas how I could work this issue out:
- Setup only LDAP and use Kerberos Inter-realm trust (don't know if this can work)
Install the samba fileserver in a container like LXC
Using
default_domain_suffixin SSSD to set up the LDAP as primary ID Provider and just specify the AD Domain in the Samba Configuration (not sure if this would work)
In sum: What is the correct way of setting up LDAP and AD on one Linux machine and use AD only for Samba and the LDAP Server for general authentication in the system?
samba ldap active-directory kerberos sssd
edited Jul 5 at 13:22
SivaPrasath
3,69811636
asked Jul 5 at 12:16
stefan
1
edited Jul 5 at 13:22
SivaPrasath
3,69811636
edited Jul 5 at 13:22
SivaPrasath
3,69811636
edited Jul 5 at 13:22
SivaPrasath
3,69811636
3,69811636
asked Jul 5 at 12:16
stefan
1
asked Jul 5 at 12:16
stefan
1
asked Jul 5 at 12:16
stefan
1
1
Why not use the AD for authn/authz on Linux instead of a whole separate LDAP server? We use Active Directory for our user/group/authentication/authorization via SSSD and it works just fine.
– jayhendren
Jul 5 at 19:25
Samba DC supports rfc2307 which is the extension that allows using LDAP as NIS. Enable that and you can use Samba for both Windows users and other Linux authentication including SSH
– Hesham Ahmed
Jul 8 at 19:47
add a comment |Â
Why not use the AD for authn/authz on Linux instead of a whole separate LDAP server? We use Active Directory for our user/group/authentication/authorization via SSSD and it works just fine.
– jayhendren
Jul 5 at 19:25
Samba DC supports rfc2307 which is the extension that allows using LDAP as NIS. Enable that and you can use Samba for both Windows users and other Linux authentication including SSH
– Hesham Ahmed
Jul 8 at 19:47
Why not use the AD for authn/authz on Linux instead of a whole separate LDAP server? We use Active Directory for our user/group/authentication/authorization via SSSD and it works just fine.
– jayhendren
Jul 5 at 19:25
Why not use the AD for authn/authz on Linux instead of a whole separate LDAP server? We use Active Directory for our user/group/authentication/authorization via SSSD and it works just fine.
– jayhendren
Jul 5 at 19:25
Samba DC supports rfc2307 which is the extension that allows using LDAP as NIS. Enable that and you can use Samba for both Windows users and other Linux authentication including SSH
– Hesham Ahmed
Jul 8 at 19:47
Samba DC supports rfc2307 which is the extension that allows using LDAP as NIS. Enable that and you can use Samba for both Windows users and other Linux authentication including SSH
– Hesham Ahmed
Jul 8 at 19:47
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f453608%2fhow-it-possible-to-use-samba-as-a-fileserver-with-ad-but-using-another-ldap-ser%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Why not use the AD for authn/authz on Linux instead of a whole separate LDAP server? We use Active Directory for our user/group/authentication/authorization via SSSD and it works just fine.
– jayhendren
Jul 5 at 19:25
Samba DC supports rfc2307 which is the extension that allows using LDAP as NIS. Enable that and you can use Samba for both Windows users and other Linux authentication including SSH
– Hesham Ahmed
Jul 8 at 19:47