Samba Password: Difference between revisions
No edit summary |
No edit summary |
||
(13 intermediate revisions by 3 users not shown) | |||
Line 1: | Line 1: | ||
{{Archive}}This zimlet allows you to change the password of your Samba-PDC setup.<br/> | |||
The idea is that you have Zimbra authenticating against the Samba-LDAP backend, so you can have Single-Sign-On. | |||
This zimlet allows you to change the password of your Samba-PDC setup.<br/> | |||
The idea is that you have Zimbra authenticating | |||
'''Requirements''' | '''Requirements''' | ||
For this to work you need to install a perl-cgi script that | For this to work you need to install a perl-cgi script that I developed in a web server. This script has some requirements to: | ||
* You need to install the Samba::LDAP module, you can take my | * You need to install the Samba::LDAP module, you can take my RPMs from [http://www.it-linux.cl/pbruna/?p=6] | ||
* You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly | * You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly | ||
* The user who runs the web server (Zimbra) needs to have read rights in the /etc/smbldap-tools files. | |||
'''The web Server''' | |||
I am using the Apache server that comes with Zimbra, I recommend this. You need to edit the httpd.conf of this Apache to let it execute the script. At the end of the /opt/zimbra/conf/httpd.conf file add: | |||
ScriptAlias /cgi-bin/ "/opt/zimbra/httpd-2.0.54/cgi-bin/" | |||
<Directory "/opt/zimbra/httpd-2.0.54/cgi-bin"> | |||
AllowOverride None | |||
Options ExecCGI | |||
Order allow,deny | |||
Allow from all | |||
</Directory> | |||
If you want more security you can modify the ''Allow from'' options. | |||
Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to Zimbra, and add the execute permission. | |||
You need to configure the cgi, at the firs lines you need to declare your LDAP_HOST and your USER BASE. Run the cgi (perl sambapass.pl) to see if all the modules are ok. | |||
restart Apache: zmapachectl stop; zmapachectl start | |||
'''Allow the Proxy Server''' | |||
zmprov mc default zimbraProxyAllowedDomains "yourdomain" | |||
'''Deploy the Zimlet''' | |||
This is easy: '''zmzimlet deploy com_zimbra_samba.zip''' and restart tomcat:''' /opt/zimbra/bin/tomcat restart''' | |||
'''Download''' | |||
You can get it from here: http://blog.it-linux.cl/pbruna/downloads/samba_zimlet.tgz | |||
Let me know if you have any doubts | |||
{{Article_Footer|unknown|11/9/2006}} | |||
[[Category:Samba]] | |||
[[Category:Zimlets]] |
Latest revision as of 22:59, 23 March 2015
This zimlet allows you to change the password of your Samba-PDC setup.
The idea is that you have Zimbra authenticating against the Samba-LDAP backend, so you can have Single-Sign-On.
Requirements
For this to work you need to install a perl-cgi script that I developed in a web server. This script has some requirements to:
* You need to install the Samba::LDAP module, you can take my RPMs from [1] * You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly * The user who runs the web server (Zimbra) needs to have read rights in the /etc/smbldap-tools files.
The web Server
I am using the Apache server that comes with Zimbra, I recommend this. You need to edit the httpd.conf of this Apache to let it execute the script. At the end of the /opt/zimbra/conf/httpd.conf file add:
ScriptAlias /cgi-bin/ "/opt/zimbra/httpd-2.0.54/cgi-bin/" <Directory "/opt/zimbra/httpd-2.0.54/cgi-bin"> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory>
If you want more security you can modify the Allow from options.
Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to Zimbra, and add the execute permission.
You need to configure the cgi, at the firs lines you need to declare your LDAP_HOST and your USER BASE. Run the cgi (perl sambapass.pl) to see if all the modules are ok.
restart Apache: zmapachectl stop; zmapachectl start
Allow the Proxy Server
zmprov mc default zimbraProxyAllowedDomains "yourdomain"
Deploy the Zimlet
This is easy: zmzimlet deploy com_zimbra_samba.zip and restart tomcat: /opt/zimbra/bin/tomcat restart
Download
You can get it from here: http://blog.it-linux.cl/pbruna/downloads/samba_zimlet.tgz Let me know if you have any doubts