Samba Password

 - This is archive documentation, which means it is not supported or valid for recent versions of Zimbra Collaboration.

This zimlet allows you to change the password of your Samba-PDC setup.
The idea is that you have Zimbra authenticating against the Samba-LDAP backend, so you can have Single-Sign-On.

Requirements

For this to work you need to install a perl-cgi script that I developed in a web server. This script has some requirements to:

* You need to install the Samba::LDAP module, you can take my RPMs from [1]
* You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly
* The user who runs the web server (Zimbra) needs to have read rights in the /etc/smbldap-tools files.

The web Server

I am using the Apache server that comes with Zimbra, I recommend this. You need to edit the httpd.conf of this Apache to let it execute the script. At the end of the /opt/zimbra/conf/httpd.conf file add:

  ScriptAlias /cgi-bin/ "/opt/zimbra/httpd-2.0.54/cgi-bin/"
  <Directory "/opt/zimbra/httpd-2.0.54/cgi-bin">
     AllowOverride None
     Options ExecCGI
     Order allow,deny
     Allow from all
  </Directory>

If you want more security you can modify the Allow from options.

Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to Zimbra, and add the execute permission.

You need to configure the cgi, at the firs lines you need to declare your LDAP_HOST and your USER BASE. Run the cgi (perl sambapass.pl) to see if all the modules are ok.

restart Apache: zmapachectl stop; zmapachectl start

Allow the Proxy Server

zmprov mc default zimbraProxyAllowedDomains "yourdomain"

Deploy the Zimlet

This is easy: zmzimlet deploy com_zimbra_samba.zip and restart tomcat: /opt/zimbra/bin/tomcat restart

Download

You can get it from here: http://blog.it-linux.cl/pbruna/downloads/samba_zimlet.tgz Let me know if you have any doubts