Samba Password: Difference between revisions
No edit summary |
No edit summary |
||
Line 8: | Line 8: | ||
* You need to install the Samba::LDAP module, you can take my rpms from [http://www.it-linux.cl/pbruna/?p=6] | * You need to install the Samba::LDAP module, you can take my rpms from [http://www.it-linux.cl/pbruna/?p=6] | ||
* You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly | * You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly | ||
* The user who runs the web server (zimbra) needs to have read rights in the /etc/smbldap-tools files. | |||
'''The web Server''' | '''The web Server''' | ||
Line 24: | Line 25: | ||
Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to zimbra, and add the excute permission. | Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to zimbra, and add the excute permission. | ||
You need to configure the cgi, at the firs lines you need to declare your LDAP_HOST and your USER BASE. Run the cgi (perl sambapass.pl) to see if all the modules are ok. | |||
restart Apache: zmapachectl stop; zmapachectl start | |||
'''Deploy the Zimlet''' | |||
This is easy: '''zmzimlet deploy com_zimbra_samba.zip''' and restart tomcat:''' /opt/zimbra/bin/tomcat restart''' | |||
'''Download''' | |||
You can get it from here: http://www.it-linux.cl/pbruna/?p=7 | |||
Let me know if you have any doubs | |||
Let me know if you have any doubs. |
Revision as of 23:06, 9 November 2006
This zimlet allows you to change the password of your Samba-PDC setup.
The idea is that you have Zimbra authenticating agains the Samba-LDAP backend, so you can have Single-Sing-On.
Requirements
For this to work you need to install a perl-cgi script that i develop in a web server. This script has some requirements to:
* You need to install the Samba::LDAP module, you can take my rpms from [1] * You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly * The user who runs the web server (zimbra) needs to have read rights in the /etc/smbldap-tools files.
The web Server
Im using the Apache server that comes with zimbra, i recommend this. You need to edit the httpd.conf of this Apache to let it execute the script. At the end of the /opt/zimbra/conf/httpd.conf file add:
ScriptAlias /cgi-bin/ "/opt/zimbra/httpd-2.0.54/cgi-bin/" <Directory "/opt/zimbra/httpd-2.0.54/cgi-bin"> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory>
If you want more security you can modify the Allow from options.
Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to zimbra, and add the excute permission.
You need to configure the cgi, at the firs lines you need to declare your LDAP_HOST and your USER BASE. Run the cgi (perl sambapass.pl) to see if all the modules are ok.
restart Apache: zmapachectl stop; zmapachectl start
Deploy the Zimlet
This is easy: zmzimlet deploy com_zimbra_samba.zip and restart tomcat: /opt/zimbra/bin/tomcat restart
Download
You can get it from here: http://www.it-linux.cl/pbruna/?p=7
Let me know if you have any doubs
Let me know if you have any doubs.