Samba Password

Revision as of 16:01, 26 February 2007 by Pbruna (talk | contribs)

This zimlet allows you to change the password of your Samba-PDC setup.
The idea is that you have Zimbra authenticating agains the Samba-LDAP backend, so you can have Single-Sing-On.

Requirements

For this to work you need to install a perl-cgi script that i develop in a web server. This script has some requirements to:

* You need to install the Samba::LDAP module, you can take my rpms from [1]
* You need to install smbldap-tools in the server where the cgi script is, and configure the files in /etc/smbldap-tools properly
* The user who runs the web server (zimbra) needs to have read rights in the /etc/smbldap-tools files.

The web Server

Im using the Apache server that comes with zimbra, i recommend this. You need to edit the httpd.conf of this Apache to let it execute the script. At the end of the /opt/zimbra/conf/httpd.conf file add:

  ScriptAlias /cgi-bin/ "/opt/zimbra/httpd-2.0.54/cgi-bin/"
  <Directory "/opt/zimbra/httpd-2.0.54/cgi-bin">
     AllowOverride None
     Options ExecCGI
     Order allow,deny
     Allow from all
  </Directory>

If you want more security you can modify the Allow from options.

Then copy the cgi script to the /opt/zimbra/httpd-2.0.54/cgi-bin directory, changes its owners to zimbra, and add the excute permission.

You need to configure the cgi, at the firs lines you need to declare your LDAP_HOST and your USER BASE. Run the cgi (perl sambapass.pl) to see if all the modules are ok.

restart Apache: zmapachectl stop; zmapachectl start

Allow the Proxy Server zmprov mc default zimbraProxyAllowedDomains "yourdomain"

Deploy the Zimlet

This is easy: zmzimlet deploy com_zimbra_samba.zip and restart tomcat: /opt/zimbra/bin/tomcat restart


Download

You can get it from here: http://www.it-linux.cl/pbruna/?p=7

Let me know if you have any doubs

Jump to: navigation, search