Samba+LDAP

[pav5088]

I would like to use OPSI on my Samba+LDAP server. Samba can only use one user backend, so because I'm using LDAP I can't have the pcpatch and opsiconfd users stored locally. Instead I've manually put pcpatch and opsiconfd into LDAP, and tried to make the configuration correct ie. I've given them home directories of /var/lib/opsi and also added the opsiconfd user to the "opsiadmin" group in LDAP, and the "shadow" group in the local /etc/group file. After these changes I fix permissions with "opsi-setup --set-rights".

Question - Why does opsiconfd need read access to /etc/shadow? Does this mean OPSI doesn't use NSS and therefore can't look up shadow info from LDAP or other sources?

Things are obviously not working for me - I can't start opsiconfd. This is my error message :
# /etc/init.d/opsiconfd start
Starting opsi config service..No directory, logging in with HOME=/
.... (failed).

...I don't know how to proceed. Is it even possible?

[d.oertel]

Hi,

we also use ldap as central user database for samba.
You need to have in LDAP:
* user pcpatch
* group pcpatch
* group opsiadmin

user opsiconfd should be a local (system) user (and samba do not need to know about this user)

does this help ?

regards
d.oertel

[pav5088]

Yes, that certainly did the trick. Thankyou very much for your time.