Users / Group Migration from AD to Openldap

Latest response

Hello,

Is there any way or tool which would be helpful in migrating AD users/groups to openldap ?

Current requirement and environment is as follows:

  1. Active Directory on win2008

  2. Users are authenticating from MAC and Windows clients against AD.

  3. Access to ISILION storage is also using AD.

To replace Ad we are planning to go with RHEL6.X with openldap.

  1. We need tools to migrate users/groups and schema from AD to openldap

  2. Access to Samba share using opendap credentials. Here we are planning to use https://access.redhat.com/site/articles/17303

Note: The password sync will only be one sided, i.e. from Samba to LDAP.

Is there any way if user change password in ldap will sync to samba ?

Thanks in advanced

Regards,

Santosh

SB
Log in to join the conversation

Responses

ir. Jan Gerrit Kootstra's picture Guru 6222 points
22 August 2013 1:33 AM

Hello Santosh,

This only a reply to the last question:

If you perform the steps/hints in

https://access.redhat.com/site/articles/17303

there will not be any password sync at all, Samba will check users&passwords in de ldap "database", it will not use the smbpasswd files anymore.

Kind reagrds,

Jan Gerrit

SB Active Contributor 365 points
21 August 2013 4:22 PM

Hello Jan,

Thanks for the prompt reply.

As per the KB If users want to change their password then they have to ssh to the Samba server and run smbpasswd so that both passwords will be changed.

So I was confused.

--- > there will not be any password sync at all, Samba will check users&passwords in de ldap "database", it will not use the smbpasswd files anymore.

Does it mean if change is password done by using ldapmodify or any tool or by passwd command, it should allow samba user to authenticate using new password. am I correct ?

Regards,

Santosh

ir. Jan Gerrit Kootstra's picture Guru 6222 points
22 August 2013 8:24 AM

Santosh,

This is my understanding of the matter.

Unfortunately I do not have a working test environment at the moment.

Rereading the KB I understand: the smbpasswd configuration is reconfigured to update the ldap credentials.

So in my understanding, all 3 methods you name are updating the same password field in ldap.

If I am mistaken, I hope someone reading this thread will correct me.

Regards,

Jan Gerrit

SB Active Contributor 365 points
22 August 2013 8:34 AM

Yes Jan, you are correct in understanding my question.

Regards,

Santosh

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.