forum.lissyara.su

Код: Выделить всё

# Global parameters
[global]
	workgroup = MY
	server string = Samba Server
	netbios name = mysrv
    interfaces = eth1
	bind interfaces only = Yes

# passwd backend
	encrypt passwords = yes
	passdb backend = ldapsam:ldap://127.0.0.1
	enable privileges = yes
	pam password change= Yes
	passwd program = /usr/bin/passwd %u
	passwd chat = *New*UNIX*password* %nn *ReType*new*UNIX*password* %nn * passwd:*all*authentication*tokens*updated*successfully*
	unix password sync = Yes

# Log options
	log level = 1
	log file = /var/log/samba/%m
	max log size = 50
	syslog = 0

# Name resolution
	name resolve order = wins bcast host

# misc
	timeserver = Yes
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192	

# printers - configured to use CUPS and automatically load them
	load printers = no
	show add printer wizard = No

# scripts invoked by samba
	add user script               = /usr/local/sbin/smbldap-useradd -m %u
	delete user script            = /usr/local/sbin/smbldap-userdel %u
	add group script              = /usr/local/sbin/smbldap-groupadd -p %g
	delete group script           = /usr/local/sbin/smbldap-groupdel %g
	add user to group script      = /usr/local/sbin/smbldap-groupmod -m %u %g
	delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u %g
	set primary group script      = /usr/local/sbin/smbldap-usermod -g %g %u
	add machine script            = /usr/local/sbin/smbldap-useradd -w %m

# LDAP-iConfiguration
	ldap delete dn                = Yes
	ldap ssl                      = off
	ldap passwd sync              = Yes
	ldap suffix                   = dc=my,dc=local
	ldap machine suffix           = ou=Computers
	ldap user suffix              = ou=People
	ldap group suffix             = ou=Groups
	ldap idmap suffix             = ou=Idmap
	ldap admin dn                 = cn=admin,dc=my,dc=local
	idmap backend                 = ldap:ldap://my.kafla.local
	idmap uid                     = 10000-20000
	idmap gid                     = 10000-20000

# logon options
#	logon script = logon.bat
#	logon path = \%Lprofiles%u
#	logon path =
#	logon home = \%L%U
#	logon drive = H:

# setting up as domain controller
#	username map = /usr/local/samba/usermap
	preferred master = Yes
	wins support = Yes
	domain logons = Yes
	domain master = Yes
	local master = Yes
	os level = 64
	map acl inherit = Yes
#	unix charset     = UTF8

Код: Выделить всё

interfaces eth1, lo
passdb backend =ldapsam: ldap://localhost
idmap backend = ldap:ldap://localhost

Код: Выделить всё

id <пользователь самбы>
getent passwd 
getent group

Код: Выделить всё

sub check {
        local($user, $group) = @_;
	if ($opt{K} && ($user =~ m/\@/)) {
		@tmpuser = split(/\@/, $user);
		$user = "$tmpuser[1]\\$tmpuser[0]";
	}			
	@m_=split(/\\/,$user);
	$user = $m_[1];
	$s=`/usr/local/bin/net ads search 'cn=$user' -U user%password -P | grep memberOf | grep -Eo ' CN=[A-Za-z-]+' | sed 's/ CN=//'`;
	if ($s=~/$group/){
	    return 'OK';
	};
        return 'ERR';
}