On 2006/03/27 18:38, Steve Shockley wrote: > J wrote: > >I've got an openbsd 3.8 box that I want joined to a win2k Active > >Directory domain. > > As a client, or as a server? If it's a server, try googling "samba ldap > authentication" (no quotes).
These usually assume winbind, which doesn't work with OpenBSD. It's probably necessary to pull the user list by LDAP, generate accounts to go in /etc/passwd, and find a way to make up UIDs for them (ldapsearch and a shell script may be coerced into doing this; some other language will likely be simpler). There's an old article mentioning some scripts to do this, but the ftp server hosting them is no more. Perhaps someone has a copy. (http://undeadly.org/cgi?action=article&sid=20020227003732) > I haven't done this with Samba, but I've used LDAP to authenticate Apache > users on OpenBSD against AD. This is simpler (as is pulling Active Directory data to e.g. validate recipient email addresses when front-ending some Windows- based mail server.