[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kroupware
Subject:    Re: Integration of Kolab 3 with Samba4 LDAP
From:       Christian Tardif <christian.tardif () servinfo ! ca>
Date:       2013-05-22 4:07:32
Message-ID: 519C4484.4060509 () servinfo ! ca
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,

I have an environment where I run two LDAP servers (samba4+ 389) in the 
same machine. To achieve this, I just added a second interface on my 
server, and made sure to attach every ldap server to only one interface. 
Easy to do on the samba side (in smb.conf, use "interfaces" and "bind 
interfaces only" to attach samba to a particular interface). On the 389, 
you need to modify /etc/dirsrv/<directory instance>/dse.ldif (while the 
directory server is down). Just add
     nssldap-listenhost: <desired ip>
just below nssldap-port and restart the 389 directory server to have it 
hooked to the other network interface. You now have two ldap servers 
running on the same machine.

But that does help much into integrating Samba4 to Kolab.

I did that in the past (when things were much simpler) to integrate 
samba 3 to kolab 2. That was working, but samba 3 was not so hungry 
about ldap requirements. Now, if you want to seemlessly intergrate 
Samba4 into a windows environment (and be able to use Windows tools to 
deal with the samba domain), you'll find it difficult to integrate with 
Kolab 3, and probably break numerous things.  That's my two cents on the 
subject.

Christian...

/SVP, pensez ŕ l'environnement avant d'imprimer ce message./

On 21/05/2013 06:29, Borut Pinter wrote:
> 
> Mat,
> 
> I thank you for your reply. However I'm not sure this will work as 
> both of these (samba4 and Kolab) use LDAP for user database.
> 
> I'm not sure how to run two LDAP servers on the same machine and I 
> didn't find anywhere how I can setup kolab with different LDAP server 
> or other kind of user database the it's 386 Directory Server for now.
> 
> If there is a way I can run 2 LDAP servers (one form samba4 and the 
> other from Kolab) I could do as you suggested but I'm not really sure.
> 
> Perfect soulution for me would be that both (Kolab and Samba) would 
> use just one common LDAP server.
> 
> Is this possible?
> 
> best regards,
> 
> Borut.
> 
> 21.05.2013 12:00, je kolab-users-request@kolab.org napisal
> 
> > 
> > Subject: Re: Integration of Kolab 3 with Samba4 LDAP
> > Content-Type: text/plain; charset=UTF-8;
> > format=flowed
> > Message-ID: <2375414dab2ec8ca94233f78c8b41399@cantinbrothers.ca  \
> >                 <mailto:2375414dab2ec8ca94233f78c8b41399@cantinbrothers.ca>>
> > Date: Mon, 20 May 2013 20:51:39 -0700
> > In-Reply-To: <b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si  \
> >                 <mailto:b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si>>
> > References: <b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si  \
> > <mailto:b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si>> To:kolab-users@kolab.org  \
> >                 <mailto:kolab-users@kolab.org>
> > MIME-Version: 1.0
> > Content-Transfer-Encoding: 8bit
> > Precedence: list
> > From: Mat Cantin <mat@cantinbrothers.ca  <mailto:mat@cantinbrothers.ca>>
> > Message: 4
> > 
> > I recommend looking at the LSC Project to sync the two user databases
> > up.
> > 
> > http://lsc-project.org/wiki/The LSC mailing list is pretty good if you need help \
> > setting it up. 
> > --
> > Mat
> > 
> > 
> > On 2013-05-20 7:59, Borut Pinter wrote:
> > > Hello, I have just deployed a new samba4 server as DC for windows 
> > > network. I would like to add Kolab 3 as groupware to the same user 
> > > base and I was wondering if I can use samba4 AD or LDAP also for 
> > > Kolab 3? All the instructions I have found for Kolab 3 only use the 
> > > LDAP that comes with Kolab 3. If there is a way I could do this I 
> > > would like some pointers in how this can be done. regards, Borut. -- 
> > > Dedomena - Obvladovanje Podatkov in Informacij, Borut Pinter, s.p. 
> > > NemÄ?avci 34 9000 Murska Sobota tel.: +386(0)41-343-616 e-mail: 
> > > borut.pinter@dedomena.si <mailto:borut.pinter@dedomena.si> 
> > > _______________________________________________ Kolab-users mailing 
> > > list Kolab-users@kolab.org <mailto:Kolab-users@kolab.org> 
> > > https://www.intevation.de/mailman/listinfo/kolab-users
> > 
> 
> 
> _______________________________________________
> Kolab-users mailing list
> Kolab-users@kolab.org
> https://www.intevation.de/mailman/listinfo/kolab-users


[Attachment #5 (text/html)]

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Hi,<br>
      <br>
      I have an environment where I run two LDAP servers (samba4+ 389)
      in the same machine. To achieve this, I just added a second
      interface on my server, and made sure to attach every ldap server
      to only one interface. Easy to do on the samba side (in smb.conf,
      use "interfaces" and "bind interfaces only" to attach samba to a
      particular interface). On the 389, you need to modify
      /etc/dirsrv/&lt;directory instance&gt;/dse.ldif (while the
      directory server is down). Just add<br>
      &nbsp;&nbsp;&nbsp; nssldap-listenhost: &lt;desired ip&gt; <br>
      just below nssldap-port and restart the 389 directory server to
      have it hooked to the other network interface. You now have two
      ldap servers running on the same machine.<br>
      <br>
      But that does help much into integrating Samba4 to Kolab. <br>
      <br>
      I did that in the past (when things were much simpler) to
      integrate samba 3 to kolab 2. That was working, but samba 3 was
      not so hungry about ldap requirements. Now, if you want to
      seemlessly intergrate Samba4 into a windows environment (and be
      able to use Windows tools to deal with the samba domain), you'll
      find it difficult to integrate with Kolab 3, and probably break
      numerous things.&nbsp; That's my two cents on the subject.<br>
      <div class="moz-signature">
        <p>Christian...</p>
        <p><i>SVP, pensez &agrave; l'environnement avant d'imprimer ce \
message.</i></p>  </div>
      On 21/05/2013 06:29, Borut Pinter wrote:<br>
    </div>
    <blockquote cite="mid:3b566eeba8f2b9a5d8a71fc3cf15d438@dedomena.si"
      type="cite">
      <p>Mat,</p>
      <p>&nbsp;</p>
      <p>I thank you for your reply. However I'm not sure this will work
        as both of these (samba4 and Kolab) use LDAP for user database.</p>
      <p>I'm not sure how to run two LDAP servers on the same machine
        and I didn't find anywhere how I can setup kolab with different
        LDAP server or other kind of user database the it's 386
        Directory Server for now.</p>
      <p>If there is a way I can run 2 LDAP servers (one form samba4 and
        the other from Kolab) I could do as you suggested but I'm not
        really sure.</p>
      <p>Perfect soulution for me would be that both (Kolab and Samba)
        would use just one common LDAP server.</p>
      <p>Is this possible?</p>
      <p>&nbsp;</p>
      <p>best regards,</p>
      <p>&nbsp;</p>
      <p>Borut.</p>
      <p>21.05.2013 12:00, je <a class="moz-txt-link-abbreviated" \
href="mailto:kolab-users-request@kolab.org">kolab-users-request@kolab.org</a> \
napisal</p>  <blockquote type="cite" style="padding-left:5px;
        border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored \
--><!-- head ignored --><!-- meta ignored -->  <pre>&nbsp;</pre>
        <pre>Subject: Re: Integration of Kolab 3 with Samba4 LDAP
Content-Type: text/plain; charset=UTF-8;
 format=flowed
Message-ID: &lt;<a moz-do-not-send="true" \
href="mailto:2375414dab2ec8ca94233f78c8b41399@cantinbrothers.ca">2375414dab2ec8ca94233f78c8b41399@cantinbrothers.ca</a>&gt;
                
Date: Mon, 20 May 2013 20:51:39 -0700
In-Reply-To: &lt;<a moz-do-not-send="true" \
href="mailto:b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si">b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si</a>&gt;
                
References: &lt;<a moz-do-not-send="true" \
href="mailto:b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si">b4b4f4404f2cc1f9431b0ae184a07845@dedomena.si</a>&gt;
                
To: <a moz-do-not-send="true" \
                href="mailto:kolab-users@kolab.org">kolab-users@kolab.org</a>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
From: Mat Cantin &lt;<a moz-do-not-send="true" \
                href="mailto:mat@cantinbrothers.ca">mat@cantinbrothers.ca</a>&gt;
Message: 4

I recommend looking at the LSC Project to sync the two user databases 
up.

<a moz-do-not-send="true" \
href="http://lsc-project.org/wiki/">http://lsc-project.org/wiki/</a>The LSC mailing \
list is pretty good if you need help setting it up.

--
Mat


On 2013-05-20 7:59, Borut Pinter wrote:</pre>
        <blockquote type="cite" style="padding-left:5px;
          border-left:#1010ff 2px solid; margin-left:5px; width:100%">Hello,
          I have just deployed a new samba4 server as DC for windows
          network. I would like to add Kolab 3 as groupware to the same
          user base and I was wondering if I can use samba4 AD or LDAP
          also for Kolab 3? All the instructions I have found for Kolab
          3 only use the LDAP that comes with Kolab 3. If there is a way
          I could do this I would like some pointers in how this can be
          done. regards, Borut. -- Dedomena - Obvladovanje Podatkov in
          Informacij, Borut Pinter, s.p. Nem&Auml;&#141;avci 34 9000 Murska Sobota
          tel.: +386(0)41-343-616 e-mail: <a moz-do-not-send="true"
            href="mailto:borut.pinter@dedomena.si">borut.pinter@dedomena.si</a>
          _______________________________________________ Kolab-users
          mailing list <a moz-do-not-send="true"
            href="mailto:Kolab-users@kolab.org">Kolab-users@kolab.org</a>
          <a moz-do-not-send="true"
            href="https://www.intevation.de/mailman/listinfo/kolab-users">https://www.intevation.de/mailman/listinfo/kolab-users</a></blockquote>
  <pre>&nbsp;</pre>
      </blockquote>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Kolab-users mailing list
<a class="moz-txt-link-abbreviated" \
href="mailto:Kolab-users@kolab.org">Kolab-users@kolab.org</a> <a \
class="moz-txt-link-freetext" \
href="https://www.intevation.de/mailman/listinfo/kolab-users">https://www.intevation.de/mailman/listinfo/kolab-users</a></pre>
  </blockquote>
    <br>
  </body>
</html>



_______________________________________________
Kolab-users mailing list
Kolab-users@kolab.org
https://www.intevation.de/mailman/listinfo/kolab-users

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic