From ca0ccee23f9fd57982d8934e957f0c71a919614b Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Sat, 5 Jan 2002 19:27:26 +0000 Subject: merge from 2.2 (This used to be commit 67c6a24344e31c417c8c6f5db27697e268524401) --- docs/docbook/projdoc/Samba-LDAP-HOWTO.sgml | 28 +++++++++++++--------------- 1 file changed, 13 insertions(+), 15 deletions(-) (limited to 'docs/docbook') diff --git a/docs/docbook/projdoc/Samba-LDAP-HOWTO.sgml b/docs/docbook/projdoc/Samba-LDAP-HOWTO.sgml index a3aed0a617..802585d4f2 100644 --- a/docs/docbook/projdoc/Samba-LDAP-HOWTO.sgml +++ b/docs/docbook/projdoc/Samba-LDAP-HOWTO.sgml @@ -1,6 +1,5 @@ - Gerald (Jerry)>Carter> @@ -38,7 +37,7 @@ a guide to LDAP for System Administrators which has a planned release date of early summer, 2002. -It may also be helpful to suppplement the reading of the HOWTO with +It may also be helpful to supplement the reading of the HOWTO with the Samba-PDC-LDAP-HOWTO maintained by Ignacio Coupeau. @@ -67,10 +66,10 @@ databases. -The second problem is that administrators which desired to replicate an +The second problem is that administrators who desired to replicate a smbpasswd file to more than one Samba server were left to use external tools such as rsync(1) and ssh(1) -and write custom, in-house scripts. +and wrote custom, in-house scripts. @@ -99,7 +98,7 @@ comfortable with using an smbpasswd file, simply replace "smbpasswd" with There are a few points to stress about what the --with-ldapsam -does not provide. The LDAP support referred to in the this documentat does not +does not provide. The LDAP support referred to in the this documentation does not include: @@ -113,7 +112,7 @@ include: The second item can be accomplished by using LDAP NSS and PAM modules. LGPL versions of these libraries can be obtained from PADL Software (http://www.padl.com/). However, -the details of configuring these packages i beyond the scope of this document. +the details of configuring these packages are beyond the scope of this document. @@ -125,8 +124,8 @@ the details of configuring these packages i beyond the scope of this document. The LDAP samdb code in 2.2.3 has been developed and tested using the OpenLDAP 2.0 server and client libraries. The same code should be able to work with Netscape's Directory Server and client SDK. However, due to lack of testing -so far, there are bounds to be compile errors and bugs. These should not be -hard to fix. If you are so inclined, please be sure to forward all pacthes to +so far, there are bound to be compile errors and bugs. These should not be +hard to fix. If you are so inclined, please be sure to forward all patches to samba-patches@samba.org and jerry@samba.org. @@ -159,7 +158,7 @@ objectclass ( 1.3.1.5.1.4.1.7165.2.2.2 NAME 'sambaAccount' SUP top STRUCTURAL The samba.schema file has been formatted for OpenLDAP 2.0. The OID's are -owned by the Samba Team and as such as legal to be openly published. +owned by the Samba Team and as such is legal to be openly published. If you translate the schema to be used with Netscape DS, please submit the modified schema file as a patch to jerry@samba.org @@ -180,9 +179,9 @@ it is necessary to use the sambaAccount and posixAccount objectclasses in combination. However, smbd will still obtain the user's UNIX account information via the standard C library calls (e.g. getpwnam(), et. al.). This means that the Samba server must also have the LDAP NSS library installed -and functioning correctly. This division of information mkes it posible to +and functioning correctly. This division of information makes it possible to store all Samba account information in LDAP, but still maintain UNIX account -information in NIS while the network is transitioning to a full LDAP infratrsucture. +information in NIS while the network is transitioning to a full LDAP infrastructure. @@ -302,7 +301,7 @@ of sambaAccount entries in the directory. Never retrieve the lmPassword or - ntPassword attribute values over and unencrypted LDAP session. + ntPassword attribute values over an unencrypted LDAP session. Never allow non-admin users to view the lmPassword or ntPassword attribute values. @@ -366,9 +365,8 @@ for details on how to configure Samba as a Primary Domain Controller). Furthermore, these attributes are only stored with the sambaAccount entry if the values are non-default values. For example, assume TASHTEGO has now been configured as a PDC and that logon home = \\%L\%u was defined in -its smb.conf file. Assuming smb.conf -also contains , when a user named "becky" logons to the domain, the logon -home string is expanded to \\TASHTEGO\becky. +its smb.conf file. When a user named "becky" logons to the domain, +the logon home string is expanded to \\TASHTEGO\becky. -- cgit