diff options
author | Andrew Bartlett <abartlet@samba.org> | 2008-07-15 15:15:12 +1000 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2008-07-15 15:15:12 +1000 |
commit | a6b842f9634cbeb4075c2bbaf7e49c19104602be (patch) | |
tree | 17fae6772e9d44ab32835ab7ddc454c9a075bafa /source4/setup/secrets_sasl_ldap.ldif | |
parent | 403f4f94ffec28d1c1dc910e1960531f4c14534b (diff) | |
download | samba-a6b842f9634cbeb4075c2bbaf7e49c19104602be.tar.gz |
Connect to the LDAP backend with SASL credentials.
This reworks our LDAP backend code to move from anonymous access to a
shared-secret SASL-protected connection. (SASL selects NTLM or
DIGEST-MD5 on my system).
To get this working, we must pre-populate the LDAP backend with a DN
to store ths SASL secret on, and we use back-ldif for this.
This gives us a reasonable basis to deploy a replicated OpenLDAP
backend solution.
Andrew Bartlett
(This used to be commit cd0745253c4a9ec59a035e830e54d74a05b71aaa)
Diffstat (limited to 'source4/setup/secrets_sasl_ldap.ldif')
-rw-r--r-- | source4/setup/secrets_sasl_ldap.ldif | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/source4/setup/secrets_sasl_ldap.ldif b/source4/setup/secrets_sasl_ldap.ldif new file mode 100644 index 00000000000..81ccfee2098 --- /dev/null +++ b/source4/setup/secrets_sasl_ldap.ldif @@ -0,0 +1,9 @@ +dn: CN=SAMDB Credentials +objectClass: top +objectClass: ldapSecret +cn: SAMDB Credentials +secret:: ${LDAPADMINPASS_B64} +samAccountName: ${LDAPADMINUSER} +realm: ${LDAPADMINREALM} + + |