Предисловие!
Настроил связку SAMBA + LDAP типа домен поднял! Все класно все работает.
Вот только задачу поставили привязать к этому SQUID. Пытался и так и сяк но не получилось.Если кто поможет буду очень благодарен.
Вот конфиг slapd.conf
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/misc.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/openldap.schema
include /usr/local/etc/openldap/schema/samba.schema
#include /usr/local/etc/openldap/schema/dnszone.schema
#include /usr/local/etc/openldap/schema/dhcp.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
# Load dynamic backend modules:
modulepath /usr/local/libexec/openldap
moduleload back_bdb
access to attr=description
by self read
by anonymous read
by dn="cn=root,dc=server,dc=ua" write
by * none
access to attrs=userPassword
by self write
by anonymous auth
by * none
access to *
by self write
by anonymous read
by * none
#######################################################################
# BDB database definitions
#######################################################################
database bdb
suffix "dc=server,dc=ua"
rootdn "cn=root,dc=server,dc=ua"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw {SSHA}TQy1Ho3BcgqWBwLmHj5bB50go1gQegoy
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /var/db/openldap-data
# Indices to maintain
index objectClass eq
index cn eq
конфиг nsswitch.conf
group: files ldap
hosts: files dns
networks: files
passwd: files ldap
shadow: files ldap
shells: files
а вот то что я добавлял в LDAP
dn: dc=server,dc=ua
objectClass: dcObject
objectClass: organization
objectClass: top
dc: server
o: server
dn: ou=users,dc=server,dc=ua
objectClass: top
objectClass: organizationalUnit
ou: users
dn: ou=groups,dc=server,dc=ua
objectClass: top
objectClass: organizationalUnit
ou: groups
dn: ou=computers,cd=server,dc=ua
objectClass: top
objectClass: organizationalUnit
ou: computers
Пользователей создаю скриптом ldapadduser.
если нужны еще что нить нужно скажите выложу.
