[K12OSN] smb/ldab script

[Jim Kronebusch]

Hello Ron,
   I tried to respond to your email directly but was rejected with the
following.  Anyhow if you read down you can see the answer to the question you
emailed me personally.  If possible, let me know what SPAM tool you are using
that detected us as a spammer, I would like to get that resolved.  It looks
like you are using GoDaddy as your host or another reseller since the
rejection came from secureserver.

Thanks

-----------original messages-------------
This is the Postfix program at host file.winonacotter.org.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

              The Postfix program

<rmcdaniel at indata.us>: host smtp.secureserver.net[64.202.166.12] said: 553
   204.248.118.* rejected due to spam, contact 480-505-8877  (Attack detected
   from pool 204.248.118.47) (in reply to RCPT TO command)

Final-Recipient: rfc822; rmcdaniel at indata.us
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host smtp.secureserver.net[64.202.166.12] said: 553
   204.248.118.* rejected due to spam, contact 480-505-8877  (Attack detected
   from pool 204.248.118.47) (in reply to RCPT TO command)

From: "Jim Kronebusch" <jim at winonacotter.org>
To: rmcdaniel at indata.us
Subject: Re: ldap webmin
Date: Thu, 20 Jul 2006 11:56:03 -0500
On Thu, 20 Jul 2006 08:45:29 -0700, rmcdaniel wrote
> Jim,
>
> Have you been able to post or do you have a link to the old
> documentation for making the ldap/webmin stuff work?

The only documentation I had was my old post.  I will put that below.  There
was one new change that needed to be done and I think is in a recent post from
Peter Hartman but I can't remember it off hand.

Here you go:

> You can add/modify/delete users and groups from the LDAP Users and
> groups module.  Below I will show my settings for the module as
> configured for version 2.0-alpha of the smb/ldap installer scripts.  The
> add users via batch section is all that needs work now.  It appears to
> leave out the Samba account options when run.  I emailed Jamie Cameron
> to see if he can let me know how to make this work.  Anyhow with the
> settings below I am able to login via Linux, via a OSX LDAP enabled
> machine, and join a Windows Machine to the domain and login.  I will
> list only fields where I have made changes from the default.  This is
> also with the newest stable version of webmin.  Disk quotas will also be
> able to be managed via the Webmin Disk Quota module, provided that under
> the Disk and Network Filesystems you have enable User or Group quotas,
> and subsequently enabled Disk Quotas under the Disk Quotas module.
>
> Also in discussion with Jamie Cameron I was informed that the variables
> ${USER} and ${UID} can be used to substitute username and user id
> respectively anywhere in the webmin module configuration.
>
> Here goes:
>
> Linux LDAP NSS library config file: /etc/ldap.conf
> Bind to LDAP server as: cn=manager,dc=yourdomain,dc=org
> Credentials for bind name above: On first access click Set to and enter
> your smb/ldap password as set during script installation, after first
> entry leave set to Don't change
> Base for users: ou=Users,dc=yourdomain,dc=org
> Base for groups: ou=Groups,dc=yourdomain,dc=org
> Other objectClasses to add to new users: top inetOrgPerson
> Full path to slappasswd program: /usr/sbin/slappasswd
> LDAP properties for all new users: sn: ${USER}
> Lowest UID for new users: 1000
> Default primary group for new users: Domain Users
> Default secondary groups for new users: Domain Users
> Default shell for new users: /bin/bash
> LDAP object class for Samba users: sambaSamAccount
> Enabled Samba account by default?: Yes
> Domain SID for Samba3: S-1-5-21-699950680-3956470712-3012135405 (Please
> use your own sambaSID here :-)
> LDAP properties for new Samba users:
> sambaLogonScript: startup.bat
> sambaProfilePath: \\YOURDOMAIN-PDC\profiles\${USER}
> sambaHomePath: \\YOURDOMAIN-PDC\homes\${USER}
> sambaHomeDrive: X:
> LDAP object class for Samba groups: sambaGroupMapping
>
> Well I hope that helps others out to get webmin working.  For now this
> will at least work with using the command line bulk-add scripts to add
> the largest population, then webmin for smaller changes.  I will post
> out if I get a fix from Jamie.  Or if anyone else tries this let me know
> if you can get the batch import to work.
>
> Also I found that to get default OSX settings out you can create a
> Library folder in /etc/skel and copy the files you want to default into
> that folder.  Say you create a custom dock you can take Macintosh
> HD:Users:test user:Library:Preferences:com.apple.dock.plist and move it
> to /etc/skel/Library/Preferences/com.apple.dock.plist on the linux
> server and all new users will receive the custom dock.
>
> Also since OSX and Linux use the same desktop folder and same /home by
> default I will try to create scripts make the windows desktop point to
> /home/user/desktop and to point My Documents to /home/user.  This should
> make profile roaming seamless between Ops.  I think I can for the most
> part use the scripts posted in the last couple weeks. 

-- 
This message has been scanned for viruses and
dangerous content by the Cotter Technology 
Department, and is believed to be clean.