<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div dir="ltr" >To answer the questions from below:</div>
<div dir="ltr" > </div>
<div dir="ltr" ><div>> I’m assuming smbpasswd -a is still required for all users?</div>
<div> </div>
<div>No, the passwords are stored as hashes in the sambaNTPassword<br>attribute on the LDAP server.</div>
<div> </div>
<div>> What keeps the LDAP/SMB passwords in sync?</div>
<div> </div>
<div>See above, the SMB passwords are only stored in the LDAP server.</div>
<div> </div>
<div>> What access does the bind user need in LDAP?</div>
<div> </div>
<div>Either read or read/write access. With write access, Samba will<br>automatically write the sambaDomain object. Without write access, that<br>object has to be created manually.</div>
<div> </div>
<div>> What special requirements are required for Windows 10 clients to connect?</div>
<div> </div>
<div>I am not aware of any special requirements. The overall requirement<br>for SMB and LDAP is that the Samba schema is installed on the LDAP<br>server, and the attributes are set correctly.</div>
<div> </div></div>
<div dir="ltr" >Regards,</div>
<div dir="ltr" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial;font-size:10.5pt" ><div dir="ltr" ><br><font size="2" face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" ><font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" >Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ<br>christof.schmitt@us.ibm.com || +1-520-799-2469 (T/L: 321-2469)</font></font></div></div></div>
<div dir="ltr" > </div>
<div dir="ltr" > </div>
<blockquote data-history-content-modified="1" dir="ltr" style="border-left:solid #aaaaaa 2px; margin-left:5px; padding-left:5px; direction:ltr; margin-right:0px" >----- Original message -----<br>From: Jeno Cram <jcram@ddn.com><br>Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>To: "gpfsug-discuss@spectrumscale.org" <gpfsug-discuss@spectrumscale.org><br>Cc:<br>Subject: [gpfsug-discuss] SMB with LDAP<br>Date: Tue, Jan 9, 2018 8:38 AM<br> <br><!--Notes ACF
<meta http-equiv="Content-Type" content="text/html; charset=utf8" >-->
<div><p><span style="font-size:11.0pt" >Has anyone had any luck implementing CES with SMB using LDAP? <o:p></o:p></span></p>
<p><span style="font-size:11.0pt" ><o:p> </o:p></span></p>
<p><span style="font-size:11.0pt" >This link doesn’t seem to have all of the information required to getting it working properly.<o:p></o:p></span></p>
<p><span style="font-size:11.0pt" ><a href="https://www.ibm.com/support/knowledgecenter/en/STXKQY_4.2.3/com.ibm.spectrum.scale.v4r23.doc/bl1adm_updateldapsmb.htm" target="_blank" >https://www.ibm.com/support/knowledgecenter/en/STXKQY_4.2.3/com.ibm.spectrum.scale.v4r23.doc/bl1adm_updateldapsmb.htm</a><o:p></o:p></span></p>
<p><span style="font-size:11.0pt" ><o:p> </o:p></span></p>
<ol start="1" style="margin-top:0in" type="1" > <li style="margin-left:0in;mso-list:l0 level1 lfo1" ><span style="font-size:11.0pt" >I’m assuming smbpasswd -a is still required for all users?<o:p></o:p></span></li> <li style="margin-left:0in;mso-list:l0 level1 lfo1" ><span style="font-size:11.0pt" >What keeps the LDAP/SMB passwords in sync? <o:p></o:p></span></li> <li style="margin-left:0in;mso-list:l0 level1 lfo1" ><span style="font-size:11.0pt" >What access does the bind user need in LDAP?<o:p></o:p></span></li> <li style="margin-left:0in;mso-list:l0 level1 lfo1" ><span style="font-size:11.0pt" >What special requirements are required for Windows 10 clients to connect?<o:p></o:p></span></li></ol>
<p><span style="font-size:11.0pt" ><o:p> </o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Times New Roman",serif" >Jeno Cram | Lead Application Support Engineer<o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Times New Roman",serif" >jcram@ddn.com<o:p></o:p></span></p>
<p><o:p> </o:p></p></div>
<div><font size="2" face="Default Monospace,Courier New,Courier,monospace" >_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=sU5XKUck2iWsGZGkPkldCLrw26oU4BN7VbomgyuYmqk&s=IL7UzuObhDPnUekuvZ9YGMCBXU4PkNwZvCDY2-h0jls&e=" target="_blank" >https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=sU5XKUck2iWsGZGkPkldCLrw26oU4BN7VbomgyuYmqk&s=IL7UzuObhDPnUekuvZ9YGMCBXU4PkNwZvCDY2-h0jls&e=</a></font></div></blockquote>
<div dir="ltr" > </div></div><BR>