openldap, smbk5pwd, password syncs

[hughesjr]

There is a module for openldap called smbk5pwd.

This module will keep all the openldap passwords (there are 3) in sync, so that if one of them changes ... they all change. This is very helpful if you have a Samba PDC.

I am using openldap authentication for scalix.

I wanted it so that users in scalix can change their password and it updates all 3 passwords. (Just like with ctrl-alt-del in windows, or windows user manager).

I needed this as a solution as I want to make Scalix be the method people use to remotely change their passwords.

If you are interested in smbk5pwd ... google knows about it.

It is available here for CentOS4:

http://lists.centos.org/pipermail/cento ... 02788.html

[dwalexuk]

Does smbk5pwd require bdb backend or can it work with ldbm database?
Do you have any hints on compiling and setting it up for other distros?
What are requirements for it? Does it really need kerberos? will it work with heimdal?

[hughesjr]

Does smbk5pwd require bdb backend or can it work with ldbm database?

It will work with ldbm ... but that is not recommended by the openldap project for normal installs (using smbk5pwd or not), so bdb is recommended, but not required.
-------------------

Do you have any hints on compiling and setting it up for other distros?
What are requirements for it?

While researching how to build this ... I did find these articles:

http://gentoo-wiki.com/Talk:HOWTO_LDAP_ ... asic_Setup

http://student.physik.uni-mainz.de/~rei ... k5pwd.html

I did make changes to the Makefile based on the debian article ... if you are on an RPM based distro, you can install my SRPM and look at the patch for smbk5pwd.

-------------------

Does it really need kerberos? will it work with heimdal?

The kerberos in CentOS 4 will not allow that part to work with CentOS. It requires heimdal for the kerberos parts to function, which is not included in CentOS ... therefore that part was not used in my RPM.