PDC

Current status

  • There is already a samba module for sharing files and printers
  • Based on the current samba module, we must extend it to add initial support for PDC (Primary Domain Controller)
  • Users and groups are already stored using a LDAP backend

Needed changes (ebox platform version 0.7.1)

  • Modify current ebox LDAP structure to support PDC requirements. Consequently, the following entries should be added:
    • dn: ou=Computers,dc=ebox
    • dn: ou=Idmap,dc=ebox
    • dn: cn=Domain Admins,ou=Groups,dc=ebox
    • dn: cn=Domain Users,ou=Groups,dc=ebox
    • dn: cn=Domain Guests,ou=Groups,dc=ebox
    • dn: cn=Domain Computers,ou=Groups,dc=ebox
    • dn: cn=Administrators,ou=Groups,dc=ebox
    • dn: cn=Account Operators,ou=Groups,dc=ebox
    • dn: cn=Print Operators,ou=Groups,dc=ebox
    • dn: cn=Backup Operators,ou=Groups,dc=ebox
    • dn: cn=Replicators,ou=Groups,dc=ebox
    • dn: sambaDomainName=EBOX,dc=ebox
  • We must provide a script to update user's LDAP structure, and we must stress the importance of carrying it out flawlessly to preserve user's data.
  • Modify the interface to supply the user with needed information.
    • Menu entry must be changed to a more proper description
    • EBox administrator will select if samba service is run as a domain controller, or otherwise just as a file server
    • Regarding dynamic add-ons in Users page, the administrator should choose if the user belongs to the domain. In this first approach, the administrator will not manage the well-known pdc groups. Also, he/she could grant administration permissions for the user within the domain, this is useful to be able to add machines.