PDC
Current status
- There is already a samba module for sharing files and printers
- Based on the current samba module, we must extend it to add initial support for PDC (Primary Domain Controller)
- Users and groups are already stored using a LDAP backend
- Modify current ebox LDAP structure to support PDC requirements. Consequently, the following entries should be added:
- dn: ou=Computers,dc=ebox
- dn: ou=Idmap,dc=ebox
- dn: cn=Domain Admins,ou=Groups,dc=ebox
- dn: cn=Domain Users,ou=Groups,dc=ebox
- dn: cn=Domain Guests,ou=Groups,dc=ebox
- dn: cn=Domain Computers,ou=Groups,dc=ebox
- dn: cn=Administrators,ou=Groups,dc=ebox
- dn: cn=Account Operators,ou=Groups,dc=ebox
- dn: cn=Print Operators,ou=Groups,dc=ebox
- dn: cn=Backup Operators,ou=Groups,dc=ebox
- dn: cn=Replicators,ou=Groups,dc=ebox
- dn: sambaDomainName=EBOX,dc=ebox
- We must provide a script to update user's LDAP structure, and we must stress the importance of carrying it out flawlessly to preserve user's data.
- Modify the interface to supply the user with needed information.
- Menu entry must be changed to a more proper description
- EBox administrator will select if samba service is run as a domain controller, or otherwise just as a file server
- Regarding dynamic add-ons in Users page, the administrator should choose if the user belongs to the domain. In this first approach, the administrator will not manage the well-known pdc groups. Also, he/she could grant administration permissions for the user within the domain, this is useful to be able to add machines.
Download in other formats: