User-Agent: Build Identifier: Users are having to compile SAMBA with USE="-ldap" despite a lack of ldap in the /etc/make.conf file. This causes authentication problems. Reproducible: Sometimes Steps to Reproduce: 1. remove ldap from /etc/make.conf 2. emerge samba 3. try to change passwd with smbpasswd <username> Actual Results: blocks authentication and passwd changes of users Expected Results: Software should not compile w/ LDAP support w/out appropriate USE=ldap
imo ldap should be in use.defaults due to the fact that it is not common for ppl to auth via ldap ... (i for one have no idea how to utilize it ;D)
U s e r E r r o r. if its in use.defaults they have to compile with either USE=-ldap or tweak USE_ORDER in make.conf, like I've been doing for months.
Is there any way to make LDAP usage configurable via smb.conf or a flag? Even if I add LDAP support via USE="ldap" I may or may not want to use LDAP any given time. Why does "adding support for" have to mean "forced to use"?
Go to: http://us1.samba.org/samba/docs/man/smb.conf.5.html#LDAPADMINDN to find out what the ldap parameters are for smb.conf. I'm pretty sure that you can comment them out and then have no LDAP interaction, but still have the capability if you decide to take advantage of it at some point. (If I'm wrong, sorry.) I think you make a good point though. What is the correct smb.conf configuration? If ldap is a default USE then should SAMBA have those commented out? I don't expect it will change, but it seems there must be a better way to handle the situation.
LDA is in /etc/make.profile/use.defaults - for whatever reason. who knows. but i didnt put it there ;) i do not use this facility, i prefer to precisely control the build options for every package on my system. if you dont want LDAP support in SAMBA then dont compile it in! USE="-* pam mysql" emerge samba <- then no LDAP USE="-ldap xml" emerge samba <- again, no LDAP i personally tweak USE_ORDER in make.conf to permanently remove it's irritating features. In SAMBA_3_0 you use: passdb backend = smbpasswd guest ^^^ in your [global] section which stores the SAM info in the /etc/samba/private/smbpasswd file, like the old days. For more information, read some documentation on the new passdb features of SAMBA 3.
