/samba-ldap

Compose file for andrespp/samba-ldap image

andrespp/samba-ldap

Introduction

Compose file for a SAMBA server with LDAP authetication using andrespp/samba-ldap docker image.

This compose provides three containers:

  • OpenLDAP Server
  • SAMBA Server
  • PhpLdapAdmin

Quick start

  • Clone repository

    • $ git clone https://github.com/andrespp/samba-ldap.git

  • Set compose and other config files

    • docker-compose.yml
    • config/samba/smb.conf: Samba server configuration
    • config/samba/smbldap.conf: smbldap tool settings
    • config/samba/smbldap_bind.conf: smbldap tool settings
    • config/samba/libnss-ldap.conf: samba server host ldap authentication
    • Note: this step may be skiped if the default settings are enougth for you (maybe for testing purposes).

  • Compose up

    • docker-compose up -d
    • Note:
      • OpenLDAP server may take a while to be up due to DH parameters generation.
      • This may cause samba container to crash, which can be fixed with docker-compose restart samba.

  • Populate LDAP Tree

    • $ docker exec -it samba smbldap-populate

  • Set shared directories permissions

$ sudo chown +0 data/samba/documents
$ sudo chgrp +513 data/samba/documents # Domain users
$ sudo chmod 750 data/samba/documents

$ sudo chown +0 data/samba/public
$ sudo chgrp +514 data/samba/public # Domain guests
$ sudo chmod 777 data/samba/public/

  • Create first user

    • $ docker exec -it samba smbldap-useradd -a -P -m username

  • Test share access

    • $ docker exec -it samba smbclient -U username //samba/Documents

User management

  • Add a new user with home directory

    • docker exec -it samba smbldap-useradd -a -P -m username

  • Remove a user

    • docker exec -it samba smbldap-userdel username
    • docker exec -it samba smbldap-userdel -r username # remove files

  • Change user password

    • docker exec -it samba smbldap-passwd username

  • Add a group

    • docker exec -it samba smbldap-groupadd -a groupname

  • Make an existing user a member of a group

    • docker exec -it samba smbldap-groupmod -m username groupname

  • Remove a user from a group

    • docker exec -it samba smbldap-groupmod -x username groupname

Note: these actions may also be performed using phpLdapAdmin tool on http://localhost:8000

Issues

If you have any problems with or questions about this image, please contact me through a GitHub issue.