Results 1 to 2 of 2

Thread: [SOLVED] Deny Windows logon with samba_extension?

  1. #1
    Join Date
    Oct 2006
    Posts
    45
    Rep Power
    9

    Default [SOLVED] Deny Windows logon with samba_extension?

    All,

    I have replaced AD with Zimbra using the posix and samba extensions and all is working well for active accounts. However when I disable accounts of (ex) employees (setting zimbraAccountStatus to closed), they can still log in to the Windows machines.

    Is there any way to configure Samba to filter against zimbraAccountStatus=active ?

    (I realise this is a samba question predominantly, but I can't believe I am the only person having this issue. How do other people deal with this?)

    Cheers,
    David

  2. #2
    Join Date
    Oct 2006
    Posts
    45
    Rep Power
    9

    Default

    I have not been able to find a way to disable access on the basis of zimbraAccountStatus directly within Samba. Very disappointing.

    As a workarund, I have the following script which I run in cron which updates the samba account lockout flags on the basis of the Zimbra ones. If you need to unlock an account, you'll have to do it in both places.

    #!/bin/bash
    #
    # A script to lock accounts on the basis of their Zimbra status

    for acc in `ldapsearch -x -h <zimbra host> -b dc=YOUR,dc=DOMAIN "(&(objectclass=posixAccount)(zimbraAccountStatus= locked))" | grep uid: | cut -d: -f2`; do
    echo "Processing locked account: $acc";
    pdbedit -r -c '[L]' $acc >& /dev/null
    done

    for acc in `ldapsearch -x -h <zimbra host> -b dc=YOUR,dc=DOMAIN "(&(objectclass=posixAccount)(zimbraAccountStatus= closed))" | grep uid: | cut -d: -f2`; do
    echo "Processing closed account: $acc";
    pdbedit -r -c '[L]' $acc >& /dev/null
    done

    Cheers,
    David

Similar Threads

  1. Windows Desktop Build Questions
    By fgates in forum General Questions
    Replies: 0
    Last Post: 08-05-2008, 09:51 PM
  2. Hangs on "Loading" screen
    By gbr in forum General Questions
    Replies: 16
    Last Post: 06-19-2008, 02:01 PM
  3. .53 Will Not "Launch" in FF 2.0.0.6
    By jhoelz in forum Installation Help
    Replies: 4
    Last Post: 08-04-2007, 10:01 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •