2.3, Samba4 & Apache Directory Studio

[airtonix]

So some of you may be trying to figure out how to connect to the new LDAP server which is internally controlled by Samba4.

Warning
If you've already barrelled ahead and created users and groups be prepared to loose them. It seems to my limited testing that Zentyal 2.3 Community Beta (as of writing this) creates users and groups in the old standalone ldap database and not in the Samba4 database. I could be wrong however it remains that i couldn't connect to either until i performed step one.

Step One
Prepare Samba4 for Users and Groups

* Heading over to file sharing
* click "Change"
* Witness it's desire to save system changes without you having changed anything.
* Click the large red "Save Changes" button up the top.

 $ sudo tail /var/log/syslog

You will see samba4 perform the provisioning steps, setting up the new kerberos domain, new ldap database, etc, etc.

Step Two
Connect with Apache Directory Studio

* Fire up Apache Directory Studio
* Create a new LDAP server connection with the following details:

  * HOSTNAME will be the IP address of your Zentyal Server
  * PORT will be : 389
  * ENCRYPTION : Use StartTLS Extension

* Click "Check Network Parameter" >> should report succesful (you may need to accept self signed cert)
* Move to the Authentication Tab, fill in the following information:

  * Bind DN or User : administrator@zentyal.domain
  * Bind Password: Zentyal1234

* Click "Check Authentication", should report successful.

* Either finalise configuration with the OK button, or
* restrict the tree to by moving to the "Browsing Options" Tab

  * Base DN: DC=zentyal,DC=domain

[stuartiannaylor]

Wasn't able to connect and keep returning an error about samba4-DNS failure.

Gonna see if any more info on monday is avail?

[zzeroo]

Don't forget to open LDAP access on the firewall pages.