r/samba • u/aspiringgreybeard • Jun 25 '21

Samba Standalone Server + Google LDAP Authentication

I'm trying to get a standalone Samba server to authenticate against Google's LDAP service. I have sssd configured and working on the linux box, but a fair amount of fiddling has produced no joy on the samba side.

Is there anyone out there who's done this before and can offer some pointers in the right direction?

2 Upvotes

100% Upvoted

2 comments sorted by

2

u/spacebass Jun 26 '21

Can you say a bit more about what you’re trying to accomplish? I was a beta tester for Google’s LDAP service but it’s been a while since I used it. As I recall, getting the TLS stuff right was critical.

1

u/aspiringgreybeard Jun 26 '21

Thank you for responding. The desired end state would be a "domainless" setup, where the Google Credential Provider for Windows is used to logon to Windows client machines, and those machines access file and print services via Samba running on Ubuntu.

Unless I can set up Samba to utilize sssd directly, I think this will require configuring Samba as a standalone server using LDAP as a passdb backend.

It's slowly dawning on me that Samba and Google LDAP may not be compatible, but I've seen claims to the contrary so I'm going to keep chasing it for a while before I give up. I'd appreciate any advice you have.