Empty user table with ldap as account provider

[mrmarkuz (Markus Neuberger)]

@rasi

I’m trying to read the user list

With which program or tool do you want to read the user list?

Maybe you need to disable strong auth on your NS AD server to make it work:

AD / LDAP UID vs UserPrincipalName

Another less secure solution is disable ssl requirement, like documented here https://wiki.samba.org/index.php/Updating_Samba#New_Default_for_LDAP_Connections_Requires_Strong_Authentication Edit /var/lib/machines/nsdc/etc/samba/smb.conf then restart samba nsdc service systemctl -M nsdc restart samba IIRC in some past discussion a Zentyal user told me that AD LDAP can be browsed anonymously…

User's Remote shell (SSH) access

Hi, I think I managed changing the LDAP attribute, so we don’t need to delete user and create new, but maybe it’s a just a workaround for now because we have to allow ldap weak auth. Add this line to NSDC smb.conf global section: ldap server require strong auth = no and restart samba4 in container. Detailed solution with templating can be found here: Create an ldif file, like test.ldif with following content according to your Samba AD dn: cn=markus,cn=Users,dc=ad,dc=local changetype: modi…

EDIT:

If I understand you correctly you want to use a remote AD but having local LDAP installed, I don’t know if this is possible. You may join the AD with the firewall but a combination of local LDAP and remote AD seems not possible to me.