Zimbra + Samba bulk account provisioning

Hi everybody,
I set up Zimbra Admin Extensions to be able to manage Zimbra and Samba accounts from Admin UI and it does work.
Unfortunately, creating a lot of accounts from UI takes too much time and I was wondering if someone has already tried to get this job done by a (maybe a shell) script.
The major issue is that, after deploying posixAccount ans sambaSAMaccount extensions, zmprov need a lot more stuff to successfully create accounts (uidNumber, gidNumber, sambaSID, sambaNTPassword etc.)

Hope someone can help!:confused:

Thanks in advance, bye.

I don't have a script for this, but here are some things that might help.
- sambaNTPassword is an MD4 hash of the user's password
- uidNumber is just a next available user id number
- gidNumber is the group id number of the users group, most lilely it is the same number for most of the users
- sambaSID is a string that looks like this:
S-1-5-21-2601834925-3641386331-1670679433-3002
in this string there are two important parts
S-1-5-21-2601834925-3641386331-1670679433
and
-3002
First part (S-1-5-21-2601834925-3641386331-1670679433) is the domainSID, you can get it by running net getlocalsid or look it up in the Zimbra Admin->Samba Domains
second part is user RID. It is calculated as following:
users RID = uidNumber * 2 + 1000

Quote:

---

Originally Posted by mficara

Hi everybody,
I set up Zimbra Admin Extensions to be able to manage Zimbra and Samba accounts from Admin UI and it does work.
Unfortunately, creating a lot of accounts from UI takes too much time and I was wondering if someone has already tried to get this job done by a (maybe a shell) script.
The major issue is that, after deploying posixAccount ans sambaSAMaccount extensions, zmprov need a lot more stuff to successfully create accounts (uidNumber, gidNumber, sambaSID, sambaNTPassword etc.)

Hope someone can help!:confused:

Thanks in advance, bye.

---

This is a quote from Webmin's "LDAP Users and Group" module which has a batch file processing option.
With properly configured nss_ldap this module works well ith Zimbra LDAP.
Check the bolded text. Did not try it yet, but theoretically you can add Zimbra custom attributes. to the batch file. I plan to try it myself as soon as I have time.

Quote:

---

This form allows you to create, modify or delete many users at once from an uploaded or local text file. Each line in the file specifies one action to take, depending on its first field. The line formats are :

'create':'username':'passwd':'uid':'gid':'realname ':'homedir':'shell':'min':'max':'warn':'inactive': 'expire'

modify':'oldusername':'username':'passwd':'uid':'g id':'realname':'homedir':'shell':'min':'max':'warn ':'inactive':'expire'

delete':'username

In create lines, if the uid field is left empty, Webmin will assign a UID automatically. If the gid field is empty, Webmin will create a new group with the same name as the user. The username, homedir and shell fields must be supplied for every user - all other fields are allowed to be empty. If the passwd field is blank, no password will be assigned for the user. If it contains just the letter x, the account will be locked. Otherwise, the text in the field will be taken as the cleartext password and encrypted.
In modify lines, an empty field will be taken to mean that the corresponding user attribute is not to be modified.
In create and modify lines, you can optionally append extra fields containing LDAP atttributes in name=value format, to be assigned to the new or modified users.

---

I've just added some hints to Extending Admin UI - ZimbraWiki on how to configure pam_ldap and nss_ldap on RHEL5/CentOS5 using authconfig utility. The distribution uses unified /etc/ldap.conf configuration file where host line "conflicts" with uri line :D.
The setup also works with Webmin's LDAP modules.