Samba DC

Connection settings

• Connection DN: cn=admin,dc=example,dc=com (where “example” is the domain name and “com” is the top-level domain name)
• Connection password: password1234
• LDAP server address: ldap.example.ru or 10.11.112.33 (ldap.example.ru is the LDAP server FQDN; 10.11.112.33 is the LDAP server IP address)

Group search

• Group search base DN: ou=groups,dc=example,dc=com (where “example” is the domain name and “com” is the top-level domain name)
• Group name attribute: cn (in a typical Samba DC directory, groups use the “cn” attribute for their name)

User search

• User search base DN: ou=users,dc=example,dc=com (where “example” is the domain name and “com” is the top-level domain name)
• Email attribute: mail (in a typical Samba DC directory, users have a “mail” attribute with their email address)
• Email suffix: @example.com (in a typical Samba DC directory, the “example.com” domain name is used as the email suffix)
• Name attribute: displayName (the “displayName” attribute contains the full user name)
• UserName attribute: sAMAccountName (the “sAMAccountName” attribute contains the unique user name)

In the User mapping block, you can specify the mapping between user and group attributes. For example, if the user directory uses the “uid” attribute and the group directory uses the “cn” attribute, the mapping template can be “uid={{USER}}”, where “{{USER}}” is replaced with the user name when searching for groups.