Integración de redes con OpenLDAP, Samba, CUPS y PyKota

Autor:

<sergio.gonzalez@hispalinux.es>
/etc/default/slapd
/etc/ldap/ldap.conf
/etc/ldap/slapd.conf
/etc/libnss-ldap.conf
/etc/pam_ldap.conf
/etc/nsswitch.conf
smb.conf
smb.conf
/etc/ldap/slapd.conf
/etc/ldap/slapd.conf
/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
/etc/cups/printers.conf
/etc/smbldap-tools/smbldap_bind.conf
/etc/smbldap-tools/smbldap.conf
/usr/share/cups/drivers
/etc/ldap/slapd.conf
/etc/ldap/ldap.conf
/etc/default/slapd
/etc/nsswitch.conf
/etc/pam_ldap.conf
/etc/libnss-ldap.conf
/etc/pamd.d/common-account
/etc/pamd.d/common-auth
/etc/pamd.d/common-password
/etc/pamd.d/common-session
/etc/nscd.conf
/etc/default/samba
/etc/samba/smb.conf
/etc/samba/smb.conf
/etc/cups/client.conf
/etc/cups/cupsd.conf
/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
/var/www/phpldapadmin/config.php
/var/www/phpldapadmin/templates/template_config.php
/etc/smbldap-tools/smbldap.conf
/etc/smbldap-tools/smbldap_bind.conf
/etc/apache/conf.d/mod_ssl-00-global.conf
/etc/apache/conf.d/vhost.conf
/etc/hosts.allow
/etc/hosts.deny
/etc/samba/smb.conf
/etc/hosts.allow
/etc/hosts.deny
/etc/ldap/ldap.conf
/etc/ldap/ldap.conf
slapd.conf
ldap.conf
.ldaprc
slapd.conf
/etc/ldap.secret
/etc/nsswitch.conf
/etc/pam.d/common-account
/etc/pam.d/common-auth
/etc/pam.d/common-session
/etc/pam.d/common-password
smb.conf
smb.conf
/etc/ldap/ssl/
/etc/cups
/usr/share/cups/drivers/
/usr/share/cups/drivers
/etc/xinetd.d/samba
/etc/xinetd.d/swat
template_config.php
/etc/smbldap-tools
nombre-de-un-archivo
nombre-de-un-directorio
: resalta una parte de un texto, que posteriormente
  tendrá una breve explicación.
$      -> prompt del sistema, en este caso representa
          la ejecución de código como un usuario
          cualquiera del sistema, no el usuario root.
#      -> prompt del sistema, en este caso representa
          la ejecución de código como el usuario root.
/usr/bin/tree -L 1 /    -> Representa las órdenes
                         tecleadas por el usuario.
/
|-- bin
|-- boot
|-- cdrom -> media/cdrom
|-- dev
|-- etc
|-- home
|-- initrd
|-- lib
|-- lib64
|-- media
|-- mnt
|-- nonexistent
|-- opt
|-- proc
|-- root
|-- sbin
|-- srv
|-- sys
|-- tmp
|-- usr
|-- var
|-- vmlinuz -> boot/vmlinuz-2.6.8.1-01
`-- vmlinuz.old -> boot/vmlinuz-2.6.7-1-386

21 directories, 2 files    -> Representa la salida del ordenador,
                           tras la ejecución de una orden por
                           parte de un usuario.
 * Listado de código
 * Ejemplos de archivos de configuración
 * etc.
<rlopes (en) ipb (punto) pt>
<nuno (en) ipb (punto) pt>
<juansierrapons (en) yahoo (punto) es>
<juanjo.munoz (en) yecla (punto) es>
/etc/default/slapd
/etc/ldap/ldap.conf
/etc/ldap/slapd.conf
/etc/libnss-ldap.conf
/etc/pam_ldap.conf
/etc/nsswitch.conf
The OpenLDAP Project
c/o The OpenLDAP Foundation
270 Redwood Shores Pwy, PMB#107
Redwood City, California 94065
USA

<Project@OpenLDAP.org>
/etc/hosts
# /usr/sbin/dpkg-reconfigure --priority=low slapd
# apt-get install slapd ldap-utils
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes NUEVOS:
  ldap-utils slapd
0 actualizados, 2 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/1042kB de archivos.
Se utilizarán 2884kB de espacio de disco adicional después de desempaquetar.
Preconfiguring packages ...
/var/lib/ldap
/var/lib/ldap
/var/backups/var_lib_ldap-*FECHA*/
find: /var/lib/ldap: No existe el fichero o el directorio

Seleccionando el paquete ldap-utils previamente no seleccionado.
(Leyendo la base de datos ...
252690 ficheros y directorios instalados actualmente.)
Desempaquetando ldap-utils (de .../ldap-utils_2.1.30-3_i386.deb) ...
Seleccionando el paquete slapd previamente no seleccionado.
Desempaquetando slapd (de .../slapd_2.1.30-3_i386.deb) ...
Configurando ldap-utils (2.1.30-3) ...
Configurando slapd (2.1.30-3) ...
Creating initial slapd configuration... done
Creating initial LDAP directory... done
Starting OpenLDAP: slapd.

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
$ /usr/bin/apt-cache show slapd ldap-utils
Package: slapd
Priority: optional
Section: net
Installed-Size: 2392
Maintainer: Torsten Landschoff <torsten@debian.org>
Architecture: i386
Source: openldap2
Version: 2.1.30-3
Provides: ldap-server
Depends: libc6 (>= 2.3.2.ds1-4), libdb4.2, libgcrypt11,
libgnutls11 (>= 1.0.16), libgpg-error0 (>= 0.7),
libiodbc2 (>= 3.51.2-2), libldap2 (>= 2.1.17-1),
libltdl3 (>= 1.5.2-2), libsasl2 (>= 2.1.18), libslp1,
libwrap0, zlib1g (>= 1:1.2.1), debconf (>= 0.5),
coreutils (>= 4.5.1-1) | fileutils (>= 4.0i-1), psmisc,
libldap2 (= 2.1.30-3), perl (>> 5.8.0) | libmime-base64-perl
Recommends: db4.2-util, libsasl2-modules
Suggests: ldap-utils
Conflicts: umich-ldapd, ldap-server, libbind-dev, bind-dev,
libltdl3 (= 1.5.4-1)
Filename: pool/main/o/openldap2/slapd_2.1.30-3_i386.deb
Size: 941934
MD5sum: 497cbd88576c42e89457fa8c1594067f
Description: OpenLDAP server (slapd)
 This is the OpenLDAP (Lightweight Directory Access Protocol) standalone
 server (slapd). The server can be used to provide a standalone directory
 service and also includes the slurpd replication server.

Package: ldap-utils
Priority: optional
Section: net
Installed-Size: 292
Maintainer: Torsten Landschoff <torsten@debian.org>
Architecture: i386
Source: openldap2
Version: 2.1.30-3
Replaces: openldap-utils, slapd (<< 2.1.25), openldapd
Provides: ldap-client, openldap-utils
Depends: libc6 (>= 2.3.2.ds1-4), libdb4.2, libgcrypt11,
libgnutls11 (>= 1.0.16), libgpg-error0 (>= 0.7),
libiodbc2 (>= 3.51.2-2), libldap2 (>= 2.1.17-1),
libltdl3 (>= 1.5.2-2), libsasl2 (>= 2.1.18), libslp1,
zlib1g (>= 1:1.2.1), libldap2 (= 2.1.30-3)
Recommends: libsasl2-modules
Conflicts: umich-ldap-utils, openldap-utils, ldap-client
Filename: pool/main/o/openldap2/ldap-utils_2.1.30-3_i386.deb
Size: 114684
MD5sum: 01c409b7e225facf2056310fd70afdad
Description: OpenLDAP utilities
 Utilities from the OpenLDAP (Lightweight Directory Access Protocol)
 package. These utilities can access a local or remote LDAP server
 and contain all the client programs required to access LDAP servers.


# /bin/ps auxf | /bin/grep slapd
USER       PID %CPU %MEM   VSZ  RSS TTY      STAT START   TIME COMMAND
root      4453  0.0  0.5 12144 3004 ?        S    12:52   0:00 /usr/sbin/slapd
root      4455  0.0  0.5 12144 3004 ?        S    12:52   0:00  \_ /usr/sbin/slapd
root      4456  0.0  0.5 12144 3004 ?        S    12:52   0:00      \_ /usr/sbin/slapd

# /bin/netstat -puta
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 *:ldap                  *:*                     LISTEN     4453/slapd
$ /usr/bin/ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts
# extended LDIF
#
# LDAPv3
# base <> with scope base
# filter: (objectclass=*)
# requesting: namingContexts
#

#
dn:
namingContexts: dc=gsr,dc=pt

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

/etc/hosts.allow
/etc/hosts.deny
/etc/hosts.allow
# /etc/hosts.allow: list of hosts that are allowed to access the system.
#                   See the manual pages hosts_access(5), hosts_options(5)
#                   and /usr/doc/netbase/portmapper.txt.gz
#
# Example:    ALL: LOCAL @some_netgroup
#             ALL: .foobar.edu EXCEPT terminalserver.foobar.edu
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap(8)
# and /usr/doc/portmap/portmapper.txt.gz for further information.
#

/etc/hosts.deny
# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
#                  See the manual pages hosts_access(5), hosts_options(5)
#                  and /usr/doc/netbase/portmapper.txt.gz
#
# Example:    ALL: some.host.name, .some.domain
#             ALL EXCEPT in.fingerd: other.host.name, .other.domain
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap(8)
# and /usr/doc/portmap/portmapper.txt.gz for further information.
#
# The PARANOID wildcard matches any host whose name does not match its
# address. You may wish to enable this to ensure any programs that don't
# validate looked up hostnames still leave understandable logs. In past
# versions of Debian this has been the default.
# ALL: PARANOID

# Desautorizar a todos los hosts con nombre sospechoso
ALL: PARANOID

# Desautorizar a todos los hosts
ALL:ALL
$ ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts
ldap_bind: Can't contact LDAP server (81)
$ ldapsearch -d -1 -x -b '' -s base '(objectclass=*)' namingContexts
ldap_create
ldap_bind_s
ldap_simple_bind_s
ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection
ldap_int_open_connection
ldap_connect_to_host: TCP gsr.pt:389 
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 192.168.2.1:389 
ldap_connect_timeout: fd: 3 tm: -1 async: 0
ldap_ndelay_on: 3
ldap_is_sock_ready: 3
ldap_ndelay_off: 3
ldap_int_sasl_open: host=gsr.pt
ldap_open_defconn: successful 
ldap_send_server_request
ber_flush: 14 bytes to sd 3
  0000:  30 0c 02 01 01 60 07 02  01 03 04 00 80 00         0....`........
ldap_write: want=14, written=14
  0000:  30 0c 02 01 01 60 07 02  01 03 04 00 80 00         0....`........
ldap_result msgid 1
ldap_chkResponseList for msgid=1, all=1
ldap_chkResponseList returns NULL
wait4msg (infinite timeout), msgid 1
wait4msg continue, msgid 1, all 1
** Connections:
* host: gsr.pt  port: 389  (default)
  refcnt: 2  status: Connected
  last used: Tue Mar  9 16:18:26 2004

** Outstanding Requests:
 * msgid 1,  origid 1, status InProgress
   outstanding referrals 0, parent count 0
** Response Queue:
   Empty
ldap_chkResponseList for msgid=1, all=1
ldap_chkResponseList returns NULL
ldap_int_select
read1msg: msgid 1, all 1
ber_get_next
ldap_read: want=8, got=0

ber_get_next failed. 
ldap_perror 
ldap_bind: Can't contact LDAP server (81) 
# /usr/sbin/slapd -d -1 -h ldap://gsr.pt:389/
@(#) $OpenLDAP: slapd 2.1.30 (Jul 27 2004 08:02:08) $
        @euklid:/home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/debian/build/servers/slapd
daemon_init: ldap://gsr.pt:389/
daemon_init: listen on ldap://gsr.pt:389/
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap://gsr.pt:389/)
daemon: initialized ldap://gsr.pt:389/
daemon_init: 1 listeners opened
slapd init: initiated server.
slap_sasl_init: initialized!
reading config file /etc/ldap/slapd.conf
line 11 (include         /etc/ldap/schema/core.schema)
reading config file /etc/ldap/schema/core.schema/

(...)

slapd startup: initiated.
slapd starting
daemon: added 6r
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: new connection on 9
fd=9 DENIED from unknown (192.168.2.1) 
daemon: closing 9
daemon: activity on:
daemon: select: listen=6 active_threads=0 tvp=NULL
/etc/hosts.allow
daemon: activity on 1 descriptors
daemon: new connection on 9
conn=2 fd=9 ACCEPT from IP=192.168.2.1:32852 (IP=192.168.2.1:389) 
daemon: added 9r
daemon: activity on:
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: activity on: 9r
daemon: read activity on 9
connection_get(9)
connection_get(9): got connid=2
connection_read(9): checking for input on id=2
ber_get_next

(...)

conn=2 op=1 SRCH base="" scope=0 filter="(objectClass=*)"
conn=2 op=1 SRCH attr=namingContexts
=> test_filter
    PRESENT
=> access_allowed: search access to "" "objectClass" requested
=> acl_get: [1] check attr objectClass
=> dn: [2]
=> acl_get: [2] matched
=> acl_get: [2] check attr objectClass
<= acl_get: [2] acl  attr: objectClass
=> acl_mask: access to entry "", attr "objectClass" requested
=> acl_mask: to all values by "", (=n)
<= check a_dn_pat: *
<= acl_mask: [1] applying read(=rscx) (stop)
<= acl_mask: [1] mask: read(=rscx)
=> access_allowed: search access granted by read(=rscx)
<= test_filter 6
=> send_search_entry: dn=""
=> access_allowed: read access to "" "entry" requested
=> acl_get: [1] check attr entry
=> dn: [2]
=> acl_get: [2] matched
=> acl_get: [2] check attr entry
<= acl_get: [2] acl  attr: entry
=> acl_mask: access to entry "", attr "entry" requested
=> acl_mask: to all values by "", (=n)
<= check a_dn_pat: *
<= acl_mask: [1] applying read(=rscx) (stop)
<= acl_mask: [1] mask: read(=rscx)
=> access_allowed: read access granted by read(=rscx)
=> access_allowed: read access to "" "namingContexts" requested
=> acl_get: [1] check attr namingContexts
=> dn: [2]
=> acl_get: [2] matched
=> acl_get: [2] check attr namingContexts
<= acl_get: [2] acl  attr: namingContexts
access_allowed: no res from state (namingContexts)
=> acl_mask: access to entry "", attr "namingContexts" requested
=> acl_mask: to all values by "", (=n)
<= check a_dn_pat: *
<= acl_mask: [1] applying read(=rscx) (stop)
<= acl_mask: [1] mask: read(=rscx)
=> access_allowed: read access granted by read(=rscx)

(...)

ber_get_next on fd 9 failed errno=0 (Success)
connection_read(9): input error=-2 id=2, closing.
connection_closing: readying conn=2 sd=9 for close
connection_close: deferring conn=2 sd=9
do_unbind
conn=2 op=2 UNBIND
connection_resched: attempting closing conn=2 sd=9
connection_close: conn=2 sd=9
daemon: removing 9
conn=2 fd=9 closed
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: select: listen=6 active_threads=0 tvp=NULL
# /usr/sbin/slapd -d -1
@(#) $OpenLDAP: slapd 2.1.30 (Jul 27 2004 08:02:08) $
        @euklid:/home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/\
                              debian/build/servers/slapd
                              openldap2-2.1.30/debian/build/servers/slapd
daemon_init: <null>
daemon_init: listen on ldap:///
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap:///)
slap_open_listener: socket() failed for AF_INET6 errno=97 (Address family not supported by protocol) 
daemon: initialized ldap:///
daemon_init: 2 listeners opened
ldap_pvt_gethostbyname_a: host=todoscsi, r=0
slapd init: initiated server.
slap_sasl_init: initialized!
reading config file /etc/ldap/slapd.conf
line 11 (include         /etc/ldap/schema/core.schema)
reading config file /etc/ldap/schema/core.schema

(...)

slapd startup: initiated.
slapd starting
daemon: added 6r
daemon: select: listen=6 active_threads=0 tvp=NULL
# /usr/sbin/slapd -d -1 -h ldap://gsr.pt:389/
@(#) $OpenLDAP: slapd 2.1.30 (Jul 27 2004 08:02:08) $
        @euklid:/home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/\
                              debian/build/servers/slapd
daemon_init: ldap://gsr.pt:389/
daemon_init: listen on ldap://gsr.pt:389/
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap://gsr.pt:389/)
daemon: initialized ldap://gsr.pt:389/
daemon_init: 1 listeners opened
slapd init: initiated server.
slap_sasl_init: initialized!
reading config file /etc/ldap/slapd.conf
line 11 (include         /etc/ldap/schema/core.schema)
reading config file /etc/ldap/schema/core.schema

(...)

slapd startup: initiated.
slapd starting
daemon: added 6r
daemon: select: listen=6 active_threads=0 tvp=NULL
ldap_log.h
/etc/default/slapd
/etc/ldap/ldap.conf
/etc/ldap/slapd.conf
/etc/default/slapd
/etc/default/slapd
# addgroup --system slapd
Añadiendo el grupo slapd (133)...
Hecho.
# adduser --home /var/lib/ldap --shell /bin/false --no-create-home --ingroup slapd --system slapd
adduser: Aviso: El directorio home que Usted especificó ya existe.
Añadiendo usuario del sistema slapd...
Añadiendo nuevo usuario slapd (126) con grupo slapd.
No se crea el directorio home.

/var/lib/ldap
# /etc/init.d/slapd stop
Stopping OpenLDAP: slapd.
/etc/ldap
/var/lib/slapd
/var/lib/ldap
/var/run/slapd
# /bin/chown -R slapd.slapd /etc/ldap /var/lib/slapd /var/lib/ldap /var/run/slapd
/etc/default/slapd
SLAPD_USER="slapd"
SLAPD_GROUP="slapd"
# /etc/init.d/slapd start
Starting OpenLDAP: slapd.
# /bin/ps auxf
USER       PID %CPU %MEM   VSZ  RSS TTY   STAT START TIME COMMAND
slapd    12728  0.0  0.6 12216 3556 ?     S    15:02 0:00 /usr/sbin/slapd -g slapd -u slapd 
slapd    12729  0.0  0.6 12216 3556 ?     S    15:02 0:00  \_ /usr/sbin/slapd -g slapd -u slapd 
slapd    12730  0.0  0.6 12216 3556 ?     S    15:02 0:00      \_ /usr/sbin/slapd -g slapd -u slapd 
/etc/default/slapd
SLAPD_SERVICES="ldap://gsr.pt:389/ ldaps://gsr.pt:636/"
# /bin/netstat -puta
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address     Foreign Address    State   PID/Program name
tcp        0      0 *:ldap            *:*                LISTEN 12728/slapd
# /etc/init.d/slapd restart
Stopping OpenLDAP: slapd.
Starting OpenLDAP: slapd.
# /bin/netstat -puta
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address    Foreign Address   State   PID/Program name
tcp        0      0 gsr.pt:ldap      *:*               LISTEN 12817/slapd
tcp        0      0 gsr.pt:ldaps      *:*               LISTEN 12817/slapd
# /bin/ps auxfw

USER  PID   %CPU %MEM  VSZ  RSS TTY STAT START TIME COMMAND
slapd 12817 0.0  0.6 12216 3552 ?   S    15:19 0:00 /usr/sbin/slapd -h ldap://gsr.pt:389/ 
                                                    |                  ldaps://gsr.pt:636/
                                                    |               -g slapd -u slapd
slapd 12818 0.0  0.6 12216 3552 ?   S    15:19 0:00  \_ /usr/sbin/slapd -h ldap://gsr.pt:389/ 
                                                       |                   ldaps://gsr.pt:636/
                                                       |                -g slapd -u slapd
slapd 12819 0.0  0.6 12216 3552 ?   S    15:19 0:00     \_ /usr/sbin/slapd -h ldap://gsr.pt:389/ 
                                                                              ldaps://gsr.pt:636/
                                                                           -g slapd -u slapd


/etc/ldap/ldap.conf
/etc/ldap/ldap.conf
/etc/ldap/ldap.conf
#
# Configuración por defecto de LDAP
#

# Vea ldap.conf(5) para más detalles
# Este archivo ha de poderse leer por todo el mundo,
# pero no escribirse por todos.

# Su servidor LDAP. Ha de ser resoluble sin utilizar LDAP.
HOST gsr.pt

# El nombre distinguido para la base de las búsquedas.
BASE dc=gsr, dc=pt

# El puerto.
# Opcional: por defecto es el 389. El 636 es para ldaps
port 389
/etc/ldap/ldap.conf
# /bin/chmod -v 644 /etc/ldap/ldap.conf
el modo de `/etc/ldap/ldap.conf' cambia a 0644 (rw-r--r--)
/etc/ldap/slapd.conf
# /bin/chmod -v 600 /etc/ldap/slapd.conf
el modo de `/etc/ldap/slapd.conf' cambia a 0600 (rw-------)
# apt-get install openssl
$ openssl req -newkey rsa:1024 -x509 -nodes -out server.pem -keyout server.pem -days 365
Generating a 1024 bit RSA private key
..........................++++++
...............................++++++
writing new private key to 'server.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:PT
State or Province Name (full name) [Some-State]:Braganca
Locality Name (eg, city) []:Braganca
Organization Name (eg, company) [Internet Widgits Pty Ltd]:gsr.pt
Organizational Unit Name (eg, section) []:gsr.pt
Common Name (eg, YOUR name) []:gsr.pt
Email Address []:sergio@gsr.pt
server.pem
/etc/ldap/slapd.conf
slapd.conf
TLSCACertificateFile server.pem 
TLSCertificateFile server.pem 
TLSCertificateKeyFile server.pem
/var/tmp/mica
$ /bin/mkdir -v /var/tmp/mica
/bin/mkdir: se ha creado el directorio `/var/tmp/mica'
/var/tmp/mica
CA.sh
$ cd /var/tmp/mica
$ /usr/lib/ssl/misc/CA.sh -newca
CA certificate filename (or enter to create)
[Enter]
Making CA certificate ...
Generating a 1024 bit RSA private key
....................+++
...................................+++
writing new private key to './demoCA/private/./cakey.pem'
Enter PEM pass phrase: [Clave ca] 
Verifying - Enter PEM pass phrase: [Clave ca]
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:PT
State or Province Name (full name) [Some-State]:Braganca
Locality Name (eg, city) []:Braganca
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Companhia GSR
Organizational Unit Name (eg, section) []:Unidade de certificados
Common Name (eg, YOUR name) []:gsr.pt
Email Address []:[Enter]

/var/tmp/mica
$ /usr/bin/tree
.
`-- demoCA
    |-- cacert.pem
    |-- certs
    |-- crl
    |-- index.txt
    |-- newcerts
    |-- private
    |   `-- cakey.pem
    `-- serial

5 directories, 4 files
demoCA/cacert.pem
demoCA/private/cakey.pem
$ /usr/bin/openssl req -newkey rsa:1024 -nodes -keyout newreq.pem -out newreq.pem
Generating a 1024 bit RSA private key
...++++++
...........++++++
writing new private key to 'newreq.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:PT
State or Province Name (full name) [Some-State]:Braganca
Locality Name (eg, city) []:Braganca
Organization Name (eg, company) [Internet Widgits Pty Ltd]:SubGSR
Organizational Unit Name (eg, section) []:Controle de acesso
Common Name (eg, YOUR name) []:gsr.pt
Email Address []:sergio@gsr.pt


Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:[Clave] 
An optional company name []:.[Enter]

newreq.pem
$ /usr/lib/ssl/misc/CA.sh -sign
Using configuration from /usr/lib/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:[Clave ca]
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 1 (0x1)
        Validity
            Not Before: Sep 23 16:16:11 2004 GMT
            Not After : Sep 23 16:16:11 2005 GMT
        Subject:
            countryName               = PT
            stateOrProvinceName       = Braganca
            localityName              = Braganca
            organizationName          = SubGSR
            organizationalUnitName    = Controle de acesso
            commonName                = gsr.pt
            emailAddress              = sergio@gsr.pt
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            Netscape Comment:
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier:
                8C:66:2C:3E:0F:63:2F:53:29:FA:28:EA:7F:59:A4:16:4C:DF:7C:6C
            X509v3 Authority Key Identifier:
                keyid:F1:34:77:80:A4:34:4B:71:C8:BF:81:6C:DF:0C:98:D3:62:B7:10:BE
                DirName:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de\
                                                             certificados/CN=gsr.pt
                serial:00

Certificate is to be certified until Sep 23 16:16:11 2005 GMT (365 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=PT, ST=Braganca, L=Braganca, O=Companhia GSR, OU=Unidade de certificados,\
                                                                                   CN=gsr.pt
        Validity
            Not Before: Sep 23 16:16:11 2004 GMT
            Not After : Sep 23 16:16:11 2005 GMT
        Subject: C=PT, ST=Braganca, L=Braganca, O=SubGSR, OU=Controle de acesso, \
                                                        CN=gsr.pt/emailAddress=sergio@gsr.pt
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:ab:bc:62:aa:75:ad:76:6d:05:e6:be:c2:b7:b7:
                    1f:28:3a:b9:ed:0b:b2:11:6a:9d:27:7b:06:69:89:
                    3a:13:3d:29:85:0d:02:87:b7:ac:cf:46:b0:01:3a:
                    30:c6:2e:25:13:af:6f:35:b6:d0:2c:ae:fb:42:24:
                    77:f3:c7:e1:a6:cb:00:35:ca:03:be:b1:d8:dd:22:
                    de:d6:bc:e2:94:d4:1a:ae:47:83:95:0c:a2:ae:1f:
                    c3:d3:f4:1d:7e:cd:cc:9c:48:28:63:35:5c:af:7b:
                    c9:bf:f8:f7:de:2b:09:61:c6:40:30:76:e3:9f:51:
                    28:d0:61:b2:18:9a:d9:8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            Netscape Comment:
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier:
                8C:66:2C:3E:0F:63:2F:53:29:FA:28:EA:7F:59:A4:16:4C:DF:7C:6C
            X509v3 Authority Key Identifier:
                keyid:F1:34:77:80:A4:34:4B:71:C8:BF:81:6C:DF:0C:98:D3:62:B7:10:BE
                DirName:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de \
                                                                    certificados/CN=gsr.pt
                serial:00

    Signature Algorithm: md5WithRSAEncryption
        27:43:54:46:14:dd:f5:2d:64:40:b4:dd:62:b4:79:d6:93:32:
        d4:56:0d:a7:80:60:6a:93:1a:c2:02:e3:f8:33:d9:4d:32:c7:
        0b:34:29:01:72:98:1a:aa:c6:34:78:50:11:0d:92:ab:31:ba:
        9b:3f:27:39:1a:19:8b:a0:2c:d7:ca:56:04:69:c4:ae:cc:e5:
        dc:fa:ce:da:11:a9:25:0c:db:d6:8c:60:b1:86:9a:02:06:c5:
        c4:da:8f:8e:a6:4d:84:06:3d:e1:ce:3e:d9:fa:d4:5b:d5:44:
        36:4f:48:88:d0:ab:ec:03:e5:a7:4f:92:e8:8e:db:aa:89:7e:
        02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Signed certificate is in newcert.pem

newcert.pem
newreq.pem
$ /usr/bin/openssl verify -CAfile demoCA/cacert.pem newcert.pem
newcert.pem: OK
/etc/ldap/ssl
# /usr/bin/tree /etc/ldap/ssl
/etc/ldap/ssl
|-- cacert.pem
|-- certs
|   `-- servidorcert.pem 
|-- crl
|-- index.txt
|-- newcerts
|   `-- 01.pem
|-- private
|   |-- cakey.pem
|   `-- servidorkey.pem 
`-- serial

4 directories, 7 files
newcert.pem
newreq.pem
# /bin/chmod -v 400 /etc/ldap/ssl/private/servidorkey.pem
el modo de `/etc/ldap/ssl/private/servidorkey.pem' cambia a 0400 (r--------)
cacert.pem
cacert.pem
/home/usuario/ssl/
slapd.conf
ldap.conf
/etc/ldap/slapd.conf
slapd.conf
# Certificado firmado de una entidad certificadora y
# el certificado del servidor

TLSCipherSuite HIGH:MEDIUM:+SSLv2 
TLSCACertificateFile /etc/ldap/ssl/cacert.pem 
TLSCertificateFile /etc/ldap/ssl/certs/servidorcert.pem 
TLSCertificateKeyFile /etc/ldap/ssl/private/servidorkey.pem

# Si desea que el cliente necesite autentificación,
# descomente la siguiente línea
TLSVerifyClient demand
# ... si no, descomente esta otra
# TLSVerifyClient never
/etc/ldap/ldap.conf
ldaprc
.ldaprc
ldaprc
.ldaprc
ldaprc
.ldaprc
ldap.conf
ldap.conf
/etc/ldap/ldap.conf
ldap.conf
# 
# Configuración global de LDAP
# 
 
# Lea ldap.conf(5) para más detalles
# Este archivo se ha de poder leer por todo el mundo, pero no escribir. 
HOST gsr.pt 
BASE dc=gsr, dc=pt
PORT 636 
 
TLS_CACERT /etc/ldap/ssl/certs/cacert.pem 
TLS_REQCERT demand
.ldaprc
.ldaprc
.ldaprc
# 
# Configuraciones de usuario específicas para LDAP
# 
 
# Sobreescribe la directiva global (si se ha establecido) 
TLS_REQCERT demand 
 
# Autentificación del cliente
TLS_CERT /home/ldap-user/ssl/certs/client.cert.pem 
TLS_KEY /home/ldap-user/ssl/certs/keys/client.key.pem
slapd.conf
/etc/ldap/schema
slapd.conf
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/misc.schema
include         /etc/ldap/schema/openldap.schema
include         /etc/ldap/schema/inetorgperson.schema
slapd.conf
ldap.conf
ldaprc
.ldaprc
$ /usr/bin/apt-get source openldap2
/etc/apt/sources.list
$ cd openldap2-2.1.30/
/usr/bin/bzcat ../openldap-2.1.30-without-gnutls.patch.bz2 | /usr/bin/patch -p1
patching file configure
patching file configure.in
patching file contrib/ldapc++/config.guess
patching file contrib/ldapc++/config.sub
patching file debian/changelog
patching file debian/control
patching file include/ldap_pvt_gnutls.h
patching file include/portable.h.in
patching file libraries/libldap/getdn.c
patching file libraries/libldap/gnutls.c
patching file libraries/libldap/Makefile.in
patching file libraries/libldap/tls.c
patching file libraries/libldap_r/Makefile.in
patching file servers/slapd/schema_init.c
# /usr/bin/apt-get build-dep openldap2
$ /usr/bin/dpkg-buildpackage -us -uc -b -rfakeroot
$ /bin/ls -l ../*deb
-rw-r--r--  1 sergio src 112810 2004-09-21 22:12 ldap-utils_2.1.30-3.1_i386.deb
-rw-r--r--  1 sergio src 284366 2004-09-21 22:12 libldap2_2.1.30-3.1_i386.deb
-rw-r--r--  1 sergio src 321336 2004-09-21 22:12 libldap2-dev_2.1.30-3.1_i386.deb
-rw-r--r--  1 sergio src  71864 2004-09-21 22:12 libslapd2-dev_2.1.30-3.1_all.deb
-rw-r--r--  1 sergio src 945220 2004-09-21 22:12 slapd_2.1.30-3.1_i386.deb
# /usr/bin/dpkg -i ../slapd_2.1.30-3.1_i386.deb \
                   ../ldap-utils_2.1.30-3.1_i386.deb \
                   ../libldap2_2.1.30-3.1_i386.deb
(Leyendo la base de datos ...
132792 ficheros y directorios instalados actualmente.)
Preparando para reemplazar slapd 2.1.30-3 (usando slapd_2.1.30-3.1_i386.deb) ...
Stopping OpenLDAP: slapd.
Stopping OpenLDAP: slapd.
Desempaquetando el reemplazo de slapd ...
Preparando para reemplazar ldap-utils 2.1.30-3 (usando ldap-utils_2.1.30-3.1_i386.deb) ...
Desempaquetando el reemplazo de ldap-utils ...
Preparando para reemplazar libldap2 2.1.30-3 (usando libldap2_2.1.30-3.1_i386.deb) ...
Desempaquetando el reemplazo de libldap2 ...
Configurando libldap2 (2.1.30-3.1) ...

Configurando slapd (2.1.30-3.1) ...
Starting OpenLDAP: slapd.

Configurando ldap-utils (2.1.30-3.1) ...
ldap.conf
$ /usr/bin/openssl s_client -connect gsr.pt:636 -showcerts -state \
                            -CAfile /etc/ldap/ssl/cacert.pem
CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=1 /C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
verify return:1
depth=0 /C=PT/ST=Braganca/L=Braganca/O=SubGSR/OU=Controle de \
                                              acesso/CN=gsr.pt/emailAddress=sergio@gsr.pt
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
---
Certificate chain
 0 s:/C=PT/ST=Braganca/L=Braganca/O=SubGSR/OU=Controle de \
                                           acesso/CN=gsr.pt/emailAddress=sergio@gsr.pt
   i:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
   i:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=PT/ST=Braganca/L=Braganca/O=SubGSR/OU=Controle de \
                                             acesso/CN=gsr.pt/emailAddress=sergio@gsr.pt
issuer=/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
---
No client certificate CA names sent 
---
SSL handshake has read 1933 bytes and written 340 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: C5101CF18CB3C821E1AD7C6CCD74693773C1AF75D2A209C6E12075B300A29CF2
    Session-ID-ctx:
    Master-Key: DB2972AF0D2AFF52B57861BBFE8164F5DE2347D3B5248C8D193C26F9B2DA93C6FFB16\
                                                           A705BAD5447716F7BAB2DA958D6
    Key-Arg   : None
    Start Time: 1095969142
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---

$ /usr/bin/openssl s_client -connect gsr.pt:636 -state \
                            -CAfile /etc/ldap/ssl/cacert.pem \
                            -cert /home/certs/ldap.cliente.cert.pem \
                            -key /home/certs/ldap.cliente.key.pem
CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=1 /C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
verify return:1
depth=0 /C=PT/ST=Braganca/L=Braganca/O=SubGSR/OU=Controle de \
                                               acesso/CN=gsr.pt/emailAddress=sergio@gsr.pt
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server certificate request A 
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A 
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A 
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
---
Certificate chain
 0 s:/C=PT/ST=Braganca/L=Braganca/O=SubGSR/OU=Controle de \
                                              acesso/CN=gsr.pt/emailAddress=sergio@gsr.pt
   i:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
-----BEGIN CERTIFICATE-----
MIIDkDCCAvmgAwIBAgIBATANBgkqhkiG9w0BAQQFADB+MQswCQYDVQQGEwJQVDER
MA8GA1UECBMIQnJhZ2FuY2ExETAPBgNVBAcTCEJyYWdhbmNhMRYwFAYDVQQKEw1D
b21wYW5oaWEgR1NSMSAwHgYDVQQLExdVbmlkYWRlIGRlIGNlcnRpZmljYWRvczEP
MA0GA1UEAxMGZ3NyLnB0MB4XDTA0MDkyMzE2MTYxMVoXDTA1MDkyMzE2MTYxMVow
gZAxCzAJBgNVBAYTAlBUMREwDwYDVQQIEwhCcmFnYW5jYTERMA8GA1UEBxMIQnJh
Z2FuY2ExDzANBgNVBAoTBlN1YkdTUjEbMBkGA1UECxMSQ29udHJvbGUgZGUgYWNl
c3NvMQ8wDQYDVQQDEwZnc3IucHQxHDAaBgkqhkiG9w0BCQEWDXNlcmdpb0Bnc3Iu
cHQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKu8Yqp1rXZtBea+wre3Hyg6
ue0LshFqnSd7BmmJOhM9KYUNAoe3rM9GsAE6MMYuJROvbzW20Cyu+0Ikd/PH4abL
ADXKA76x2N0i3ta84pTUGq5Hg5UMoq4fw9P0HX7NzJxIKGM1XK97yb/4994rCWHG
QDB2459RKNBhshia2YpTAgMBAAGjggEJMIIBBTAJBgNVHRMEAjAAMCwGCWCGSAGG
+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
jGYsPg9jL1Mp+ijqf1mkFkzffGwwgaoGA1UdIwSBojCBn4AU8TR3gKQ0S3HIv4Fs
3wyY02K3EL6hgYOkgYAwfjELMAkGA1UEBhMCUFQxETAPBgNVBAgTCEJyYWdhbmNh
MREwDwYDVQQHEwhCcmFnYW5jYTEWMBQGA1UEChMNQ29tcGFuaGlhIEdTUjEgMB4G
A1UECxMXVW5pZGFkZSBkZSBjZXJ0aWZpY2Fkb3MxDzANBgNVBAMTBmdzci5wdIIB
ADANBgkqhkiG9w0BAQQFAAOBgQAnQ1RGFN31LWRAtN1itHnWkzLUVg2ngGBqkxrC
AuP4M9lNMscLNCkBcpgaqsY0eFARDZKrMbqbPyc5GhmLoCzXylYEacSuzOXc+s7a
EaklDNvWjGCxhpoCBsXE2o+Opk2EBj3hzj7Z+tRb1UQ2T0iI0KvsA+WnT5Lojtuq
iX4C5A==
-----END CERTIFICATE-----
 1 s:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
   i:/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=PT/ST=Braganca/L=Braganca/O=SubGSR/OU=Controle de \
                                             acesso/CN=gsr.pt/emailAddress=sergio@gsr.pt
issuer=/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
---
Acceptable client certificate CA names 
/C=PT/ST=Braganca/L=Braganca/O=Companhia GSR/OU=Unidade de certificados/CN=gsr.pt
---
SSL handshake has read 2072 bytes and written 2274 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: CE4D0BFD367AF2F4B2E51ECB8C48A1D1A3F5EC0F00346EF13551534C1F1CE8E1
    Session-ID-ctx:
    Master-Key: 4D9089B2602C0376B92079BA539D8D3F244B5CBF31A68FD3A51DDC801251AA16\
                                                 5C194DA63B1BFB7025D818F2480E6450
    Key-Arg   : None
    Start Time: 1095970126
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---

datos-iniciales.ldif
#datos-iniciales.ldif
dn: cn=sergio,dc=gsr,dc=pt
objectclass: organizationalRole
cn: sergio

dn: ou=unidade de contas,dc=gsr,dc=pt
objectclass: organizationalUnit
ou: unidade de contas
description: Organizacao de provas que contera ao administrador

dn: cn=senhor administrador,ou=unidade de contas,dc=gsr,dc=pt
objectclass: person
userPassword: chaveprova
description: Usuario de exemplo como administrador
cn: senhor administrador
sn: admin
$ /usr/bin/ldapadd -x -D "cn=admin,dc=gsr,dc=pt" -W -f datos-iniciales.ldif
Enter LDAP Password:[Clave]
adding new entry "cn=sergio,dc=gsr,dc=pt"

adding new entry "ou=unidade de contas,dc=gsr,dc=pt"

adding new entry "cn=senhor administrador,ou=unidade de contas,dc=gsr,dc=pt"


slapd.conf
access to *
        by dn="cn=admin,dc=gsr,dc=pt" write
        by dn="cn=readadmin,dc=gsr,dc=pt" read 
        by self write
        by users read
        by anonymous auth
$ /usr/bin/ldapsearch -x -b 'dc=gsr,dc=pt' -D "cn=admin,dc=gsr,dc=pt" -W \
                      '(objectclass=*)'
$ /usr/bin/ldapsearch -x -b 'dc=gsr,dc=pt' -D "cn=admin,dc=gsr,dc=pt" -W \
                      '(objectclass=*)' -H ldaps://gsr.pt/
$ /usr/bin/ldapsearch -x -b 'dc=gsr,dc=pt' -D "cn=admin,dc=gsr,dc=pt" -W \
                      '(objectclass=*)' -H ldap://gsr.pt/ -ZZ
Enter LDAP Password:[Clave]
# extended LDIF
#
# LDAPv3
# base <dc=gsr,dc=pt> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# gsr.pt
dn: dc=gsr,dc=pt
objectClass: top
objectClass: dcObject
objectClass: organization
o: gsr.pt
dc: gsr

# admin, gsr.pt
dn: cn=admin,dc=gsr,dc=pt
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: e2NyeXB0fXkxcFlKZVpQQzQ5Qlk=

# sergio, gsr.pt
dn: cn=sergio,dc=gsr,dc=pt
objectClass: organizationalRole
cn: sergio

# unidade de contas, gsr.pt
dn: ou=unidade de contas,dc=gsr,dc=pt
objectClass: organizationalUnit
ou: unidade de contas
description: Organizacao de provas que contera ao administrador

# senhor administrador, unidade de contas, gsr.pt
dn: cn=senhor administrador,ou=unidade de contas,dc=gsr,dc=pt
objectClass: person
userPassword:: Y2hhdmVwcm92YQ==
description: Usuario de exemplo como administrador
cn: senhor administrador
sn: admin

# search result
search: 3
result: 0 Success

# numResponses: 6
# numEntries: 5
$ /usr/bin/ldapsearch -x -b 'cn=sergio,dc=gsr,dc=pt' -D "cn=admin,dc=gsr,dc=pt" \
                      '(objectclass=*)' -H ldaps://gsr.pt/ -w clave
# extended LDIF
#
# LDAPv3
# base <cn=sergio,dc=gsr,dc=pt> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# sergio, gsr.pt
dn: cn=sergio,dc=gsr,dc=pt
objectClass: organizationalRole
cn: sergio

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
$ 
$ /usr/bin/ldapsearch -x -b 'ou=unidade de contas,,dc=gsr,dc=pt' \
                      -D "cn=admin,dc=gsr,dc=pt" '(objectclass=*)' -H ldaps://gsr.pt/ -w clave
# extended LDIF
#
# LDAPv3
# base <ou=unidade de contas,dc=gsr,dc=pt> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# unidade de contas, gsr.pt
dn: ou=unidade de contas,dc=gsr,dc=pt
objectClass: organizationalUnit
ou: unidade de contas
description: Organizacao de provas que contera ao administrador

# senhor administrador, unidade de contas, gsr.pt
dn: cn=senhor administrador,ou=unidade de contas,dc=gsr,dc=pt
objectClass: person
userPassword:: Y2hhdmVwcm92YQ==
description: Usuario de exemplo como administrador
cn: senhor administrador
sn: admin

# search result
search: 2
result: 0 Success

# numResponses: 3
# numEntries: 2
/etc/libnss-ldap.conf
/etc/pam_ldap.conf
/etc/nsswitch.conf
/etc/nsswitch.conf
/etc/pam.d/
/etc
$ /usr/bin/apt-cache show libnss-ldap
Package: libnss-ldap
Priority: extra
Section: net
Installed-Size: 220
Maintainer: Stephen Frost <sfrost@debian.org>
Architecture: i386
Version: 220-1 
Depends: libc6 (>= 2.3.2.ds1-4), libdb4.2, libkrb53 (>= 1.3.2), libldap2 (>= 2.1.17-1), debconf
Recommends: nscd, libpam-ldap
Filename: pool/main/libn/libnss-ldap/libnss-ldap_220-1_i386.deb
Size: 73688
MD5sum: 1d2667fd13efc134e5baaa1d63f45372
Description: NSS module for using LDAP as a naming service
 This package provides a Name Service Switch that allows your LDAP server
 act as a name service. This means providing user account information,
 group id's, host information, aliases, netgroups, and basically anything
 else that you would normally get from /etc flat files or NIS.
 .
 If used with glibc 2.1's nscd (Name Service Cache Daemon) it will help
 reduce your network traffic and speed up lookups for entries.


# /usr/bin/apt-get install libnss-ldap
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Paquetes recomendados
  nscd libpam-ldap
Se instalarán los siguientes paquetes NUEVOS:
  libnss-ldap
0 actualizados, 1 se instalarán, 0 para eliminar y 27 no actualizados.
Se necesita descargar 0B/73,7kB de archivos.
Se utilizarán 225kB de espacio de disco adicional después de desempaquetar.
Preconfiguring packages ...
# /usr/sbin/dpkg-reconfigure --priority=low libnss-ldap
/etc/nsswitch.conf
/usr/share/doc/libnss-ldap/examples/nsswitch.ldap
/etc/nsswitch.conf
Seleccionando el paquete libnss-ldap previamente no seleccionado.
(Leyendo la base de datos ...
132069 ficheros y directorios instalados actualmente.)
Desempaquetando libnss-ldap (de .../libnss-ldap_220-1_i386.deb) ...
Configurando libnss-ldap (220-1) ...

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
/etc/libnss-ldap.conf
/etc/libnss-ldap.conf
/etc/libnss-ldap.conf
$ /usr/bin/apt-cache show libpam-ldap
Package: libpam-ldap
Priority: extra
Section: admin
Installed-Size: 288
Maintainer: Stephen Frost <sfrost@debian.org>
Architecture: i386
Version: 169-1 
Depends: libc6 (>= 2.3.2.ds1-4), libldap2 (>= 2.1.17-1), libpam0g (>= 0.76), debconf (>= 0.5)
Suggests: libnss-ldap
Filename: pool/main/libp/libpam-ldap/libpam-ldap_169-1_i386.deb
Size: 52158
MD5sum: 5d1d450ac94b5e86a313a8277f5f84a3
Description: Pluggable Authentication Module allowing LDAP interfaces
 This module let's you use you LDAP server to authenticate users with
 programs that utilize PAM. If used along with libnss-ldap, you can
 replace your entire flat file (/etc/*) structure or NIS with LDAP.


# /usr/bin/apt-get install libpam-ldap
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Paquetes sugeridos:
  libnss-ldap
Se instalarán los siguientes paquetes NUEVOS:
  libpam-ldap
0 actualizados, 1 se instalarán, 0 para eliminar y 27 no actualizados.
Se necesita descargar 0B/52,2kB de archivos.
Se utilizarán 295kB de espacio de disco adicional después de desempaquetar.

Preconfiguring packages ...
# /usr/sbin/dpkg-reconfigure --priority=low libpam-ldap
/etc/ldap/slapd.conf
Seleccionando el paquete libpam-ldap previamente no seleccionado.
(Leyendo la base de datos ...
132024 ficheros y directorios instalados actualmente.)
Desempaquetando libpam-ldap (de .../libpam-ldap_169-1_i386.deb) ...
Configurando libpam-ldap (169-1) ...

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
/etc/pam_ldap.conf
/etc/pam_ldap.conf
/etc/pam_ldap.conf
/etc/pam.d/
/etc/libnss-ldap.conf
/etc/pam_ldap.conf
/etc/libnss-ldap.conf
/etc/pam_ldap.conf
binddn cn=readadmin,dc=gsr,dc=pt 
bindpw ********** 
rootbinddn cn=admin,dc=gsr,dc=pt
/etc/ldap.secret
/etc/ldap.secret
# /bin/echo "clave-del-administrdor" > /etc/ldap.secret
# /bin/chmod 600 /etc/ldap.secret
/etc/ldap.secret
ssl start_tls
ssl on
tls_checkpeer yes
tls_cacertfile /etc/ldap/ssl/cacert.pem
tls_ciphers TLSv1
tls_cert
tls_key
/etc/nsswitch.conf
nsswitch.conf
/etc/nsswitch.conf
/etc/nsswitch.conf
passwd:          files ldap 
group:           files ldap 
shadow:          files ldap 
hosts:           files ldap dns 

/etc/nsswitch.conf
nsswitch.conf
/etc/pam.d/
/etc/pam.d/
/etc/pam.d/common-account
/etc/pam.d/common-account
account required          pam_unix.so
account sufficient        pam_ldap.so
/etc/pamd.d/common-account
/etc/pam.d/common-auth
/etc/pam.d/common-auth
auth     sufficient     pam_unix.so
auth     sufficient     pam_ldap.so try_first_pass
auth     required       pam_env.so
auth     required       pam_securetty.so
auth     required       pam_unix_auth.so
auth     required       pam_warn.so
auth     required       pam_deny.so
/etc/pamd.d/common-auth
/etc/pam.d/common-session
/etc/pam.d/common-session
session required        pam_limits.so
session required        pam_unix.so
session optional        pam_ldap.so
common-session
session required        pam_mkhomedir.so skel=/etc/skel/ umask=0022
/etc/pamd.d/common-session
/etc/pam.d/common-passwd
/etc/pam.d/common-password
password required       pam_cracklib.so  retry=3 minlen=8 difok=4
password sufficient     pam_unix.so use_authtok md5 shadow
password sufficient     pam_ldap.so use_authtok
password required       pam_warn.so
password required       pam_deny.so
/etc/pamd.d/common-password
# /usr/bin/apt-get install libpam-dotfile
$ /usr/bin/pamtest passwd sergio
Trying to authenticate <sergio> for service <passwd>.
Password:[Clave del usuario]
Authentication successful.
$ /usr/bin/pamtest ssh sergio
Trying to authenticate <sergio> for service <ssh>.
Password:[Clave fallida del usuario]
Failed to authenticate: Authentication service cannot retrieve authentication info.
$ /usr/bin/pamtest ssh sergio
Trying to authenticate <sergio> for service <ssh>.
Password:[Clave del usuario]
Authentication successful.
smb.conf
smb.conf
/etc/ldap/slapd.conf
/etc/ldap/slapd.conf
$ grep -i '^s.*m.*b' /usr/dict/words
salmonberry
samba
sawtimber
scramble
\\maquina-de-red\directorio
\\toltec\spirit
smb.conf
# /usr/bin/smbstatus
Processing section "[homes]"
Processing section "[printers]"
Processing section "[spirit]"

Samba version 2.2.6
Service     uid    gid    pid     machine
-----------------------------------------
spirit      jay    jay    7735    maya     (172.16.1.6) Sun Aug 12 12:17:14 2002
spirit      jay    jay    7779    aztec    (172.16.1.2) Sun Aug 12 12:49:11 2002
jay         jay    jay    7735    maya     (172.16.1.6) Sun Aug 12 12:56:19 2002

Locked files:
Pid    DenyMode   R/W        Oplock     Name
--------------------------------------------------
7735   DENY_WRITE RDONLY     NONE       /u/RegClean.exe   Sun Aug 12 13:01:22 2002

Share mode memory usage (bytes):
   1048368(99%) free + 136(0%) used + 72(0%) overhead = 1048576(100%) total
!  @  #  $  %  ^  &  (  )  -  '  {  }  .  ~
TOLTEC<00>
D:\> nbtstat -a toltec
       NetBIOS Remote Machine Name Table
   Name               Type         Status
---------------------------------------------
TOLTEC          <00>  UNIQUE      Registered
TOLTEC          <03>  UNIQUE      Registered
TOLTEC          <20>  UNIQUE      Registered
...
       NetBIOS Remote Machine Name Table
   Name               Type         Status
---------------------------------------------
METRAN         <00>   GROUP       Registered
METRAN         <1E>   GROUP       Registered
..__MSBROWSE__.<01>   GROUP       Registered
\\toltec\spirit\
C:\Windows
C:\Windows\sara.pwl
S-1-5-21-1638239387-7675610646-9254035128-545
Samba Team
26 Carstensz st
Griffith, ACT
2603 Australia
$ /usr/bin/apt-cache show samba
Package: samba
Priority: optional
Section: net
Installed-Size: 6036
Maintainer: Eloy A. Paris <peloy@debian.org>
Architecture: i386
Version: 3.0.7-1
Replaces: samba-common (<= 2.0.5a-2)
Depends: samba-common  (= 3.0.7-1), netbase, logrotate,
libacl1 (>= 2.2.11-1), libc6 (>= 2.3.2.ds1-4), libcomerr2 (>= 1.33-3),
libcupsys2-gnutls10 (>= 1.1.20final-1), libkrb53 (>= 1.3.2),
libldap2 (>= 2.1.17-1), libpam0g (>= 0.76), libpopt0 (>= 1.7),
debconf (>= 0.5) | debconf-2.0, libpam-runtime (>= 0.76-13.1),
libpam-modules
Suggests: samba-doc  
Filename: pool/main/s/samba/samba_3.0.7-1_i386.deb
Size: 2412814
MD5sum: b60a9942c8057c2f7ef3868bc79954a0
Description: a LanManager-like file and printer server for Unix
 The Samba software suite is a collection of programs that
 implements the SMB protocol for unix systems, allowing you to serve
 files and printers to Windows, NT, OS/2 and DOS clients. This protocol
 is sometimes also referred to as the LanManager or NetBIOS protocol.
 .
 This package contains all the components necessary to turn your
 Debian GNU/Linux box into a powerful file and printer server.
 .
 Currently, the Samba Debian packages consist of the following:
 .
  samba - LanManager-like file and printer server for Unix.
  samba-common - Samba common files used by both the server and the client.
  smbclient - LanManager-like simple client for Unix.
  swat - Samba Web Administration Tool
  samba-doc - Samba documentation.
  smbfs - Mount and umount commands for the smbfs (kernels 2.2.x and above).
  libpam-smbpass - pluggable authentication module for SMB password database
  libsmbclient - Shared library that allows applications to talk to SMB servers
  libsmbclient-dev - libsmbclient shared libraries
  winbind: Service to resolve user and group information from Windows NT servers
  python2.3-samba: Python bindings that allow access to various aspects of Samba
 .
 It is possible to install a subset of these packages depending on
 your particular needs. For example, to access other SMB servers you
 should only need the smbclient and samba-common packages.
Task: file-server, print-server


$ /usr/bin/apt-cache show samba-common
Package: samba-common
Priority: optional
Section: net
Installed-Size: 4456
Maintainer: Eloy A. Paris <peloy@debian.org>
Architecture: i386
Source: samba
Version: 3.0.7-1
Replaces: samba (<< 2.999+3.0.alpha21-4)
Depends: debconf, libpam-modules, libc6 (>= 2.3.2.ds1-4),
libcomerr2 (>= 1.33-3), libkrb53 (>= 1.3.2), libldap2 (>= 2.1.17-1),
libpopt0 (>= 1.7)
Filename: pool/main/s/samba/samba-common_3.0.7-1_i386.deb
Size: 1904980
MD5sum: 46ffe1e90eaf4dea5337ea7d87ea7732
Description: Samba common files used by both the server and the client
 The Samba software suite is a collection of programs that
 implements the SMB protocol for unix systems, allowing you to serve
 files and printers to Windows, NT, OS/2 and DOS clients. This protocol
 is sometimes also referred to as the LanManager or NetBIOS protocol.
 .
 This package contains the common files that are used by both the server
 (provided in the samba package) and the client (provided in the smbclient
 package).


# /usr/bin/apt-get install samba
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes extras:
  samba-common
Paquetes sugeridos:
  samba-doc
Se instalarán los siguientes paquetes NUEVOS:
  samba samba-common
0 actualizados, 2 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/4318kB de archivos.
Se utilizarán 10,7MB de espacio de disco adicional después de desempaquetar.
¿Desea continuar? [S/n] S
Preconfiguring packages ...
Seleccionando el paquete samba-common previamente no seleccionado.
(Leyendo la base de datos ...
133203 ficheros y directorios instalados actualmente.)
Desempaquetando samba-common (de .../samba-common_3.0.7-1_i386.deb) ...
Seleccionando el paquete samba previamente no seleccionado.
Desempaquetando samba (de .../samba_3.0.7-1_i386.deb) ...
Configurando samba-common (3.0.7-1) ...

Configurando samba (3.0.7-1) ...
Generating /etc/default/samba... 
TDBSAM version too old (0), trying to convert it.
TDBSAM converted successfully.
--------- IMPORTANT INFORMATION FOR XINETD USERS ---------- 
The following line will be added to your /etc/inetd.conf file:

#<off># netbios-ssn     stream  tcp     nowait  root    /usr/sbin/tcpd  /usr/sbin/smbd

If you are indeed using xinetd, you will have to convert the
above into /etc/xinetd.conf format, and add it manually. See
/usr/share/doc/xinetd/README.Debian for more information.
-----------------------------------------------------------

Starting Samba daemons: nmbd smbd.

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...


# /usr/sbin/dpkg-reconfigure --priority=low samba
$ /usr/bin/apt-cache show smbclient smbfs
Package: smbclient
Priority: optional
Section: net
Installed-Size: 5988
Maintainer: Eloy A. Paris <peloy@debian.org>
Architecture: i386
Source: samba
Version: 3.0.7-1
Replaces: samba (<< 2.999+3.0.alpha21-4)
Provides: samba-client
Depends: samba-common   (= 3.0.7-1),
libc6 (>= 2.3.2.ds1-4), libcomerr2 (>= 1.33-3), libkrb53 (>= 1.3.2),
libldap2 (>= 2.1.17-1), libncurses5 (>= 5.4-1), libpopt0 (>= 1.7),
libreadline4 (>= 4.3-1)
Suggests: smbfs  
Filename: pool/main/s/samba/smbclient_3.0.7-1_i386.deb
Size: 2411216
MD5sum: 3c4fdf54182fce094b94a6f3e420e6f9
Description: a LanManager-like simple client for Unix
 The Samba software suite is a collection of programs that
 implements the SMB protocol for unix systems, allowing you to serve
 files and printers to Windows, NT, OS/2 and DOS clients. This protocol
 is sometimes also referred to as the LanManager or NetBIOS protocol.
 .
 This package contains some client components of the Samba suite. In
 particular it includes the command line utilities smbclient, smbtar,
 and smbspool. If you want to mount shares exported from Microsoft
 Windows machines or a Samba server you must install the smbfs package.
Task: file-server, print-server

Package: smbfs
Priority: optional
Section: otherosfs
Installed-Size: 720
Maintainer: Eloy A. Paris <peloy@debian.org>
Architecture: i386
Source: samba
Version: 3.0.7-1
Replaces: smbfsx
Depends: netbase (>= 2.02), samba-common  (= 3.0.7-1),
libc6 (>= 2.3.2.ds1-4), libcomerr2 (>= 1.33-3), libkrb53 (>= 1.3.2), libldap2 (>= 2.1.17-1)
Suggests: smbclient  
Conflicts: smbfsx, suidmanager (<< 0.50)
Filename: pool/main/s/samba/smbfs_3.0.7-1_i386.deb
Size: 311844
MD5sum: 3051f174f56f0b1cc5056364847daa50
Description: mount and umount commands for the smbfs (for kernels >= than 2.2.x)
 Smbfs is a filesystem which understands the SMB protocol.
 This is the protocol Windows for Workgroups, Windows NT or
 LAN Manager use to talk to each other. It was inspired by
 samba, the program by Andrew Tridgell that turns any unix
 site into a file server for DOS or Windows clients.
 .
 If you want to use command-line utilities like smbclient, smbtar
 and/or smbspool you just need to install the smbclient package.
 .
 Starting with the Debian Samba packages version 2.2.0-1, the old smbfs
 utilities for 2.0.x have been removed. There are no wrapper scripts
 that call a specific smbmount/smbumount depending on the kernel
 version.  If you are using a 2.0.x kernel please upgrade or use the
 latest Samba 2.0.7 Debian package.
Task: file-server, print-server


# /usr/bin/apt-get install smbclient smbfs
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes NUEVOS:
  smbclient smbfs
0 actualizados, 2 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/2723kB de archivos.
Se utilizarán 6869kB de espacio de disco adicional después de desempaquetar.
Seleccionando el paquete smbclient previamente no seleccionado.
(Leyendo la base de datos ...
133280 ficheros y directorios instalados actualmente.)
Desempaquetando smbclient (de .../smbclient_3.0.7-1_i386.deb) ...
Seleccionando el paquete smbfs previamente no seleccionado.
Desempaquetando smbfs (de .../smbfs_3.0.7-1_i386.deb) ...
Configurando smbclient (3.0.7-1) ...
Configurando smbfs (3.0.7-1) ...
localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
$ /usr/bin/dpkg -L smbclient  | /bin/grep bin
/usr/bin/smbclient
/usr/bin/smbtar
/usr/bin/rpcclient
/usr/bin/smbspool
/usr/bin/smbtree
/usr/bin/smbcacls
/usr/bin/smbcquotas
$ /usr/bin/dpkg -L smbfs  | /bin/grep bin
/usr/bin/smbmount
/usr/bin/smbumount
/usr/bin/smbmnt
/sbin/mount.smbfs
/sbin/mount.smb

# /usr/bin/apt-get install samba-doc
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes NUEVOS:
  samba-doc
0 actualizados, 1 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/11,6MB de archivos.
Se utilizarán 18,1MB de espacio de disco adicional después de desempaquetar.
Seleccionando el paquete samba-doc previamente no seleccionado.
(Leyendo la base de datos ...
133336 ficheros y directorios instalados actualmente.)
Desempaquetando samba-doc (de .../samba-doc_3.0.7-1_all.deb) ...
Configurando samba-doc (3.0.7-1) ...
localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
# /bin/cp -v /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz /etc/ldap/schema
`/usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz' -> `/etc/ldap/schema/samba.schema.gz'
# /bin/gunzip -v /etc/ldap/schema/samba.schema.gz
/etc/ldap/schema/samba.schema.gz:        81.0% -- replaced with /etc/ldap/schema/samba.schema
# /bin/chown -v slapd.slapd /etc/ldap/schema/samba.schema
cambiado el propietario de `/etc/ldap/schema/samba.schema' a slapd:slapd
# /bin/chmod -v 644 /etc/ldap/schema/samba.schema
el modo de `/etc/ldap/schema/samba.schema' cambia a 0644 (rw-r--r--)
/etc/ldap/slapd.conf
/etc/ldap/slapd.conf
include         /etc/ldap/schema/samba.schema
include            /etc/openldap/schema/cosine.schema
include            /etc/openldap/schema/inetorgperson.schema
include            /etc/openldap/schema/nis.schema
# /etc/init.d/slapd restart
Stopping OpenLDAP: slapd.
Starting OpenLDAP: slapd.
smb.conf
smb.conf
smb.conf
smb.conf
/etc/samba/
smb.conf
smb.conf
smb.conf
[global]
workgroup = GRUPODETRABAJO
netbios name = MINOMBRE

[recurso-compartido1]
path = /tmp

[recurso-compartido2]
path = /otro_directorio_compartido
comment = Algunos archivos aleatorios
smb.conf
smb.conf
smb.conf
/etc/samba/smb.conf
smb.conf
# /usr/bin/testparm 
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[print$]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[ENTER]
# Global parameters
[global]
        workgroup = GSRDOMAIN
        server string = %h server (Samba %v)
        obey pam restrictions = Yes
        passdb backend = tdbsam, guest
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        dns proxy = No
        panic action = /usr/share/samba/panic-action %d
        invalid users = root

[homes]
        comment = Home Directories
        create mask = 0700
        directory mask = 0700
        browseable = No

[printers]
        comment = All Printers
        path = /tmp
        create mask = 0700
        printable = Yes
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/printers
/home/samba/users/NOMBREUSUARIO
/home/samba/profiles/NOMBREUSUARIO
/etc/samba/smb.conf
[global]
   workgroup = GSRDOMAIN 
   netbios name = TODOSCSI 
   server string = SAMBA-LDAP PDC server 
   security = user 
   encrypt passwords = true 
   passdb backend = ldapsam:ldap://gsr.pt 
   guest account = guest 
   invalid users = root 
   unix password sync = yes 
   passwd program = /usr/sbin/smbldap-passwd -o %u 
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . 
   
   ldap admin dn = cn=admin,dc=gsr,dc=pt 
;   ldap server = gsr.pt 
;   ldap port = 389 
   ldap ssl = start_tls 
   ldap delete dn = no 
   ldap filter = (&(uid=%u)(objectclass=sambaSamAccount)) 
   ldap suffix = ou=people,dc=gsr,dc=pt 
   ldap user suffix = ou=people 
   ldap group suffix = ou=groups 
   ldap machine suffix = ou=machines 
   load printers = yes 
   printing = cups 
   printcap name = cups 
   printer admin = @domainadmins 
   os level = 80 
   preferred master = yes 
   domain master = yes 
   local master = yes 
   domain logons = yes 
   logon path = \\%L\profiles\%u 
   logon drive = H: 
   logon home = \\%L\%u\.profile 
   logon script = 
;   domain admin group = @domainadmins 
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 
   idmap uid = 10000-20000 
   idmap gid = 10000-20000 
   template shell = /bin/bash 
   add user script = /usr/sbin/smbldap-useradd -w %u 
   browseable = yes 
   writeable = yes 
   create mask = 0700 
   directory mask = 0700 
NTConfig.POL
   path = /home/samba/netlogon 
   writeable = no 
   write list = @domainadmins 
   path = /home/samba/profiles 
   writeable = yes 
   browseable = no 
   create mask = 0600 
   directory mask = 0700 
   browseable = no 
   path = /tmp 
   printable = yes 
   guest ok = no 
   writable = no 
   create mask = 0700 
[print$]--+
          |--W32X86           # controladores para Windows NT x86
          |--WIN40            # controladores para Windows 95/98
          |--W32ALPHA         # controladores para Windows NT Alpha_AXP
          |--W32MIPS          # controladores para Windows NT R4000
/var/lib/samba/printers
   path = /var/lib/samba/printers 
   browseable = yes 
   writeable = no 
   guest ok = no 
   write list = root, @domainadmins 
/tmp
   comment = Temporal 
   writeable = yes 
   path = /tmp 
   guest ok = no 
   comment = Samba server's CD-ROM 
   writable = no 
   locking = no 
   path = /cdrom 
   guest ok = yes 
/etc/fstab
<file system> <mount point> <type>     <options>                             <dump><pass>
none          /cdrom        supermount dev=/dev/cdrom,fs=auto,ro,auto,user,exec  0     0
/etc/ldap/slapd.conf
/etc/ldap/slapd.conf
# /usr/bin/smbpasswd -w clave
Setting stored password for "cn=admin,dc=gsr,dc=pt" in secrets.tdb
/etc/ldap/slapd.conf
/etc/ldap/slapd.conf
# allow the "ldap admin dn" access, but deny everyone else
# (Samba related)
access to attribute=sambaLMPassword,sambaNTPassword
     by dn="cn=admin,dc=gsr,dc=pt" write
     by dn="cn=readadmin,dc=gsr,dc=pt" read
     by * none
/etc/ldap/slapd.conf
# Requerido por OpenLDAP
index objectclass             eq

index default                 sub
index cn                      pres,sub,eq
index sn                      pres,sub,eq
index mail                    eq,subinitial
index givenname               eq,subinitial

# Requerido para soportar pdb_getsampwnam
index uid                     pres,sub,eq

# Requerido para soportar pdb_getsambapwrid()
index displayName             pres,sub,eq

# Descomente las siguientes líneas si está almacenando entradas
# posixAccount y posixGroup en el directorio
index uidNumber               eq
index gidNumber               eq
index memberUid               eq

# Samba 3.*
index sambaSID              eq
index sambaPrimaryGroupSID  eq
index sambaDomainName       eq
/etc/ldap/slapd.conf
# /usr/sbin/slapindex -vf /etc/ldap/slapd.conf
indexing id=00000001
indexing id=00000002
indexing id=0000000a
indexing id=0000000b
indexing id=0000000c
# /etc/init.d/slapd restart
Stopping OpenLDAP: slapd.
Starting OpenLDAP: slapd.
# mkdir -vpm 755 /home/samba/
mkdir: se ha creado el directorio `/home/samba'
# mkdir -vpm 755 /home/samba/netlogon /home/samba/users
mkdir: se ha creado el directorio `/home/samba/netlogon'
mkdir: se ha creado el directorio `/home/samba/users'
# /bin/chgrp -v domainadmins /home/samba/netlogon/ 
cambiado el grupo de `netlogon/' a domainadmins
# mkdir -vpm 1757 /home/samba/profiles
mkdir: se ha creado el directorio `/home/samba/profiles'
/etc/samba/smb.conf
# /usr/bin/testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[profiles]"
Processing section "[printers]"
Processing section "[print$]"
Processing section "[tmp]"
Processing section "[cdrom]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[ENTER]
# Global parameters
[global]
        workgroup = GSRDOMAIN
        server string = SAMBA-LDAP PDC server
        obey pam restrictions = Yes
        passdb backend = ldapsam:ldap://gsr.pt
        guest account = guest
        passwd program = /usr/sbin/smbldap-passwd -o %u
        passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
        unix password sync = Yes
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        name resolve order = lmhosts host wins bcast
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        add user script = /usr/sbin/smbldap-useradd.pl -w %u
        logon path = \\%L\profiles\%u
        logon drive = H:
        logon home = \\%L\%u\.profile
        domain logons = Yes
        os level = 80
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        ldap admin dn = cn=admin,dc=gsr,dc=pt
        ldap group suffix = ou=groups
        ldap machine suffix = ou=machines
        ldap suffix = dc=gsr,dc=pt
        ldap user suffix = ou=people
        panic action = /usr/share/samba/panic-action %d
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        template shell = /bin/bash
        printer admin = @domainadmins

[homes]
        comment = Home Directories
        read only = No
        create mask = 0700
        directory mask = 0700
        browseable = No

[netlogon]
        comment = Network Logon Service
        path = /home/samba/netlogon
        write list = @domainadmins
        guest ok = Yes
        share modes = No

[profiles]
        comment = User's Profiles
        path = /home/samba/profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        guest ok = Yes
        browseable = No

[printers]
        comment = All Printers
        path = /tmp
        printable = Yes
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/printers
        write list = root, @domainadmins

[tmp]
        comment = Temporal
        path = /tmp
        read only = No

[cdrom]
        comment = Samba server's CD-ROM
        path = /cdrom
        guest ok = Yes
        locking = No
# /etc/init.d/samba reload
Reloading /etc/samba/smb.conf (smbd only).
# /etc/init.d/samba restart
Stopping Samba daemons: nmbd smbd.
Starting Samba daemons: nmbd smbd.
/var/log/samba/log.nmbd
/var/log/samba/log.smbd
/var/log/samba/log.nmbd
[2004/10/03 13:15:26, 0] nmbd/nmbd.c:terminate(54)
  Got SIGTERM: going down...
[2004/10/03 13:15:30, 0] nmbd/nmbd.c:main(664)
  Netbios nameserver version 3.0.7-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/10/03 13:15:30, 0] nmbd/nmbd_logonnames.c:add_logon_names(163)
  add_domain_logon_names:
  Attempting to become logon server for workgroup GSRDOMAIN on subnet 192.168.3.3
[2004/10/03 13:15:30, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup GSRDOMAIN on subnet 192.168.3.3
[2004/10/03 13:15:30, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.3.3 for domain master browser
  on workgroup GSRDOMAIN
[2004/10/03 13:15:34, 0] nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup GSRDOMAIN
  on subnet 192.168.3.3
[2004/10/03 13:15:38, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *****

  Samba server TODOSCSI is now a domain master browser for workgroup GSRDOMAIN
  on subnet 192.168.3.3

  *****
[2004/10/03 13:15:53, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *****

  Samba name server TODOSCSI is now a local master browser for workgroup GSRDOMAIN
  on subnet 192.168.3.3

  *****

/var/log/samba/log.smbd
[2004/10/03 13:15:30, 0] smbd/server.c:main(760)
  smbd version 3.0.7-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2004/10/03 13:15:30, 0] printing/print_cups.c:cups_printer_fn(119)
  Unable to connect to CUPS server localhost - Conexión rehusada
/home/samba/users/$user
$ /usr/bin/ssh -l gsruser gsr.pt
password: [clave]
Creating directory '/home/samba/users/gsruser'. 
Creating directory '/home/samba/users/gsruser/Maildir'.
Creating directory '/home/samba/users/gsruser/Maildir/cur'.
Creating directory '/home/samba/users/gsruser/Maildir/new'.
Creating directory '/home/samba/users/gsruser/Maildir/tmp'.
todoscsi-[gsruser]-13:39:04:~$
/etc/skel
$ /usr/bin/smbclient -L TODOSCSI --user=gsruser
Password: [clave]
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]

        Sharename       Type      Comment
        ---------       ----      -------
        netlogon        Disk      Network Logon Service
        print$          Disk      Printer Drivers
        tmp             Disk      Temporal
        cdrom           Disk      Samba server's CD-ROM
        IPC$            IPC       IPC Service (SAMBA-LDAP PDC server)
        ADMIN$          IPC       IPC Service (SAMBA-LDAP PDC server)
        gsruser         Disk      Home Directories
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]

        Server               Comment
        ---------            -------
        TODOSCSI             SAMBA-LDAP PDC server

        Workgroup            Master
        ---------            -------
        GSRDOMAIN            TODOSCSI
$ /bin/ls -la
total 56
drwxr-xr-x  3 gsruser domainusers  408 2004-10-09 13:38 .
drwxr-sr-x  3 root    staff         72 2004-10-09 13:38 ..
-rw-r--r--  1 gsruser domainusers 1363 2004-10-09 13:38 .bash_aliases
-rw-r--r--  1 gsruser domainusers  337 2004-10-09 13:38 .bash_logout
-rw-r--r--  1 gsruser domainusers  239 2004-10-09 13:38 .bash_profile
-rw-r--r--  1 gsruser domainusers 6198 2004-10-09 13:38 .bashrc
-rw-r--r--  1 gsruser domainusers   45 2004-10-09 13:38 .cvsrc
-rw-r--r--  1 gsruser domainusers  618 2004-10-09 13:38 .dir_colors
-rw-r--r--  1 gsruser domainusers  357 2004-10-09 13:38 .ldaprc
drwxr-xr-x  5 gsruser domainusers  120 2004-10-09 13:38 Maildir
-rw-r--r--  1 gsruser domainusers 4267 2004-10-09 13:38 .muttrc
-rw-r--r--  1 gsruser domainusers  105 2004-10-09 13:38 .procmailrc
-rw-r--r--  1 gsruser domainusers   87 2004-10-09 13:38 .screenrc
-rw-r--r--  1 gsruser domainusers  287 2004-10-09 13:38 .tidyrc
-rw-r--r--  1 gsruser domainusers 2686 2004-10-09 13:38 .vimrc
$ /usr/bin/smbclient  --user=gsruser //todoscsi/gsruser
Password: [clave]
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
smb: \> ls
  .                                   D        0  Sat Oct  9 13:38:52 2004
  ..                                  D        0  Sat Oct  9 13:38:52 2004
  .bashrc                             H     6198  Sat Oct  9 13:38:52 2004
  .ldaprc                             H      357  Sat Oct  9 13:38:52 2004
  .bash_logout                        H      337  Sat Oct  9 13:38:52 2004
  .muttrc                             H     4267  Sat Oct  9 13:38:52 2004
  .dir_colors                         H      618  Sat Oct  9 13:38:52 2004
  .tidyrc                             H      287  Sat Oct  9 13:38:52 2004
  .procmailrc                         H      105  Sat Oct  9 13:38:52 2004
  .bash_aliases                       H     1363  Sat Oct  9 13:38:52 2004
  Maildir                             D        0  Sat Oct  9 13:38:52 2004
  .cvsrc                              H       45  Sat Oct  9 13:38:52 2004
  .vimrc                              H     2686  Sat Oct  9 13:38:52 2004
  .screenrc                           H       87  Sat Oct  9 13:38:52 2004
  .bash_profile                       H      239  Sat Oct  9 13:38:52 2004

                43910 blocks of size 524288. 1201 blocks available
smb: \> mkdir directorio-de-ejemplo
smb: \> ls
  .                                   D        0  Sat Oct  9 13:45:39 2004
  ..                                  D        0  Sat Oct  9 13:38:52 2004
  .bashrc                             H     6198  Sat Oct  9 13:38:52 2004
  .ldaprc                             H      357  Sat Oct  9 13:38:52 2004
  directorio-de-ejemplo               D        0  Sat Oct  9 13:45:39 2004
  .bash_logout                        H      337  Sat Oct  9 13:38:52 2004
  .muttrc                             H     4267  Sat Oct  9 13:38:52 2004
  .dir_colors                         H      618  Sat Oct  9 13:38:52 2004
  .tidyrc                             H      287  Sat Oct  9 13:38:52 2004
  .procmailrc                         H      105  Sat Oct  9 13:38:52 2004
  .bash_aliases                       H     1363  Sat Oct  9 13:38:52 2004
  Maildir                             D        0  Sat Oct  9 13:38:52 2004
  .cvsrc                              H       45  Sat Oct  9 13:38:52 2004
  .vimrc                              H     2686  Sat Oct  9 13:38:52 2004
  .screenrc                           H       87  Sat Oct  9 13:38:52 2004
  .bash_profile                       H      239  Sat Oct  9 13:38:52 2004

                43910 blocks of size 524288. 1201 blocks available
smb: \> exit
~$ /bin/ls -la
total 56
drwxr-xr-x    3 gsruser  domainusers      336 2004-06-01 12:27 ./
drwxr-xr-x    3 root     root           72 2004-05-31 02:46 ../
-rw-r--r--    1 gsruser  domainusers     1,4K 2004-05-31 02:46 .bash_aliases
-rw-r--r--    1 gsruser  domainusers      337 2004-05-31 02:46 .bash_logout
-rw-r--r--    1 gsruser  domainusers      239 2004-05-31 02:46 .bash_profile
-rw-r--r--    1 gsruser  domainusers     6,3K 2004-05-31 02:46 .bashrc
-rw-r--r--    1 gsruser  domainusers       45 2004-05-31 02:46 .cvsrc
-rw-r--r--    1 gsruser  domainusers      618 2004-05-31 02:46 .dir_colors
drwx------    2 gsruser  domainusers       48 2004-06-01 12:27 directorio-de-ejemplo/
-rw-r--r--    1 gsruser  domainusers     4,3K 2004-05-31 02:46 .muttrc
-rw-r--r--    1 gsruser  domainusers      287 2004-05-31 02:46 .tidyrc
-rw-r--r--    1 gsruser  domainusers     2,7K 2004-05-31 02:46 .vimrc
$ /bin/rmdir -v directorio-de-ejemplo
rmdir: borrando el directorio, directorio-de-ejemplo/
gsruser
# /usr/bin/smbpasswd -a
New SMB password: [clave]
Retype new SMB password: [clave]
Added user root.
Attn: CUPS Information
Easy Software Products
44141 Airport View Drive Suite 204
Hollywood, Maryland 20636-3111 USA

+1.301.373.9600

<cups-info@cups.org>
$ /usr/bin/apt-cache show cupsys
Package: cupsys
Priority: optional
Section: net
Installed-Size: 10532
Maintainer: Kenshi Muto <kmuto@debian.org>
Architecture: i386
Version: 1.1.20final+rc1-9
Replaces: cupsys-pstoraster
Depends: libc6 (>= 2.3.2.ds1-4), libcupsimage2 (>= 1.1.19final-1),
libcupsys2-gnutls10 (>= 1.1.20final-1), libgcc1 (>= 1:3.4.1-3),
libgnutls11 (>= 1.0.16), libpam0g (>= 0.76), libpaper1, libslp1,
zlib1g (>= 1:1.2.1), gs-esp , adduser (>= 3.12), debconf (>= 1.2.9), patch
Recommends: cupsys-client , smbclient , xpdf-common
Suggests: cupsys-bsd , cupsys-driver-gimpprint ,
foomatic-bin | foomatic-filters-ppds ,
xpdf-korean | xpdf-japanese | xpdf-chinese-traditional | xpdf-chinese-simplified
Conflicts: cupsys-pstoraster (<< 2), lprng (>= 3.8.25)
Filename: pool/main/c/cupsys/cupsys_1.1.20final+rc1-9_i386.deb
Size: 3609096
MD5sum: 9a1db7a532df1477e7c572151d217030
Description: Common UNIX Printing System(tm) - server
 The Common UNIX Printing System (or CUPS(tm)) is a printing system and
 general replacement for lpd and the like.  It supports the Internet
 Printing Protocol (IPP), and has its own filtering driver model for
 handling various document types.
 .
 This package provides the CUPS scheduler/daemon and related files.
 .
 The terms "Common UNIX Printing System" and "CUPS" are trademarks of
 Easy Software Products (www.easysw.com), and refer to the original
 source packages from which these packages are made.
Task: print-server


$ /usr/bin/apt-cache show gs-esp
Package: gs-esp
Priority: optional
Section: text
Installed-Size: 12008
Maintainer: Masayuki Hatta (mhatta) <mhatta@debian.org>
Architecture: i386
Version: 7.07.1-9
Replaces: gs-afpl (<< 8.14-3), gs-aladdin (<< 8.14-3),
gs-gpl (<< 8.01-3), gs (<< 8.01-3), gs-pdfencrypt (<< 7.00),
cupsys-pstoraster
Provides: gs, gs-pdfencrypt, postscript-viewer
Depends: libc6 (>= 2.3.2.ds1-4), libcupsimage2 (>= 1.1.19final-1),
libcupsys2-gnutls10 (>= 1.1.20final-1), libgimpprint1 (>= 4.2.6),
libglib2.0-0 (>= 2.4.1), libjpeg62, libpaper1,
libpng12-0 (>= 1.2.5.0-4), libstdc++5 (>= 1:3.3.4-1), libtiff4,
libx11-6 | xlibs (>> 4.1.0), libxext6 | xlibs (>> 4.1.0),
libxt6 | xlibs (>> 4.1.0), zlib1g (>= 1:1.2.1), gs-common (>= 0.2)
Recommends: gsfonts  (>= 6.0-1), psfontmgr 
Conflicts: gs-afpl (<< 8.14-3), gs-aladdin (<< 8.14-3),
gs-gpl (<< 8.01-3), gs (<< 8.01-3), gs-pdfencrypt (<< 7.00),
cupsys-pstoraster
Filename: pool/main/g/gs-esp/gs-esp_7.07.1-9_i386.deb
Size: 2772000
MD5sum: 26559300a360d8aa1176512e4beab77e
Description: The Ghostscript PostScript interpreter - ESP version
 Ghostscript is used for PostScript preview and printing.  Usually as
 a back-end to a program such as ghostview, it can display postscript
 documents in an X11 environment.
 .
 Furthermore, it can render PostScript files as graphics to be printed
 on non-PostScript printers.  Supported printers include common
 dot-matrix, inkjet and laser models.
 .
 Package gsfonts contains a set of standard fonts for Ghostscript.
 .
 This version of gs is a fork of GNU Ghostscript with updated drivers
 and patches, intended mostly for use with the Common UNIX Printing
 System (CUPS) from Easy Software Products (www.easysw.com).  The
 ESP Ghostscript homepage is available at:
 .
 http://www.cups.org/ghostscript.php


$ /usr/bin/apt-cache show gsfonts psfontmgr
Package: gsfonts
Priority: optional
Section: text
Installed-Size: 5080
Maintainer: Masayuki Hatta (mhatta) <mhatta@debian.org>
Architecture: all
Version: 8.14+v8.11-0.1
Depends: defoma
Conflicts: gs (<< 5.50-5), gs-aladdin (<< 6.50-4), gsfonts-x11 (<< 0.13)
Filename: pool/main/g/gsfonts/gsfonts_8.14+v8.11-0.1_all.deb
Size: 3726818
MD5sum: b383e6b56330d231fbd0dfee8797aaec
Description: Fonts for the Ghostscript interpreter(s)
 These are free look-alike fonts of the Adobe PostScript fonts.
 Recommended for all flavors of Ghostscript (gs-gpl, gs-afpl and gs-esp).

Package: psfontmgr
Priority: optional
Section: admin
Installed-Size: 172
Maintainer: Angus Lees <gus@debian.org>
Architecture: all
Source: defoma
Version: 0.11.8-0.1
Depends: defoma (>= 0.9.1), whiptail | dialog, perl
Conflicts: defoma-ps, scigraphica-common (<= 0.7.1-3)
Filename: pool/main/d/defoma/psfontmgr_0.11.8-0.1_all.deb
Size: 21220
MD5sum: 82d87f3940cc0270fdff58568ca3c5ee
Description: PostScript font manager -- part of Defoma, Debian Font Manager
 psfontmgr manages PostScript fonts through the Defoma framework. It
 registers the name of available PostScript fonts to Defoma in
 postscript category, so applications which output a postscript file
 have all the available PostScript fonts in their font-choosing menus.
 .
 It also provides a tool named defoma-psfont-installer, which registers
 PostScript fonts installed in a PostScript printer. This tool benefits
 those who want to print a PostScript file with the printer fonts and
 have the printer fonts appear in a font-choosing menu.
Task: chinese-s, chinese-t


$ /usr/bin/apt-cache show cupsys-client
Package: cupsys-client
Priority: optional
Section: net
Installed-Size: 308
Maintainer: Kenshi Muto <kmuto@debian.org>
Architecture: i386
Source: cupsys
Version: 1.1.20final+rc1-9
Replaces: cupsys (<= 1.1.18-3)
Depends: libc6 (>= 2.3.2.ds1-4),
libcupsys2-gnutls10 (>= 1.1.20final-1), zlib1g (>= 1:1.2.1)
Recommends: cupsys-bsd 
Suggests: cupsys, kdeprint , gtklp, cupsys-pt, xpp
Conflicts: lprng
Filename: pool/main/c/cupsys/cupsys-client_1.1.20final+rc1-9_i386.deb
Size: 87964
MD5sum: 100897320ff2fc8296d8c7192d11e313
Description: Common UNIX Printing System(tm) - client programs (SysV)
 The Common UNIX Printing System (or CUPS(tm)) is a printing system and
 general replacement for lpd and the like.  It supports the Internet
 Printing Protocol (IPP), and has its own filtering driver model for
 handling various document types.
 .
 This package provides the System V style print client programs.
 .
 The terms "Common UNIX Printing System" and "CUPS" are trademarks of
 Easy Software Products (www.easysw.com), and refer to the original
 source packages from which these packages are made.
Task: print-server


$ /usr/bin/apt-cache show kdeprint
Package: kdeprint
Priority: optional
Section: utils
Installed-Size: 1828
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Architecture: i386
Source: kdebase
Version: 4:3.3.0a-1
Replaces: kdebase (<< 4:3.0.0), kdebase-doc (<< 4:3.0.0)
Depends: kdelibs4 (>= 4:3.3.0), libart-2.0-2 (>= 2.3.16),
libc6 (>= 2.3.2.ds1-4), libfam0c102, libgcc1 (>= 1:3.4.1-3),
libice6 | xlibs (>> 4.1.0), libidn11 (>= 0.5.2),
libpng12-0 (>= 1.2.5.0-4), libqt3c102-mt (>= 3:3.3.3),
libsm6 | xlibs (>> 4.1.0), libstdc++5 (>= 1:3.3.4-1),
libx11-6 | xlibs (>> 4.1.0), libxext6 | xlibs (>> 4.1.0),
libxrender1, zlib1g (>= 1:1.2.1), enscript, gv, poster, psutils
Suggests: khelpcenter, efax | hylafax-client | mgetty-fax
Filename: pool/main/k/kdebase/kdeprint_3.3.0a-1_i386.deb
Size: 1061246
MD5sum: b865d5a1909d34c910a5eba77617b3fc
Description: KDE Print
 KDE is a powerful Open Source graphical desktop environment
 for Unix workstations. It combines ease of use, contemporary
 functionality, and outstanding graphical design with the
 technological superiority of the Unix operating system.
 .
 This package contains the KDE printing subsystem. It can use Cups,
 lpd-ng or the traditional lpd. It also includes support for fax and pdf
 printing.
 .
 This package is part of the official KDE base module.


$ /usr/bin/apt-cache show cupsys-bsd
Package: cupsys-bsd
Priority: extra
Section: net
Installed-Size: 192
Maintainer: Kenshi Muto <kmuto@debian.org>
Architecture: i386
Source: cupsys
Version: 1.1.20final+rc1-9
Replaces: lpr, cupsys (<= 1.1.15-2), manpages-fr (<< 0.9.5-1)
Provides: lpr
Depends: libc6 (>= 2.3.2.ds1-4), libcupsys2-gnutls10 (>= 1.1.20final-1),
cupsys-client (= 1.1.20final+rc1-9), debconf, netbase
Conflicts: lpr, lprng, manpages-fr (<< 0.9.5-1)
Filename: pool/main/c/cupsys/cupsys-bsd_1.1.20final+rc1-9_i386.deb
Size: 40272
MD5sum: cfc6bc7f6a73e414752f297e3949f382
Description: Common UNIX Printing System(tm) - BSD commands
 The Common UNIX Printing System (or CUPS(tm)) is a printing system and
 general replacement for lpd and the like.  It supports the Internet
 Printing Protocol (IPP), and has its own filtering driver model for
 handling various document types.
 .
 This package provides the BSD commands for interacting with CUPS.  It
 is provides separately to allow CUPS to coexist with other printing
 systems (to a small degree).
 .
 The terms "Common UNIX Printing System" and "CUPS" are trademarks of
 Easy Software Products (www.easysw.com), and refer to the original
 source packages from which these packages are made.
Task: print-server


$ /usr/bin/apt-cache show cupsys-driver-gimpprint
Package: cupsys-driver-gimpprint
Priority: optional
Section: graphics
Installed-Size: 1192
Maintainer: Roger Leigh <rleigh@debian.org>
Architecture: i386
Source: gimp-print
Version: 4.2.7-4
Depends: libc6 (>= 2.3.2.ds1-4), libcupsimage2 (>= 1.1.19final-1),
libcupsys2-gnutls10 (>= 1.1.20final-1), libgimpprint1 (>= 4.2.7),
zlib1g (>= 1:1.2.1), perl, cupsys-driver-gimpprint-data  (= 4.2.7-4),
cupsys (>= 1.1.4) | cups (>= 1.1.4)
Recommends: gs-esp (>= 7.05.2-1) | gs-gpl (>= 8.01-1) | postscript-viewer
Suggests: gimpprint-doc (>= 4.2.7-4), gimpprint-locales  (>= 4.2.7-4)
Filename: pool/main/g/gimp-print/cupsys-driver-gimpprint_4.2.7-4_i386.deb
Size: 952450
MD5sum: 0b6224bdd85be3a35b56af4d22d0de82
Description: Gimp-Print printer drivers for CUPS
 This package includes a CUPS driver based on Gimp-Print.
 .
 The CUPS drivers contain all of the files needed to support
 photo-quality printing on any printer supported by Gimp-Print.  You
 can find out more about the Common UNIX Printing System ("CUPS"), an
 IPP-based printing system for UNIX/Linux, at:
 .
   http://www.cups.org
 .
 This is Gimp-Print version 4.2.7, a stable release in
 the 4.2 line.
 .
 Gimp-Print is the print facility for the Gimp, and in addition a
 suite of drivers that may be used with common UNIX spooling systems
 using GhostScript or CUPS.  These drivers provide printing quality
 for UNIX/Linux on a par with proprietary vendor-supplied drivers in
 many cases, and can be used for many of the most demanding printing
 tasks.
Task: print-server


$ /usr/bin/apt-cache show gimpprint-locales \
                          cupsys-driver-gimpprint-data
Package: gimpprint-locales
Priority: optional
Section: libs
Installed-Size: 1152
Maintainer: Roger Leigh <rleigh@debian.org>
Architecture: all
Source: gimp-print
Version: 4.2.7-4
Replaces: libgimpprint1 (<= 4.2.0-1)
Filename: pool/main/g/gimp-print/gimpprint-locales_4.2.7-4_all.deb
Size: 309592
MD5sum: a32bf289f46ea3a6ce6ed915b3d6b647
Description: Locale data files for Gimp-Print
 This package contains the i18n files of Gimp-Print, used by
 libgimpprint1, cupsys-driver-gimpprint and escputil.  It is also
 used by the Gimp Print plugin.
 It will be used by any programs which link with libgimpprint.
 .
 They are needed when you want the programs in Gimp-Print to print
 their messages in other languages than US English.
 .
 This is Gimp-Print version 4.2.7, a stable release in
 the 4.2 line.
 .
 Gimp-Print is the print facility for the Gimp, and in addition a
 suite of drivers that may be used with common UNIX spooling systems
 using GhostScript or CUPS.  These drivers provide printing quality
 for UNIX/Linux on a par with proprietary vendor-supplied drivers in
 many cases, and can be used for many of the most demanding printing
 tasks.

Package: cupsys-driver-gimpprint-data
Priority: optional
Section: graphics
Installed-Size: 1984
Maintainer: Roger Leigh <rleigh@debian.org>
Architecture: all
Source: gimp-print
Version: 4.2.7-4
Replaces: cupsys-driver-gimpprint (<< 4.2.6-4)
Depends: cupsys-driver-gimpprint (= 4.2.7-4)
Filename: pool/main/g/gimp-print/cupsys-driver-gimpprint-data_4.2.7-4_all.deb
Size: 1368570
MD5sum: 988e7ee0a060ebaed149c9d91dd9c5b8
Description: Gimp-Print printer drivers for CUPS
 This package includes Gimp-Print PPDs for CUPS.
 .
 The CUPS drivers contain all of the files needed to support
 photo-quality printing on any printer supported by Gimp-Print.  You
 can find out more about the Common UNIX Printing System ("CUPS"), an
 IPP-based printing system for UNIX/Linux, at:
 .
   http://www.cups.org
 .
 This is Gimp-Print version 4.2.7, a stable release in
 the 4.2 line.
 .
 Gimp-Print is the print facility for the Gimp, and in addition a
 suite of drivers that may be used with common UNIX spooling systems
 using GhostScript or CUPS.  These drivers provide printing quality
 for UNIX/Linux on a par with proprietary vendor-supplied drivers in
 many cases, and can be used for many of the most demanding printing
 tasks.


$ /usr/bin/apt-cache show foomatic-bin
Package: foomatic-bin
Priority: optional
Section: text
Installed-Size: 60
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Source: foomatic-db-engine
Version: 3.0.2-2
Depends: foomatic-db  (>> 2.9), foomatic-db-hpijs , foomatic-db-engine ,
foomatic-filters 
Filename: pool/main/f/foomatic-db-engine/foomatic-bin_3.0.2-2_all.deb
Size: 47592
MD5sum: f147f54037ca6c8c9a4a1128f3f6adfa
Description: linuxprinting.org printer support - transition package
 Release 3.0 of foomatic has reorganized the foomatic printing system.
 This package is provided to facilitate a smooth upgrade from Foomatic
 2.0 or earlier.
 .
 Once you have installed the dependencies of this package, this
 package can be safely purged from your system.
 .
 Home Page: http://www.linuxprinting.org/


$ /usr/bin/apt-cache show foomatic-db
Package: foomatic-db
Priority: optional
Section: text
Installed-Size: 10064
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Version: 20041013-1
Depends: foomatic-filters
Recommends: foomatic-db-engine
Suggests: foomatic-db-hpijs, foomatic-db-gimp-print , foo2zjs 
Conflicts: foomatic-bin (<< 2.9)
Filename: pool/main/f/foomatic-db/foomatic-db_20041013-1_all.deb
Size: 494012
MD5sum: 84891b80ef692464897e8ceb4bc8724a
Description: linuxprinting.org printer support - database
 Foomatic is a printing system designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package contains the printer database distributed by
 linuxprinting.org for most common drivers.  You will probably need
 the foomatic-db-engine package for this package to be useful.
 .
 The foomatic-db-hpijs package adds additional printers supported by
 the HPIJS printer driver backend, particularly consumer inkjet
 printers from Hewlett-Packard.
 .
 The foomatic-db-gimp-print package adds additional printers supported
 by the GIMP-Print printer driver backend, most commonly used for
 color photo printing on consumer inkjets.
 .
 The foo2zjs package adds backend support for a number of printers
 from HP and Minolta/QMS that use the Zenographics ZjStream protocol.
 .
 Home Page: http://www.linuxprinting.org/


$ /usr/bin/apt-cache show foomatic-db-gimp-print \
                          foo2zjs
Package: foomatic-db-gimp-print
Priority: optional
Section: text
Installed-Size: 11948
Maintainer: Roger Leigh <rleigh@debian.org>
Architecture: all
Source: gimp-print
Version: 4.2.7-4
Depends: foomatic-db, ijsgimpprint (>= 4.2.7-4)
Conflicts: foomatic-bin (<< 2.9), foomatic-db (<< 2.9)
Filename: pool/main/g/gimp-print/foomatic-db-gimp-print_4.2.7-4_all.deb
Size: 544364
MD5sum: ef504aba3492142f5174aaeecd4af05f
Description: linuxprinting.org printer support - database for Gimp-Print printer drivers
 Foomatic is a printing system designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package includes support for printers using the Gimp-Print
 printer driver suite.
 .
 Home Page: http://www.linuxprinting.org/
 .
 This is Gimp-Print version 4.2.7, an unstable
 development release in the 4.3 line.
 .
 Gimp-Print is the print facility for the Gimp, and in addition a
 suite of drivers that may be used with common UNIX spooling systems
 using GhostScript or CUPS.  These drivers provide printing quality
 for UNIX/Linux on a par with proprietary vendor-supplied drivers in
 many cases, and can be used for many of the most demanding printing
 tasks.

Package: foo2zjs
Priority: optional
Section: text
Installed-Size: 400
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: i386
Version: 20040210-2
Depends: libc6 (>= 2.3.2.ds1-4)
Recommends: foomatic-db-engine
Suggests: psutils
Filename: pool/main/f/foo2zjs/foo2zjs_20040210-2_i386.deb
Size: 187138
MD5sum: e7ab1d8f6ea4e32fa6cd59fdee505ce8
Description: Support for printing to ZjStream-based printers
 foo2zjs is an open source printer driver for printers that use the
 Zenographics ZjStream wire protocol for their print data, such as the
 Minolta/QMS magicolor 2200 DL/2300 DL and HP LaserJet 1000/1005.
 These printers are often erroneously referred to as "winprinters" or
 "GDI printers".
 .
 The foomatic-db-engine package is recommended to simplify configuring
 this printer driver.  The psutils package is needed to enable n-up
 printing support.
 .
 Home Page: http://foo2zjs.rkkda.com/


$ /usr/bin/apt-cache show foomatic-db-hpijs
Package: foomatic-db-hpijs
Priority: optional
Section: text
Installed-Size: 4712
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Version: 1.5-20041013-1
Depends: foomatic-filters, foomatic-db, hpijs (>> 1.3)
Conflicts: foomatic-bin (<< 2.9), foomatic-db (<< 2.9)
Filename: pool/main/f/foomatic-db-hpijs/foomatic-db-hpijs_1.5-20041013-1_all.deb
Size: 214228
MD5sum: 161b737f47bca70174237efae2d63ee8
Description: linuxprinting.org printer support - database for HPIJS printers
 Foomatic is a printing system designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package includes support for printers using the HPIJS printer
 driver backend, particularly consumer inkjet printers from
 Hewlett-Packard.
 .
 Home Page: http://www.linuxprinting.org/
Task: print-server


$ /usr/bin/apt-cache show foomatic-db-engine
Package: foomatic-db-engine
Priority: optional
Section: text
Installed-Size: 704
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: i386
Version: 3.0.2-2
Replaces: foomatic-bin (<< 2.9)
Depends: perl (>= 5.6.0-16), libc6 (>= 2.3.2.ds1-4),
libxml2 (>= 2.6.11), zlib1g (>= 1:1.2.1), foomatic-db, foomatic-filters,
wget | curl
Pre-Depends: bash (>= 2.05)
Recommends: netcat 
Suggests: foomatic-db-hpijs, foomatic-db-gimp-print, foomatic-gui 
Conflicts: foomatic-bin (<< 2.9), foomatic-db (<< 2.9)
Filename: pool/main/f/foomatic-db-engine/foomatic-db-engine_3.0.2-2_i386.deb
Size: 252714
MD5sum: aed29832cb990e97d859fb9066a06617
Description: linuxprinting.org printer support - programs
 Foomatic is a printing system designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package contains the architecture-dependent programs needed to
 set up and maintain the foomatic system.  You will also need one or
 more database packages.  The foomatic-db package includes drivers for
 most common printers using Ghostscript as the print processor, as
 well as some common glue code used in other filter systems.
 .
 foomatic-db-hpijs includes support for photo-quality printing with
 Hewlett-Packard and some other consumer inkjets using the HPIJS
 backend developed by HP.
 .
 foomatic-db-gimp-print includes support for photo-quality printing
 with many consumer inkjets (including those from HP and Epson).
 .
 foomatic-gui provides a GNOME-based setup tool for Foomatic printer
 queues using the command-line tools provided in this package.
 .
 Home Page: http://www.linuxprinting.org/
Task: print-server


$ /usr/bin/apt-cache show netcat \
                          foomatic-gui
Package: netcat
Priority: optional
Section: net
Installed-Size: 176
Maintainer: Decklin Foster <decklin@red-bean.com>
Architecture: i386
Version: 1.10-26
Depends: libc6 (>= 2.3.2.ds1-4)
Filename: pool/main/n/netcat/netcat_1.10-26_i386.deb
Size: 66302
MD5sum: 3273445ba7953c3c827872d6c474053b
Description: TCP/IP swiss army knife
 A simple Unix utility which reads and writes data across network
 connections using TCP or UDP protocol.  It is designed to be a reliable
 "back-end" tool that can be used directly or easily driven by other
 programs and scripts. At the same time it is a feature-rich network
 debugging and exploration tool, since it can create almost any kind of
 connection you would need and has several interesting built-in
 capabilities.

Package: foomatic-gui
Priority: optional
Section: gnome
Installed-Size: 248
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Version: 0.6.7
Depends: python (>> 2.3), python (<< 2.4), foomatic-db-engine, python-gnome2,
python-glade2, netcat, pconf-detect, nmap, smbclient, gksu
Filename: pool/main/f/foomatic-gui/foomatic-gui_0.6.7_all.deb
Size: 58252
MD5sum: 3720f90cb004a41a24b19f07ca8bdf23
Description: GNOME interface for configuring the Foomatic printer filter system
 Foomatic is a printing system designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package includes a GNOME-based graphical user interface to simplify
 configuring printers that use Foomatic.
 .
 Project Home: http://savannah.nongnu.org/projects/foomatic-gui/
 Development weblog: http://blog.lordsutch.com/?topic=13
Task: print-server


$ /usr/bin/apt-cache show foomatic-filters
Package: foomatic-filters
Priority: optional
Section: text
Installed-Size: 324
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Version: 3.0.2-1
Replaces: foomatic-bin (<< 2.9), cupsomatic-ppd
Depends: perl, debconf (>= 0.5) | debconf-2.0, ucf (>= 0.30)
Pre-Depends: bash (>= 2.05)
Recommends: cupsys-client | lpr | lprng | pdq | rlpr, gs-esp | gs,
cupsys | enscript  | a2ps  | mpage , foomatic-db-engine
Conflicts: foomatic-bin (<< 2.9), cupsomatic-ppd (<< 20030507)
Filename: pool/main/f/foomatic-filters/foomatic-filters_3.0.2-1_all.deb
Size: 123842
MD5sum: ba5f0f7710be13d2a131c5d16cd8cec5
Description: linuxprinting.org printer support - filters
 Foomatic is a printer database designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package consists of filter scripts used by the printer spoolers
 to convert the incoming PostScript data into the printer's native
 format using a printer-specific, but spooler-independent PPD file.
 You will need to install the foomatic-db-engine package and its
 dependencies for this package to be useful.
 .
 For use with CUPS, you will need both the cupsys and cupsys-client
 packages installed on your system.
 .
 Home Page: http://www.linuxprinting.org/


$ /usr/bin/apt-cache show cupsomatic-ppd
Package: cupsomatic-ppd
Priority: optional
Section: text
Installed-Size: 12
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Source: foomatic-filters-ppds
Version: 20041013-1
Depends: foomatic-filters-ppds 
Filename: pool/main/f/foomatic-filters-ppds/cupsomatic-ppd_20041013-1_all.deb
Size: 2588
MD5sum: 6474bf484cd5a424134e301b1dd928a3
Description: linuxprinting.org printer support - transition package
 Foomatic is a printer database designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package depends on the foomatic-filters-ppds package, which
 replaces the functionality of this package.  This package can be
 safely removed once you have installed foomatic-filters-ppds.
 .
 Home Page: http://www.linuxprinting.org/


$ /usr/bin/apt-cache show foomatic-filters-ppds
Package: foomatic-filters-ppds
Priority: extra
Section: text
Installed-Size: 10616
Maintainer: Chris Lawrence <lawrencc@debian.org>
Architecture: all
Version: 20041013-1
Replaces: cupsomatic-ppd (<< 20030507)
Depends: foomatic-db-engine
Recommends: cupsys
Suggests: foomatic-db-hpijs, foomatic-db-gimp-print, foo2zjs
Conflicts: cupsomatic-ppd (<< 20030507)
Filename: pool/main/f/foomatic-filters-ppds/foomatic-filters-ppds_20041013-1_all.deb
Size: 6145132
MD5sum: 249f8685a14a4b7b05a8a74cb4621134
Description: linuxprinting.org printer support - prebuilt PPD files
 Foomatic is a printer database designed to make it easier to set up
 common printers for use with Debian (and other operating systems).
 It provides the "glue" between a print spooler (like CUPS or lpr) and
 your actual printer, by telling your computer how to process files
 sent to the printer.
 .
 This package provides Adobe-compliant PPD files for *every single
 printer* supported by Foomatic.  Unless you want to be able to select
 your printer from the web interface of CUPS or PPR, you almost
 certainly don't want this package.  Instead, you can use the
 "foomatic-configure" script in foomatic-db-engine, the "foomatic-gui"
 package, or the web interface for getting a particular PPD file at
 http://www.linuxprinting.org/printer_list.cgi
 .
 Again, you probably don't want this package unless you have a lot of
 disk space to spare and/or using the CUPS or PPR web interface to set
 up your printer queue is important to you.
 .
 Home Page: http://www.linuxprinting.org/
Task: print-server


# /usr/bin/apt-get install cupsys cupsys-client cupsys-bsd \
                           cupsys-driver-gimpprint foomatic-bin \
                           cupsomatic-ppd gsfonts psfontmgr \
                           kdeprint gimpprint-locales \
                           foomatic-db-gimp-print \
                           foomatic-filters-ppds
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
gsfonts ya está en su versión más reciente. 
psfontmgr ya está en su versión más reciente. 
kdeprint ya está en su versión más reciente. 
Se instalarán los siguientes paquetes extras:
  cupsys-driver-gimpprint-data foomatic-db foomatic-db-engine foomatic-db-hpijs
  foomatic-filters gs-esp hpijs ijsgimpprint libcupsimage2 libijs-0.35
Paquetes sugeridos:
  xpdf-korean xpdf-japanese xpdf-chinese-traditional xpdf-chinese-simplified gtklp cupsys-pt
  xpp gimpprint-doc foo2zjs foomatic-gui hpoj
Paquetes recomendados
  xpdf-common
Se instalarán los siguientes paquetes NUEVOS:
  cupsomatic-ppd cupsys cupsys-bsd cupsys-client cupsys-driver-gimpprint
  cupsys-driver-gimpprint-data foomatic-bin foomatic-db foomatic-db-engine
  foomatic-db-gimp-print foomatic-db-hpijs foomatic-filters foomatic-filters-ppds
  gimpprint-locales gs-esp hpijs ijsgimpprint libcupsimage2 libijs-0.35
0 actualizados, 19 se instalarán, 0 para eliminar y 0 no actualizados.
0 actualizados, 19 se instalarán, 0 para eliminar y 2 no actualizados.
Se necesita descargar 0B/17,1MB de archivos.
Se utilizarán 67,8MB de espacio de disco adicional después de desempaquetar.
¿Desea continuar? [S/n] S
Preconfiguring packages ...
Seleccionando el paquete foomatic-filters previamente no seleccionado.
(Leyendo la base de datos ...
135345 ficheros y directorios instalados actualmente.)
Desempaquetando foomatic-filters (de .../foomatic-filters_3.0.2-1_all.deb) ...
Seleccionando el paquete foomatic-db previamente no seleccionado.
Desempaquetando foomatic-db (de .../foomatic-db_20041013-1-1_all.deb) ...
Seleccionando el paquete foomatic-db-engine previamente no seleccionado.
Desempaquetando foomatic-db-engine (de .../foomatic-db-engine_3.0.2-2_i386.deb) ...
Seleccionando el paquete foomatic-filters-ppds previamente no seleccionado.
Desempaquetando foomatic-filters-ppds (de .../foomatic-filters-ppds_20041013-1_all.deb) ...
Seleccionando el paquete cupsomatic-ppd previamente no seleccionado.
Desempaquetando cupsomatic-ppd (de .../cupsomatic-ppd_20041013-1_all.deb) ...
Seleccionando el paquete libcupsimage2 previamente no seleccionado.
Desempaquetando libcupsimage2 (de .../libcupsimage2_1.1.20final+rc1-9_i386.deb) ...
Seleccionando el paquete gs-esp previamente no seleccionado.
Desempaquetando gs-esp (de .../gs-esp_7.07.1-9_i386.deb) ...
Seleccionando el paquete cupsys previamente no seleccionado.
Desempaquetando cupsys (de .../cupsys_1.1.20final+rc1-9_i386.deb) ...
Seleccionando el paquete cupsys-client previamente no seleccionado.
Desempaquetando cupsys-client (de .../cupsys-client_1.1.20final+rc1-9_i386.deb) ...
Seleccionando el paquete cupsys-driver-gimpprint-data previamente no seleccionado.
Desempaquetando cupsys-driver-gimpprint-data (de .../cupsys-driver-gimpprint-data_4.2.7-4_all.deb) ...
Seleccionando el paquete cupsys-driver-gimpprint previamente no seleccionado.
Desempaquetando cupsys-driver-gimpprint (de .../cupsys-driver-gimpprint_4.2.7-4_i386.deb) ...
Seleccionando el paquete hpijs previamente no seleccionado.
Desempaquetando hpijs (de .../hpijs_1.6.2-1_i386.deb) ...
Seleccionando el paquete foomatic-db-hpijs previamente no seleccionado.
Desempaquetando foomatic-db-hpijs (de .../foomatic-db-hpijs_1.5-20041013-1_all.deb) ...
Seleccionando el paquete foomatic-bin previamente no seleccionado.
Desempaquetando foomatic-bin (de .../foomatic-bin_3.0.2-2_all.deb) ...
Seleccionando el paquete libijs-0.35 previamente no seleccionado.
Desempaquetando libijs-0.35 (de .../libijs-0.35_0.35-1_i386.deb) ...
Seleccionando el paquete ijsgimpprint previamente no seleccionado.
Desempaquetando ijsgimpprint (de .../ijsgimpprint_4.2.7-4_i386.deb) ...
Seleccionando el paquete foomatic-db-gimp-print previamente no seleccionado.
Desempaquetando foomatic-db-gimp-print (de .../foomatic-db-gimp-print_4.2.7-4_all.deb) ...
Seleccionando el paquete gimpprint-locales previamente no seleccionado.
Desempaquetando gimpprint-locales (de .../gimpprint-locales_4.2.7-4_all.deb) ...
Seleccionando el paquete cupsys-bsd previamente no seleccionado.
Desempaquetando cupsys-bsd (de .../cupsys-bsd_1.1.20final+rc1-9_i386.deb) ...
Configurando foomatic-filters (3.0.2-1) ...

Creating config file /etc/foomatic/filter.conf with new version

Configurando foomatic-db (20041013-1) ...
Configurando foomatic-db-engine (3.0.2-2) ...
Configurando foomatic-filters-ppds (20041013-1) ...
invoke-rc.d: unknown initscript, /etc/init.d/cupsys not found.

Configurando cupsomatic-ppd (20041013-1) ...
Configurando libcupsimage2 (1.1.20final+rc1-9) ...

Configurando gs-esp (7.07.1-9) ...

Configurando cupsys (1.1.20final+rc1-9) ...
Adding group `lpadmin' (116)...
Hecho.
Starting printing system service: cupsd.

Configurando cupsys-client (1.1.20final+rc1-9) ...
Configurando hpijs (1.6.2-1) ...
Configurando foomatic-db-hpijs (1.5-20041013-1) ...
Configurando foomatic-bin (3.0.2-2) ...
Configurando libijs-0.35 (0.35-1) ...

Configurando ijsgimpprint (4.2.7-4) ...
Configurando foomatic-db-gimp-print (4.2.7-4) ...
Configurando gimpprint-locales (4.2.7-4) ...
Configurando cupsys-bsd (1.1.20final+rc1-9) ...

Configurando cupsys-driver-gimpprint-data (4.2.7-4) ...
Configurando cupsys-driver-gimpprint (4.2.7-4) ...
No Gimp-Print PPD files to update.
Reloading printing system service: cupsd.


# /usr/bin/apt-get install cups-pdf
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Paquetes sugeridos:
  gnome-cups-manager
Se instalarán los siguientes paquetes NUEVOS:
  cups-pdf
0 actualizados, 1 se instalarán, 0 para eliminar y 2 no actualizados.
Se necesita descargar 0B/15,4kB de archivos.
Se utilizarán 106kB de espacio de disco adicional después de desempaquetar.
Seleccionando el paquete cups-pdf previamente no seleccionado.
(Leyendo la base de datos ...
140777 ficheros y directorios instalados actualmente.)
Desempaquetando cups-pdf (de .../cups-pdf_1.6.3-1_i386.deb) ...
Configurando cups-pdf (1.6.3-1) ...
Restarting printing system service: cupsd.


$HOME/cups-pdf
/usr/share/doc/cups-pdf/README.Debian
$ /usr/bin/ldd `which smbd` | /bin/grep "cups"
        libcups.so.2 => /usr/lib/libcups.so.2 (0x40109000)
/var/log/samba/log.smbd
[2004/10/09 20:13:22, 0] smbd/server.c:main(760)
  smbd version 3.0.7-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
/etc/pam.d/cupsys
@include common-auth
@include common-account
@include common-session
$ /usr/bin/diff -u /etc/samba/smb.conf-antes /etc/samba/smb.conf

--- /etc/samba/smb.conf-antes     2004-06-15 16:17:19.000000000 +0100
+++ /etc/samba/smb.conf    2004-06-15 16:15:48.000000000 +0100
@@ -188,7 +188,7 @@
 # When using [print$], root is implicitly a 'printer admin', but you can
 # also give this right to other users to add drivers and set printer
 # properties
-   printer admin = @domainadmins
+   printer admin = @domainprintoperator 


 ######## File sharing ########
@@ -327,13 +327,15 @@

 [printers]
    comment = All Printers
-   path = /tmp
+   path = /var/spool/samba 
    browseable = no
    public = yes
    guest ok = no
    writable = no
    printable = yes
    create mask = 0700
+   use client driver = no 
+   printer admin = root, @domainprintoperator 

 # Windows clients look for this share name as a source of downloadable
 # printer drivers
@@ -343,7 +345,7 @@
    browseable = yes
    guest ok = no
    read only = yes
-   write list = root, @domainadmins
+   write list = root, @domainprintoperator 

 [tmp]
    comment = Temporal
/var/spool/samba
$ /bin/ls -ld /var/spool/samba
drwxrws---  2 root domainpoweruser 48 2004-10-09 20:28 /var/spool/samba
template_config.php
/etc/cups/client.conf
ServerName gsr.pt 
Encryption Required 
/etc/cups/client.conf
/etc/cups/cupsd.conf
cupsd.conf
/etc/cups/cupsd.conf
ServerName gsr.pt 
ServerAdmin sergio@gsr.pt 
/etc/ldap/ssl/
/etc/cups
/etc/ldap/ssl/
/etc/cups
# /bin/cp -va /etc/ldap/ssl/ /etc/cups/
«/etc/ldap/ssl/» -> «/etc/cups/ssl»
«/etc/ldap/ssl/crl» -> «/etc/cups/ssl/crl»
«/etc/ldap/ssl/certs» -> «/etc/cups/ssl/certs»
«/etc/ldap/ssl/certs/servidorcert.pem» -> «/etc/cups/ssl/certs/servidorcert.pem»
«/etc/ldap/ssl/index.txt.old» -> «/etc/cups/ssl/index.txt.old»
«/etc/ldap/ssl/index.txt» -> «/etc/cups/ssl/index.txt»
«/etc/ldap/ssl/serial.old» -> «/etc/cups/ssl/serial.old»
«/etc/ldap/ssl/serial» -> «/etc/cups/ssl/serial»
«/etc/ldap/ssl/newcerts» -> «/etc/cups/ssl/newcerts»
«/etc/ldap/ssl/newcerts/01.pem» -> «/etc/cups/ssl/newcerts/01.pem»
«/etc/ldap/ssl/cacert.pem» -> «/etc/cups/ssl/cacert.pem»
«/etc/ldap/ssl/index.txt.attr» -> «/etc/cups/ssl/index.txt.attr»
«/etc/ldap/ssl/private» -> «/etc/cups/ssl/private»
«/etc/ldap/ssl/private/cakey.pem» -> «/etc/cups/ssl/private/cakey.pem»
«/etc/ldap/ssl/private/servidorkey.pem» -> «/etc/cups/ssl/private/servidorkey.pem»
# /bin/chown root.lpadmin -vR /etc/cups/ssl
cambiado el propietario de «/etc/cups/ssl» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/crl» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/certs» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/certs/servidorcert.pem» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/index.txt.old» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/index.txt» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/serial.old» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/serial» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/newcerts» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/newcerts/01.pem» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/cacert.pem» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/index.txt.attr» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/private» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/private/cakey.pem» a root:lpadmin
cambiado el propietario de «/etc/cups/ssl/private/servidorkey.pem» a root:lpadmin
ServerCertificate /etc/cups/ssl/certs/servidorcert.pem
ServerKey /etc/cups/ssl/private/servidorkey.pem
Listen gsr.pt:631 
SSLListen gsr.pt:6443 
<Location /jobs>

    AuthType Basic
    AuthClass User

    Encryption Required

</Location>

<Location /admin>

    AuthType Basic
    AuthClass System

    Order Deny,Allow
    Deny From All
    Allow From 127.0.0.1

    Encryption Required

</Location>

# /etc/init.d/cupsys restart
Restarting printing system service: cupsd.
/admin
/jobs
/etc/cups/cupsd.conf
impresoras
$HOME/cups-pdf
Test_Page.pdf
/admin
/jobs
/etc/cups/cupsd.conf
/var/log/cups/page_log
Sublimacion sergio 2 [10/Oct/2004:19:52:05 +0200] 1 1 - localhost
cups-pdf
Test_Page.pdf
/usr/share/cups/drivers/
/tmp
$ /bin/tar xzvf /tmp/cups-samba-5.0rc3.tar.gz -C /tmp
cups-samba.install
cups-samba.license
cups-samba.readme
cups-samba.remove
cups-samba.ss
cups-samba.install
cups-samba.ss
/usr/share/cups/drivers/
/usr/share/cups/drivers/
# /bin/mkdir -v -m 755 /usr/share/cups/drivers/
/bin/mkdir: se ha creado el directorio `/usr/share/cups/drivers/'
# /bin/tar xvf /tmp/cups-samba.ss -C /
/usr/share/cups/drivers/cups5.hlp
/bin/tar: Removing leading `/' from member names
/usr/share/cups/drivers/cupsdrv5.dll
/usr/share/cups/drivers/cupsui5.dll
winstspa.exe
$ /usr/bin/wine winstspa.exe
C:\Windows\Temp\
$HOME/.wine/fake_windows/Windows/Temp
pft3405~tmp
$HOME/.wine/fake_windows/Windows/Temp
$ /usr/bin/wine winstspa.exe [Ctrl+c]
$ cd ~/.wine/fake_windows/Windows/Temp
$ /usr/bin/tree
.
|-- pftc3c~tmp
|   |-- DATA.TAG
|   |-- Leame.wri
|   |-- SETUP.INI
|   |-- Setup.exe
|   |-- Win2000 
|   |   |-- DEFPRTR2.PPD
|   |   |-- PS5UI.DLL
|   |   |-- PSCRIPT.HLP
|   |   |-- PSCRIPT.NTF
|   |   |-- PSCRIPT5.DLL
|   |   `-- PSCRPTFE.NTF
|   |-- WinNT 
|   |   |-- ADOBEPSU.HLP
|   |   |-- AdobeJpn.ntf
|   |   |-- AdobeKor.ntf
|   |   |-- AdobePS5.dll
|   |   |-- AdobePS5.ntf
|   |   |-- AdobeZhS.ntf
|   |   |-- AdobeZhT.ntf
|   |   |-- DEFPRTR2.PPD
|   |   `-- adobepsu.dll
|   |-- WinXP 
|   |   |-- DEFPRTR2.PPD
|   |   |-- PS5UI.DLL
|   |   |-- PSCRIPT.HLP
|   |   |-- PSCRIPT.NTF
|   |   |-- PSCRIPT5.DLL
|   |   `-- PSCRPTFE.NTF
|   |-- Windows 
|   |   |-- ADOBEPS4.DRV
|   |   |-- ADOBEPS4.HLP
|   |   |-- DEFPRTR2.PPD
|   |   |-- ICONLIB.DLL
|   |   |-- PSMON.DLL
|   |   `-- adfonts.mfm
|   |-- _INST32I.EX_
|   |-- _ISDel.exe
|   |-- _Setup.dll
|   |-- _sys1.cab
|   |-- _sys1.hdr
|   |-- _user1.cab
|   |-- _user1.hdr
|   |-- data1.cab
|   |-- data1.hdr
|   |-- lang.dat
|   |-- layout.bin
|   |-- os.dat
|   |-- pftw1.pkg
|   |-- setup.bmp
|   |-- setup.ins
|   `-- setup.lid
`-- plfa2b.tmp

5 directories, 48 files
/usr/share/cups/drivers
/usr/local/bin
$ cd ~/.wine/fake_windows/Windows/Temp/pftc3c~tmp
$ for x in "Win2000/* Windows/* WinNT/* WinXP/*";
> do
>    /bin/bash /usr/local/bin/uppercase $x;
> done
/usr/local/bin/uppercase: Win2000/DEFPRTR2.PPD not changed.
/usr/local/bin/uppercase: Win2000/PS5UI.DLL not changed.
/usr/local/bin/uppercase: Win2000/PSCRIPT5.DLL not changed.
/usr/local/bin/uppercase: Win2000/PSCRIPT.HLP not changed.
/usr/local/bin/uppercase: Win2000/PSCRIPT.NTF not changed.
/usr/local/bin/uppercase: Win2000/PSCRPTFE.NTF not changed.
/usr/local/bin/uppercase: Windows/adfonts.mfm -> Windows/ADFONTS.MFM
/usr/local/bin/uppercase: Windows/ADOBEPS4.DRV not changed.
/usr/local/bin/uppercase: Windows/ADOBEPS4.HLP not changed.
/usr/local/bin/uppercase: Windows/DEFPRTR2.PPD not changed.
/usr/local/bin/uppercase: Windows/ICONLIB.DLL not changed.
/usr/local/bin/uppercase: Windows/PSMON.DLL not changed.
/usr/local/bin/uppercase: WinNT/AdobeJpn.ntf -> WinNT/ADOBEJPN.NTF
/usr/local/bin/uppercase: WinNT/AdobeKor.ntf -> WinNT/ADOBEKOR.NTF
/usr/local/bin/uppercase: WinNT/AdobePS5.dll -> WinNT/ADOBEPS5.DLL
/usr/local/bin/uppercase: WinNT/AdobePS5.ntf -> WinNT/ADOBEPS5.NTF
/usr/local/bin/uppercase: WinNT/adobepsu.dll -> WinNT/ADOBEPSU.DLL
/usr/local/bin/uppercase: WinNT/ADOBEPSU.HLP not changed.
/usr/local/bin/uppercase: WinNT/AdobeZhS.ntf -> WinNT/ADOBEZHS.NTF
/usr/local/bin/uppercase: WinNT/AdobeZhT.ntf -> WinNT/ADOBEZHT.NTF
/usr/local/bin/uppercase: WinNT/DEFPRTR2.PPD not changed.
/usr/local/bin/uppercase: WinXP/DEFPRTR2.PPD not changed.
/usr/local/bin/uppercase: WinXP/PS5UI.DLL not changed.
/usr/local/bin/uppercase: WinXP/PSCRIPT5.DLL not changed.
/usr/local/bin/uppercase: WinXP/PSCRIPT.HLP not changed.
/usr/local/bin/uppercase: WinXP/PSCRIPT.NTF not changed.
/usr/local/bin/uppercase: WinXP/PSCRPTFE.NTF not changed.
/usr/share/cups/drivers
/usr/share/cups/drivers
/usr/share/cups/drivers
# cd $HOME/.wine/fake_windows/Windows/Temp/pftc3c~tmp
# /bin/bash /usr/local/bin/mover-controladores
`PATH/Windows/ADFONTS.MFM' -> `/usr/share/cups/drivers/ADFONTS.MFM'
`PATH/Windows/ADOBEPS4.DRV' -> `/usr/share/cups/drivers/ADOBEPS4.DRV'
`PATH/Windows/ADOBEPS4.HLP' -> `/usr/share/cups/drivers/ADOBEPS4.HLP'
`PATH/WinNT/DEFPRTR2.PPD' -> `/usr/share/cups/drivers/DEFPRTR2.PPD'
`PATH/WinXP/DEFPRTR2.PPD' -> `/usr/share/cups/drivers/DEFPRTR2.PPD'
`PATH/Win2000/DEFPRTR2.PPD' -> `/usr/share/cups/drivers/DEFPRTR2.PPD'
`PATH/Windows/DEFPRTR2.PPD' -> `/usr/share/cups/drivers/DEFPRTR2.PPD'
`PATH/Windows/ICONLIB.DLL' -> `/usr/share/cups/drivers/ICONLIB.DLL'
`PATH/Windows/PSMON.DLL' -> `/usr/share/cups/drivers/PSMON.DLL'
`PATH/WinNT/ADOBEPS5.DLL' -> `/usr/share/cups/drivers/ADOBEPS5.DLL'
`PATH/WinNT/ADOBEPSU.DLL' -> `/usr/share/cups/drivers/ADOBEPSU.DLL'
`PATH/WinNT/ADOBEPSU.HLP' -> `/usr/share/cups/drivers/ADOBEPSU.HLP'
el modo de `/usr/share/cups/drivers/ADFONTS.MFM' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/ADOBEPS4.DRV' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/ADOBEPS4.HLP' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/ADOBEPS5.DLL' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/ADOBEPSU.DLL' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/ADOBEPSU.HLP' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/cups5.hlp' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/cupsdrv5.dll' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/cupsui5.dll' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/DEFPRTR2.PPD' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/ICONLIB.DLL' cambia a 0644 (rw-r--r--)
el modo de `/usr/share/cups/drivers/PSMON.DLL' cambia a 0644 (rw-r--r--)
/usr/share/cups/drivers/
/usr/share/cups/drivers/
$ /usr/bin/tree /var/lib/samba/printers

/var/lib/samba/printers
|-- W32X86
`-- WIN40

2 directories, 0 files
$ /usr/sbin/cupsaddsmb -U root -a
Password for root required to access localhost via SAMBA: [Clave]
$ /usr/bin/tree /var/lib/samba/printers
/var/lib/samba/printers
|-- W32X86 
|   `-- 2
|       |-- InyeccionBN.ppd
|       |-- InyeccionColor.ppd
|       |-- LaserBN.ppd
|       |-- LaserColor.ppd
|       |-- Multifuncion.ppd
|       |-- Plotter.ppd
|       |-- Sublimacion.ppd
|       |-- cups5.hlp
|       |-- cupsdrv5.dll
|       `-- cupsui5.dll
`-- WIN40 
    `-- 0
        |-- ADFONTS.MFM
        |-- ADOBEPS4.DRV
        |-- ADOBEPS4.HLP
        |-- DEFPRTR2.PPD
        |-- ICONLIB.DLL
        |-- InyeccionBN.PPD
        |-- InyeccionColor.PPD
        |-- LaserBN.PPD
        |-- LaserColor.PPD
        |-- Multifuncion.PPD
        |-- PSMON.DLL
        |-- Plotter.PPD
        `-- Sublimacion.PPD

4 directories, 23 files
$ /usr/bin/smbclient -L TODOSCSI -U gsruser
Password: [Clave]
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]

        Sharename       Type      Comment
        ---------       ----      -------
        netlogon        Disk      Network Logon Service
        print$          Disk      Printer Drivers
        tmp             Disk      Temporal
        cdrom           Disk      Samba server's CD-ROM
        IPC$            IPC       IPC Service (SAMBA-LDAP PDC server)
        ADMIN$          IPC       IPC Service (SAMBA-LDAP PDC server)
        InyeccionBN     Printer   Impresora de inyeccion de tinta a Blanco y Negro
        LaserBN         Printer   Impresora Laser a Blanco y Negro
        LaserColor      Printer   Impresora Laser a Color
        Multifuncion    Printer   Impresora multifuncion
        Plotter         Printer   Plotter de impresion
        Barato          Printer   Impresoras para imprimir a bajo coste
        Sublimacion     Printer   Impresora de sublimacion
        BlancoNegro     Printer   Impresion a Blanco y Negro
        Color           Printer   Impresoras a color
        Laser           Printer   Impresion a Laser
        Profesional     Printer   Impresoras para trabajos de calidad
        gsruser         Disk      Home Directories
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]

        Server               Comment
        ---------            -------
        TODOSCSI             SAMBA-LDAP PDC server

        Workgroup            Master
        ---------            -------
        GSRDOMAIN            TODOSCSI
$HOME/cups-pdf
Test_Page.pdf
^[35]$ /usr/bin/file /tmp/cups-samba.ss
cups-samba.ss: tar archive
/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
/etc/cups/printers.conf
doc/
<alet@librelogiciel.com>
<alet@librelogiciel.com>
diff -urN pykota/debian/changelog pykota-1.20alpha25/debian/changelog
--- pykota/debian/changelog     2004-10-13 18:35:03.000000000 +0200
+++ pykota-1.20alpha25/debian/changelog 2004-10-13 18:45:06.000000000 +0200
@@ -1,3 +1,9 @@
+pykota (1.20alpha25) unstable; urgency=low
+
+  * Update from CVS.
+
+ -- Sergio González González <sergio.gonzalez@hispalinux.es>  Wed, 13 Oct 2004 18:44:34 +0200
+
 pykota (1.20alpha24) unstable; urgency=low

   * Update from CVS.
patch-pykota
$ /bin/cat ../patch-pykota | /usr/bin/patch -p1
patching file debian/changelog
setup.py
debian/rules
$ /usr/bin/dpkg-buildpackage -rfakeroot -us -uc -b
dpkg-buildpackage: source package is pykota
dpkg-buildpackage: source version is 1.20alpha25
dpkg-buildpackage: source maintainer is Sergio González González <sergio.gonzalez@hispalinux.es>
dpkg-buildpackage: host architecture is i386
 fakeroot debian/rules clean
dh_testdir
dh_testroot
rm -f build-stamp
/usr/bin/python setup.py clean --all
running clean

...

dpkg-deb: construyendo el paquete `pykota' en `../pykota_1.20alpha25_all.deb'.
 dpkg-genchanges -b
dpkg-genchanges: binary-only upload - not including any source code
dpkg-buildpackage: binary only upload (no source included)
pykota_1.20alpha25_all.deb
# /usr/bin/dpkg -i pykota_1.20alpha25_all.deb
Seleccionando el paquete pykota previamente no seleccionado.
(Leyendo la base de datos ...
141967 ficheros y directorios instalados actualmente.)
Preparando para reemplazar pykota 1.20alpha25 (usando pykota_1.20alpha25_all.deb) ...
Desempaquetando el reemplazo de pykota ...
Configurando pykota (1.20alpha25) ...


# /usr/sbin/dpkg-reconfigure --priority=low pykota
/etc/ldap/slapd.conf
include         /etc/ldap/schema/pykota.schema
# PyKota
index pykotaUserName          pres,eq,sub
index pykotaGroupName         pres,eq,sub
index pykotaPrinterName       pres,eq,sub
index pykotaLastJobIdent      eq
# /usr/sbin/slapindex -v
indexing id=00000001
indexing id=00000002
indexing id=00000016
indexing id=00000017
indexing id=00000018
indexing id=00000019
indexing id=0000001b
indexing id=0000001c
indexing id=0000001d
indexing id=0000001e
indexing id=00000020
indexing id=00000021
indexing id=00000022
indexing id=00000023
indexing id=00000024
indexing id=00000025
indexing id=00000027
indexing id=00000028
indexing id=0000002a
indexing id=0000002b
# /etc/init.d/slapd restart
Stopping OpenLDAP: slapd.
Starting OpenLDAP: slapd.
/usr/share/doc/pykota/initscripts/ldap/pykota-sample.ldif
# Entry 1: ou=pykota,dc=gsr,dc=pt
dn:ou=pykota,dc=gsr,dc=pt
ou: pykota
objectClass: top
objectClass: organizationalUnit

# Entry 2: ou=printers,ou=pykota,dc=gsr,dc=pt
dn:ou=printers,ou=pykota,dc=gsr,dc=pt
ou: printers
objectClass: top
objectClass: organizationalUnit

# Entry 3: ou=jobs,ou=pykota,dc=gsr,dc=pt
dn:ou=jobs,ou=pykota,dc=gsr,dc=pt
ou: jobs
objectClass: top
objectClass: organizationalUnit

# Entry 4: ou=uquotas,ou=pykota,dc=gsr,dc=pt
dn:ou=uquotas,ou=pykota,dc=gsr,dc=pt
ou: uquotas
objectClass: top
objectClass: organizationalUnit

# Entry 5: ou=gquotas,ou=pykota,dc=gsr,dc=pt
dn:ou=gquotas,ou=pykota,dc=gsr,dc=pt
ou: gquotas
objectClass: top
objectClass: organizationalUnit

# Entry 6: ou=lastjobs,ou=pykota,dc=gsr,dc=pt
dn:ou=lastjobs,ou=pykota,dc=gsr,dc=pt
ou: lastjobs
objectClass: top
objectClass: organizationalUnit
pykota.ldif
$ /usr/bin/ldapadd -x -D "cn=admin,dc=gsr,dc=pt" -W -h gsr.pt -f pykota.ldif
Enter LDAP Password: [clave]
adding new entry "ou=pykota,dc=gsr,dc=pt"

adding new entry "ou=printers,ou=pykota,dc=gsr,dc=pt"

adding new entry "ou=jobs,ou=pykota,dc=gsr,dc=pt"

adding new entry "ou=uquotas,ou=pykota,dc=gsr,dc=pt"

adding new entry "ou=gquotas,ou=pykota,dc=gsr,dc=pt"

adding new entry "ou=lastjobs,ou=pykota,dc=gsr,dc=pt"

/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
# Entry: cn=pykotauser,dc=gsr,dc=pt
dn:cn=pykotauser,dc=gsr,dc=pt
cn: pykotauser
objectClass: simpleSecurityObject
objectClass: organizationalRole
userPassword: {crypt}y1pYJeZPC49BY
description: Usuario de acceso como sólo lectura para PyKota

# Entry: cn=pykotaadmin,dc=gsr,dc=pt
dn:cn=pykotaadmin,dc=gsr,dc=pt
cn: pykotaadmin
objectClass: simpleSecurityObject
objectClass: organizationalRole
userPassword: {crypt}y1pYJeZPC49BY
description: Usuario de acceso como sólo lectura para PyKota
usuarios-pykota.ldif
$ /usr/bin/ldapadd -x -D "cn=admin,dc=gsr,dc=pt" -W  -f usuarios-pykota.ldif
Enter LDAP Password: [Clave]
adding new entry "cn=pykotauser,dc=gsr,dc=pt"

adding new entry "cn=pykotaadmin,dc=gsr,dc=pt"
/etc/ldap/slapd.conf
by dn="cn=pykotaadmin,dc=gsr,dc=pt" write
by dn="cn=pykotauser,dc=gsr,dc=pt" read
# User Limits
limits dn="cn=pykotauser,dc=gsr,dc=pt" size.soft=-1 size.hard=soft
limits dn="cn=pykotaadmin,dc=gsr,dc=pt" size.soft=-1 size.hard=soft
/etc/ldap/slapd.conf
/etc/pykota/pykota.conf
storagebackend: ldapstorage
storageserver: ldap://gsr.pt:389
storagename: dc=gsr,dc=pt
storageuser: cn=pykotauser,dc=gsr,dc=pt
storageuserpw: ********
userbase: ou=people,dc=gsr,dc=pt
userrdn: uid
balancebase: ou=people,dc=gsr,dc=pt
balancerdn: uid
groupbase: ou=groups,dc=gsr,dc=pt
grouprdn:  cn
printerbase: ou=printers,ou=pykota,dc=gsr,dc=pt
printerrdn: cn
jobbase: ou=jobs,ou=pykota,dc=gsr,dc=pt
userquotabase: ou=uquotas,ou=pykota,dc=gsr,dc=pt
groupquotabase: ou=gquotas,ou=pykota,dc=gsr,dc=pt
lastjobbase: ou=lastjobs,ou=pykota,dc=gsr,dc=pt
newuser : attach(posixAccount, warn)
newgroup : attach(posixGroup, warn)
usermail : mail
groupmembers: memberUid
smtpserver: localhost
maildomain: gsr.pt
accounter: software(/usr/bin/pkpgcounter)
onaccountererror: stop
admin: Sergio González González
adminmail: root@localhost
mailto: both
# Poor man's warning message
# The warning message that is sent if the "poorman" value is reached
# Again this must appear in the global section
poorwarn: Su saldo en la cuota de impresión es bajo.
 Dentro de poco no podrá volver a imprimir.

# Soft limit reached warning message
# The warning message that is sent if the soft quota limit is reached
# May appear either globally or on a per-printer basis
softwarn: Ha alcanzado su límite blando en la cuota de impresión.
 Esto significa que podrá seguir imprimiendo algún tiempo,
 pero debería contactar con su administrador para comprar
 más cuota de impresión.

# Hard limit reached error message
# The error message that is sent if the hard quota limit is reached
# May appear either globally or on a per-printer basis
hardwarn: Ha alcanzado su límite duro en la cuota de impresión.
 Esto significa que no podrá volver a imprimir.
 Contacte con su administrador en <root@gsr.pt> tan
 pronto como le sea posible para solucionar el
 problema.
enforcement: strict
/etc/pykota/pykotadmin.conf
# Quota Storage administrator's name and password
storageadmin: cn=pykotaadmin,dc=gsr,dc=pt
storageadminpw: **********
/etc/pykota/pykotadmin.conf
/etc/cups/printers.conf
/etc/cups/printers.conf
/etc/cups/printers.conf
</Printer>
<Printer InyeccionBN>
Info Impresora de inyección de tinta en Blanco y Negro
Location Laboratorio 2
DeviceURI cups-pdf:/
State Idle
Accepting Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
</Printer>
</Printer>
<Printer InyeccionBN>
Info Impresora de inyección de tinta en Blanco y Negro
Location Laboratorio 2
DeviceURI cupspykota:cups-pdf:/
State Idle
Accepting Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
</Printer>
$ /usr/bin/pkprinters --add --charge 0.09 LaserColor
$ /usr/bin/pkprinters --add --charge 0.03 LaserBN
$ /usr/bin/pkprinters --add --charge 0.5,1 Plotter
$ /usr/bin/pkprinters --add --charge 0.65,0.75 Sublimacion
$ /usr/bin/pkprinters --add --charge 0.025 Multifuncion InyeccionBN
$ /usr/bin/pkprinters --add --charge 0.07 InyeccionColor
$ /usr/bin/pkprinters --list
LaserColor [] (0.0 + #*0.09)
LaserBN [] (0.0 + #*0.03)
Plotter [] (1.0 + #*0.5)
Sublimacion [] (0.75 + #*0.65)
Multifuncion [] (0.0 + #*0.025)
InyeccionBN [] (0.0 + #*0.025)
InyeccionColor [] (0.0 + #*0.07)
$ /usr/bin/repykota
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido

Informe para la cuota user en la impresora LaserBN ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.030
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido

Informe para la cuota user en la impresora Plotter ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 1.000
Precio por página: 0.500
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido

Informe para la cuota user en la impresora Sublimacion ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.750
Precio por página: 0.650
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido

Informe para la cuota user en la impresora Multifuncion ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.025
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido

Informe para la cuota user en la impresora InyeccionBN ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.025
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido

Informe para la cuota user en la impresora InyeccionColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.070
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
                                                   Real : Desconocido


# /usr/bin/edpykota --add -P LaserColor -S 5 -H 10 printquota
WARN: No se ha podido encontrar una entrada objectClass posixAccount existente con \
uid=printquota para anexionar el objectClass pykotaAccount. A new entry will be created instead.
# /usr/bin/repykota --printer LaserColor
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printquot -Q       0       5      10       0.00                   0       0.00
                                                   Real : Desconocido

# /usr/bin/edpykota --add -P Sublimacion --limitby balance --balance 5 printsaldo
WARN: No se ha podido encontrar una entrada objectClass posixAccount existente con uid=printsaldo para \
anexionar el objectClass pykotaAccount. A new entry will be created instead.
# /usr/bin/repykota --printer Sublimacion
Informe para la cuota user en la impresora Sublimacion ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.750
Precio por página: 0.650
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printsald -B       0    None    None       5.00                   0       5.00
                                                  Total :         0       5.00
                                                   Real : Desconocido


cups-pdf
job_2-untitled_document.pdf
# /usr/bin/repykota --printer LaserColor
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printquot +Q       5       5      10      -0.45 2004-10-21        5       0.00
                                                  Total :         5       0.00
                                                   Real :         0

From: root@localhost
Subject: Cuota de Impresión Baja
To: printquota@gsr.pt

Ha alcanzado su límite blando en la cuota de impresión.
Esto significa que podrá seguir imprimiendo algún tiempo,
pero debería contactar con su administrador para comprar
más cuota de impresión.

Entre en contacto con su administrador de sistema, por favor :

        Sergio González González - <root@localhost>
From: root@localhost
Subject: Cuota de impresión
To: root@localhost

Cuota de impresión baja para el usuario printquota en la impresora LaserColor
From: root@localhost
Subject: Cuota de Impresión Excedida
To: printquota@gsr.pt

Ha alcanzado su límite duro en la cuota de impresión.
Esto significa que no podrá volver a imprimir.
Contacte con su administrador en <root@gsr.pt> tan
pronto como le sea posible para solucionar el
problema.

Entre en contacto con su administrador de sistema, por favor :

        Sergio González González - <root@localhost>
From: root@localhost
Subject: Cuota de impresión
To: root@localhost

Cuota de impresión excedida para el usuario printquota en la impresora LaserColor
# /usr/bin/repykota --printer LaserColor
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printquot +Q       5       5      10      -0.45 2004-10-21        5       0.00
                                                  Total :         5       0.00
                                                   Real :         0

# /usr/bin/repykota --printer LaserColor
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printquot +Q       9       5      10      -0.81 2004-10-21        9       0.00
                                                  Total :         9       0.00
                                                   Real :         5


From: root@localhost
Subject: Cuota de Impresión Baja
To: printquota@gsr.pt

Ha alcanzado su límite blando en la cuota de impresión.
Esto significa que podrá seguir imprimiendo algún tiempo,
pero debería contactar con su administrador para comprar
más cuota de impresión.

Entre en contacto con su administrador de sistema, por favor :

        Sergio González González - <root@localhost>
From: root@localhost
Subject: Cuota de impresión
To: root@localhost

Cuota de impresión excedida para el usuario sergio en la impresora LaserColor
# /usr/bin/edpykota --reset printquota
# /usr/bin/repykota --printer LaserColor
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printquot -Q       0       5      10      -0.81 2004-10-21        9       0.00
                                                  Total :         9       0.00
                                                   Real :         9


# /usr/bin/repykota --printer LaserColor
Informe para la cuota user en la impresora LaserColor ()
Tiempo de gracia para páginas: 7 día(s)
Precio por trabajo: 0.000
Precio por página: 0.090
Usuario         usado   blando  duro    saldo gracia          total     pagado
------------------------------------------------------------------------------
printquot +Q       5       5      10      -1.26 2004-10-21       14       0.00
                                                  Total :        14       0.00
                                                   Real :         9


$ /usr/bin/pykotme ldap+samba+cups+pykota.ps
Tamaño del trabajo : 759 página(s)
Coste en la impresora LaserColor : 68.31
Coste en la impresora LaserBN : 22.77
Coste en la impresora Plotter : 380.50
Coste en la impresora Sublimacion : 494.10
Coste en la impresora Multifuncion : 18.98
Coste en la impresora InyeccionBN : 18.98
Coste en la impresora InyeccionColor : 53.13
/etc/smbldap-tools/smbldap_bind.conf
/etc/smbldap-tools/smbldap.conf
/usr/share/cups/drivers
readadmin.ldif
# Entry: cn=readadmin,dc=gsr,dc=pt
dn:cn=readadmin,dc=gsr,dc=pt
cn: readadmin
objectClass: simpleSecurityObject
objectClass: organizationalRole
userPassword: {crypt}y1pYJeZPC49BY
description: LDAP administrator (read only admin)
$ /usr/bin/ldapadd -x -ZZ -D "cn=admin,dc=gsr,dc=pt" -W -f readadmin.ldif
Enter LDAP Password: [Clave]
adding new entry "cn=readadmin,dc=gsr,dc=pt"

/etc/ldap/slapd.conf
by dn="cn=readadmin,dc=gsr,dc=pt" read
/etc/ldap/slapd.conf
# /usr/bin/apt-get install nscd
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes NUEVOS:
  nscd
0 actualizados, 1 se instalarán, 0 para eliminar y 0 no actualizados.
Se necesita descargar 0B/90,4kB de archivos.
Se utilizarán 217kB de espacio de disco adicional después de desempaquetar.
(Leyendo la base de datos ...
273953 ficheros y directorios instalados actualmente.)
Desempaquetando nscd (de .../nscd_2.3.2.ds1-16_i386.deb) ...
Configurando nscd (2.3.2.ds1-16) ...
Starting Name Service Cache Daemon: nscd.


$ /usr/bin/apt-cache show nscd
Package: nscd
Priority: optional
Section: admin
Installed-Size: 212
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Architecture: i386
Source: glibc
Version: 2.3.2.ds1-16
Replaces: libc6 (<< 2.1-4)
Depends: libc6 (>= 2.3.2.ds1-16)
Filename: pool/main/g/glibc/nscd_2.3.2.ds1-16_i386.deb
Size: 90436
MD5sum: 4830a171d3ef40bef18315bcfb47be3a
Description: GNU C Library: Name Service Cache Daemon
 A daemon which handles passwd, group and host lookups
 for running programs and caches the results for the next
 query. You should install this package only if you use
 slow Services like LDAP, NIS or NIS+


/etc/nscd.conf
/etc/nscd.conf
        logfile                 /var/log/nscd.log
        server-user             nscd

# /usr/sbin/addgroup --system nscd

Añadiendo el grupo nscd (135)...
Hecho.
# /usr/sbin/adduser --system --no-create-home --shell /bin/false \
--ingroup nscd --disabled-password --disabled-login nscd

Añadiendo usuario del sistema nscd...
No se crea el directorio home.
/var/run/nscd.pid
# /bin/chown nscd\:nscd /var/log/nscd.log /var/run/nscd.pid
# /etc/init.d/nscd start
Starting Name Service Cache Daemon: nscd.
/etc/defaul/samba
/etc/default/samba
#<off># netbios-ssn     stream  tcp     nowait  root    /usr/sbin/tcpd  /usr/sbin/smbd
# /usr/sbin/update-inetd --verbose --enable netbios-ssn
Processing /etc/inetd.conf
Processing service `netbios-ssn' ... enabled
# /usr/bin/killall --verbose -HUP inetd
Killed inetd(3005) with signal 1
samba
/etc/xinetd.d
/etc/xinetd.d/samba
service netbios-ssn
{
        disable         = no 
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/smbd
}
# /etc/init.d/xinetd reload
Reloading internet superserver configuration: xinetd.
CONFIG_SMB_FS=m
CONFIG_SMB_NLS_DEFAULT=y
CONFIG_SMB_NLS_REMOTE="cp850"
CONFIG_SMB_UNIX=y
CONFIG_SMB_FS=m
CONFIG_SMB_NLS_DEFAULT=y
CONFIG_SMB_NLS_REMOTE="cp850"
CONFIG_CIFS=m
CONFIG_CIFS_STATS=y
CONFIG_CIFS_XATTR=y
CONFIG_CIFS_POSIX=y
$ /usr/bin/apt-cache show swat
Package: swat
Priority: optional
Section: net
Installed-Size: 8968
Maintainer: Eloy A. Paris <peloy@debian.org>
Architecture: i386
Source: samba
Version: 3.0.7-1
Depends: debconf, samba (= 3.0.7-1), libc6 (>= 2.3.2.ds1-4),
libcomerr2 (>= 1.33-3), libcupsys2-gnutls10 (>= 1.1.20final-1),
libkrb53 (>= 1.3.2), libldap2 (>= 2.1.17-1), libpam0g (>= 0.76),
libpopt0 (>= 1.7)
Recommends: samba-doc
Filename: pool/main/s/samba/swat_3.0.7-1_i386.deb
Size: 3964890
MD5sum: d84a020935c85831d8d81321b7391ed4
Description: Samba Web Administration Tool
 The Samba software suite is a collection of programs that
 implements the SMB protocol for unix systems, allowing you to serve
 files and printers to Windows, NT, OS/2 and DOS clients. This protocol
 is sometimes also referred to as the LanManager or NetBIOS protocol.
 .
 This package contains the components of the Samba suite that are needed
 for Web administration of the Samba server.
 .
 Note: if you want to use the on-line documentation that is accesible
 through the Swat front-end you must install the samba-doc package.
Task: file-server, print-server


#/usr/bin/apt-get install swat
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes NUEVOS:
  swat
0 actualizados, 1 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/3965kB de archivos.
Se utilizarán 9183kB de espacio de disco adicional después de desempaquetar.
Preconfiguring packages ...

/etc/samba/smb.conf
Seleccionando el paquete swat previamente no seleccionado.
(Leyendo la base de datos ...
133905 ficheros y directorios instalados actualmente.)
Desempaquetando swat (de .../archives/swat_3.0.7-1_i386.deb) ...
Configurando swat (3.0.7-1) ...
--------- IMPORTANT INFORMATION FOR XINETD USERS ----------
The following line will be added to your /etc/inetd.conf file:

#<off># swat\t\tstream\ttcp\tnowait.400\troot\t/usr/sbin/tcpd\t/usr/sbin/swat

If you are indeed using xinetd, you will have to convert the
above into /etc/xinetd.conf format, and add it manually. See
/usr/share/doc/xinetd/README.Debian for more information.
-----------------------------------------------------------


localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
# /usr/sbin/update-inetd --verbose --enable swat
Processing /etc/inetd.conf
Processing service `swat' ... enabled
# /usr/bin/killall --verbose -HUP inetd
Killed inetd(3005) with signal 1
# /bin/netstat -puta | /bin/grep swat
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 *:swat                  *:*                     LISTEN     1265/inetd
swat
/etc/xinetd.d
/etc/xinetd.d/swat
service swat
{
        disable         = no 
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/swat
#       server_args     = -a 
}
# /etc/init.d/xinetd reload
Reloading internet superserver configuration: xinetd.
# /bin/netstat -puta | /bin/grep swat
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 *:swat                  *:*                     LISTEN     4687/xinetd
$ /usr/bin/apt-cache show ldap-account-manager
Package: ldap-account-manager
Priority: extra
Section: web
Installed-Size: 2208
Maintainer: Roland Gruber <post@rolandgruber.de>
Architecture: all
Version: 0.4.6-2
Depends: php4 | php4-cgi | libapache2-mod-php4, php4-ldap,
apache | apache-ssl | httpd, perl, wwwconfig-common, debconf
Recommends: php4-mhash
Suggests: ldap-server, sudo, php4-mcrypt
Conflicts: php4-apc
Filename: pool/main/l/ldap-account-manager/ldap-account-manager_0.4.6-2_all.deb
Size: 406002
MD5sum: 03bb45d124c8783415631f884c97692e
Description: Webfrontend for managing Unix and Samba accounts in a LDAP directory
 LDAP Account Manager (LAM) runs on an existing webserver. LAM
 supports LDAP connections via SSL and TLS. It uses the
 Samba 2.x or Samba 3 schema and manages user, group and host
 accounts. You can use templates for account creation and use
 multiple configuration profiles. Account information can be
 exported as PDF file. There is also a script
 included which manages quota and homedirectories, you have to
 setup sudo if you want to use it. LAM is translated to
 English, French, German, Hungarian and Japanese.
 .
 Homepage: http://lam.sourceforge.net/


# /usr/bin/apt-get install ldap-account-manager
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes extras:
  apache apache-common apache-utils libapache-mod-php4 libapache-mod-ssl libmm13 php4
  php4-common php4-ldap wwwconfig-common
Paquetes sugeridos:
  apache-doc apache-ssl apache-perl sudo php4-mcrypt php4-pear libapache-mod-ssl-doc
  mysql-client postgresql-client
Paquetes recomendados
  php4-mhash
Se instalarán los siguientes paquetes NUEVOS:
  apache apache-common apache-utils ldap-account-manager libapache-mod-php4 libapache-mod-ssl
  libmm13 php4 php4-common php4-ldap wwwconfig-common
0 actualizados, 11 se instalarán, 0 para eliminar y 2 no actualizados.
Se necesita descargar 0B/3958kB de archivos.
Se utilizarán 11,3MB de espacio de disco adicional después de desempaquetar.
¿Desea continuar? [S/n]
Preconfiguring packages ...
Seleccionando el paquete apache-utils previamente no seleccionado.
(Leyendo la base de datos ...
134049 ficheros y directorios instalados actualmente.)
Desempaquetando apache-utils (de .../apache-utils_1.3.31-6_i386.deb) ...
Seleccionando el paquete apache-common previamente no seleccionado.
Desempaquetando apache-common (de .../apache-common_1.3.31-6_i386.deb) ...
Seleccionando el paquete apache previamente no seleccionado.
Desempaquetando apache (de .../apache_1.3.31-6_i386.deb) ...
Seleccionando el paquete libmm13 previamente no seleccionado.
Desempaquetando libmm13 (de .../libmm13_1.3.0-3_i386.deb) ...
Seleccionando el paquete libapache-mod-ssl previamente no seleccionado.
Desempaquetando libapache-mod-ssl (de .../libapache-mod-ssl_2.8.19-1_i386.deb) ...
Seleccionando el paquete php4-common previamente no seleccionado.
Desempaquetando php4-common (de .../php4-common_4%3a4.3.8-12_i386.deb) ...
Seleccionando el paquete libapache-mod-php4 previamente no seleccionado.
Desempaquetando libapache-mod-php4 (de .../libapache-mod-php4_4%3a4.3.8-12_i386.deb) ...
Seleccionando el paquete php4 previamente no seleccionado.
Desempaquetando php4 (de .../php4_4%3a4.3.8-12_all.deb) ...
Seleccionando el paquete php4-ldap previamente no seleccionado.
Desempaquetando php4-ldap (de .../php4-ldap_4%3a4.3.8-12_i386.deb) ...
Seleccionando el paquete wwwconfig-common previamente no seleccionado.
Desempaquetando wwwconfig-common (de .../wwwconfig-common_0.0.40_all.deb) ...
Seleccionando el paquete ldap-account-manager previamente no seleccionado.
Desempaquetando ldap-account-manager (de .../ldap-account-manager_0.4.6-2_all.deb) ...
Configurando apache-utils (1.3.31-6) ...
Configurando apache-common (1.3.31-6) ...

Configurando apache (1.3.31-6) ...


Creating config file /etc/apache/httpd.conf with new version

Creating config file /etc/apache/srm.conf with new version

Creating config file /etc/apache/access.conf with new version

Creating config file /etc/apache/modules.conf with new version
Starting web server: apache.

Configurando libmm13 (1.3.0-3) ...

Configurando libapache-mod-ssl (2.8.19-1) ...
./snakeoil-ca-rsa.crt ... e52d41d0.0
./ca-bundle.crt ... Skipped
./snakeoil-dsa.crt ... 5d8360e1.0
./snakeoil-rsa.crt ... 82ab5372.0
./snakeoil-ca-dsa.crt ... 0cf14d7d.0

Configurando php4-common (4.3.8-12) ...
Configurando libapache-mod-php4 (4.3.8-12) ...

Configurando php4 (4.3.8-12) ...

Configurando php4-ldap (4.3.8-12) ...


Configurando wwwconfig-common (0.0.40) ...
Configurando ldap-account-manager (0.4.6-2) ...

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
# /usr/sbin/dpkg-reconfigure ldap-account-manager
# /usr/sbin/dpkg-reconfigure apache
# /usr/sbin/dpkg-reconfigure php4-ldap
/etc/ldap-account-manager/apache.conf
# redirect to https when available (thanks omen@descolada.dartmouth.edu)
<IfModule mod_rewrite.c>
    <IfModule mod_ssl.c>
        <Location /lam>
            RewriteEngine on
            RewriteCond %{HTTPS} !=on
            RewriteRule . https://%{HTTP_HOST}%{REQUEST_URI}  [L]
        </Location>
    </IfModule>
</IfModule>
# /etc/init.d/apache reload
Reloading apache configuration.
lamdaemon.pl
# /usr/bin/net getlocalsid
SID for domain TODOSCSI is: S-1-5-21-2817058862-34499604-3382793611
/etc/ldap-account-manager/config.cfg
/home/samba/netlogon/
$ /usr/bin/apt-cache show phpldapadmin
Package: phpldapadmin
Priority: extra
Section: admin
Installed-Size: 1716
Maintainer: Fabio Tranchitella <kobold@kobold.it>
Architecture: all
Version: 0.9.4-9
Depends: apache | httpd, php4-ldap,
php4 (>= 4.1.0) | php4-cgi (>= 4.1.0) | libapache2-mod-php4, debconf (>= 0.2.26)
Filename: pool/main/p/phpldapadmin/phpldapadmin_0.9.4-9_all.deb
Size: 374178
MD5sum: eea7c0c0bc601462e999a5207c530846
Description: Web based interface for administering LDAP servers
 phpLDAPadmin is a web-based LDAP client. It provides easy,
 anywhere-accessible, multi-language administration for your LDAP
 server. Its hierarchical tree-viewer and advanced search functionality
 make it intuitive to browse and administer your LDAP directory. Since it
 is a web application, this LDAP browser works on many platforms, making
 your LDAP server easily manageable from any location.


# /usr/bin/apt-get install phpldapadmin
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes NUEVOS:
  phpldapadmin
0 actualizados, 1 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/374kB de archivos.
Se utilizarán 1757kB de espacio de disco adicional después de desempaquetar.
Preconfiguring packages ...
Seleccionando el paquete phpldapadmin previamente no seleccionado.
(Leyendo la base de datos ...
135022 ficheros y directorios instalados actualmente.)
Desempaquetando phpldapadmin (de .../phpldapadmin_0.9.4-9_all.deb) ...
Configurando phpldapadmin (0.9.4-9) ...
Restarting apache.

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
/etc/phpldapadmin/apache.conf
# redirect to https when available (thanks omen@descolada.dartmouth.edu)
<IfModule mod_rewrite.c>
    <IfModule mod_ssl.c>
        <Location /phpldapadmin>
            RewriteEngine on
            RewriteCond %{HTTPS} !=on
            RewriteRule . https://%{HTTP_HOST}%{REQUEST_URI}  [L]
        </Location>
    </IfModule>
</IfModule>
# /etc/init.d/apache reload
Reloading apache configuration.
/etc/phpldapadmin/config.php
/etc/phpldapadmin/config.php
/var/www/phpldapadmin/config.php
$servers[$i]['name'] = 'TodoSCSI';
$servers[$i]['host'] = 'ldap://gsr.pt';
$servers[$i]['base'] = 'dc=gsr,dc=pt';
$servers[$i]['port'] = 389;
$servers[$i]['auth_type'] = 'session';
$servers[$i]['login_dn'] = 'cn=admin,dc=gsr,dc=pt';
$servers[$i]['tls'] = true;
$servers[$i]['default_hash'] = 'crypt';
$servers[$i]['enable_auto_uid_numbers'] = true;
$servers[$i]['auto_uid_number_mechanism'] = 'search';
$servers[$i]['auto_uid_number_search_base'] = 'ou=people,dc=gsr,dc=pt';
$servers[$i]['auto_uid_number_min'] = 1000;
/etc/phpldapadmin/templates/template_config.php
/var/www/phpldapadmin/templates/template_config.php
template_config.php
--- template_config.php.orig    2004-10-01 18:22:34.000000000 +0200
+++ template_config.php 2004-10-01 22:10:18.000000000 +0200
@@ -101,7 +101,7 @@

 // uncomment to set the base dn of posix groups
 // default is set to the base dn of the server
-//$base_posix_groups="ou=People,dc=example,dc=com";
+$base_posix_groups="ou=groups,dc=gsr,dc=pt"; 



@@ -117,29 +117,30 @@
 ######################################################################################*/

 // path 2 the mkntpwd utility (Customize)
-$mkntpwdCommand = "./templates/creation/mkntpwd";
+$mkntpwdCommand = "/usr/sbin/smbldap-passwd"; 

 // Default domains definition (Customize)
 //   (use `net getlocalsid` on samba server)
 $default_samba3_domains = array();
 $default_samba3_domains[] =
-        array(  'name'   => 'My Samba domain Name',
-                'sid' => 'S-1-5-21-479559372-1547523452-3818884970' );
+        array(  'name'   => 'GSRDOMAIN', 
+                'sid' => 'S-1-5-21-2817058862-34499604-3382793611' ); 

 // The base dn of samba group. (CUSTOMIZE)
-//$samba_base_groups = "ou=Groups,ou=samba,dc=example,dc=org";
+$samba_base_groups = "ou=groups,dc=gsr,dc=pt"; 


 //Definition of built-in local groups
-$built_in_local_groups = array( "S-1-5-32-544" => "Administrators",
-                               "S-1-5-32-545" => "Users",
-                               "S-1-5-32-546" => "Guests",
-                               "S-1-5-32-547" => "Power Users",
-                               "S-1-5-32-548" => "Account Operators",
-                               "S-1-5-32-549" => "Server Operators",
-                               "S-1-5-32-550" => "Print Operators",
-                               "S-1-5-32-551" => "backup Operators",
-                               "S-1-5-32-552" => "Replicator" );
+$built_in_local_groups = array(
+                "S-1-5-21-2817058862-34499604-3382793611-512" => "Administrators", 
+                "S-1-5-21-2817058862-34499604-3382793611-513" => "Users",
+                "S-1-5-21-2817058862-34499604-3382793611-514" => "Guests",
+                "S-1-5-21-2817058862-34499604-3382793611-21007" => "Power Users",
+                "S-1-5-21-2817058862-34499604-3382793611-21009" => "Account Operators",
+                "S-1-5-21-2817058862-34499604-3382793611-21011" => "Server Operators",
+                "S-1-5-21-2817058862-34499604-3382793611-21013" => "Print Operators",
+                "S-1-5-21-2817058862-34499604-3382793611-21015" => "backup Operators",
+                "S-1-5-21-2817058862-34499604-3382793611-21017" => "Replicator" );


 /*######################################################################################
/etc/smbldap-tools/smbldap_bind.conf
/etc/smbldap-tools/smbldap.conf
# /usr/bin/apt-get install smbldap-tools
Leyendo lista de paquetes... Hecho
Creando árbol de dependencias... Hecho
Se instalarán los siguientes paquetes extras:
  libconvert-asn1-perl libcrypt-smbhash-perl libdigest-md4-perl libnet-ldap-perl
Paquetes sugeridos:
  libio-socket-ssl-perl libxml-parser-perl libauthen-sasl-perl libxml-sax-perl
Se instalarán los siguientes paquetes NUEVOS:
  libconvert-asn1-perl libcrypt-smbhash-perl libdigest-md4-perl libnet-ldap-perl smbldap-tools
0 actualizados, 5 se instalarán, 0 para eliminar y 1 no actualizados.
Se necesita descargar 0B/624kB de archivos.
Se utilizarán 1794kB de espacio de disco adicional después de desempaquetar.
¿Desea continuar? [S/n]
Seleccionando el paquete libconvert-asn1-perl previamente no seleccionado.
(Leyendo la base de datos ...
133905 ficheros y directorios instalados actualmente.)
Desempaquetando libconvert-asn1-perl (de .../libconvert-asn1-perl_0.18-1_all.deb) ...
Seleccionando el paquete libdigest-md4-perl previamente no seleccionado.
Desempaquetando libdigest-md4-perl (de .../libdigest-md4-perl_1.1-2_i386.deb) ...
Seleccionando el paquete libnet-ldap-perl previamente no seleccionado.
Desempaquetando libnet-ldap-perl (de .../libnet-ldap-perl_0.3202-2_all.deb) ...
Seleccionando el paquete libcrypt-smbhash-perl previamente no seleccionado.
Desempaquetando libcrypt-smbhash-perl (de .../libcrypt-smbhash-perl_0.02-6_all.deb) ...
Seleccionando el paquete smbldap-tools previamente no seleccionado.
Desempaquetando smbldap-tools (de .../smbldap-tools_0.8.5-1_all.deb) ...
Configurando libconvert-asn1-perl (0.18-1) ...
Configurando libdigest-md4-perl (1.1-2) ...
Configurando libnet-ldap-perl (0.3202-2) ...
Configurando libcrypt-smbhash-perl (0.02-6) ...
Configurando smbldap-tools (0.8.5-1) ...

localepurge: checking system for new locale ...
localepurge: processing locale files ...
localepurge: processing man pages ...
# /usr/bin/apt-cache show smbldap-tools
Package: smbldap-tools
Priority: optional
Section: admin
Installed-Size: 600
Maintainer: Sergio Talens-Oliag <sto@debian.org>
Architecture: all
Version: 0.8.5-1
Depends: perl, libnet-ldap-perl, libcrypt-smbhash-perl
Filename: pool/main/s/smbldap-tools/smbldap-tools_0.8.5-1_all.deb
Size: 291454
MD5sum: 87dd4028958d8ef9f9e4bafdf1b4ae6d
Description: Scripts to manage Unix and Samba accounts stored on LDAP
 Set of scripts to manage data relative to users and groups stored in an LDAP
 server. The tools manage POSIX, shadow and Samba (3.0 series) accounts and
 groups.
 .
 This package is used to add/del/mod users and groups in the Linux
 Samba-OpenLDAP Howto <http://samba.idealx.org/smbldap-howto.en.html>.


$ /usr/bin/dpkg -L smbldap-tools | /bin/grep bin
/usr/sbin/smbldap-groupadd
/usr/sbin/smbldap-groupdel
/usr/sbin/smbldap-groupmod
/usr/sbin/smbldap-groupshow
/usr/sbin/smbldap-passwd
/usr/sbin/smbldap-populate
/usr/sbin/smbldap-useradd
/usr/sbin/smbldap-userdel
/usr/sbin/smbldap-usermod
/usr/sbin/smbldap-usershow
/etc/smbldap-tools
/usr/share/doc/smbldap-tools/examples/
/etc/smbldap-tools
# /bin/cp -v /usr/share/doc/smbldap-tools/examples/smbldap_bind.conf /etc/smbldap-tools/
«/usr/share/doc/smbldap-tools/examples/smbldap_bind.conf» -> «/etc/smbldap-tools/smbldap_bind.conf»
# /bin/zcat -v /usr/share/doc/smbldap-tools/examples/smbldap.conf.gz > /etc/smbldap-tools/smbldap.conf
/usr/share/doc/smbldap-tools/examples/smbldap.conf.gz:   62.8%
/etc/smbldap-tools/smbldap.conf
/etc/smbldap-tools/smbldap_bind.conf
/etc/smbldap-tools/smbldap_bind.conf
masterDN="cn=admin,dc=gsr,dc=pt"
masterPw="**********"
/etc/smbldap-tools/smbldap.conf
SID="S-1-5-21-2817058862-34499604-3382793611"
masterLDAP="gsr.pt"
masterPort="389"
ldapTLS="1"
verify="require"
cafile="/etc/ldap/ssl/cacert.pem"
clientcert="/home/certs/ldap.cliente.cert.pem"
clientkey="/home/certs/ldap.cliente.key.pem"
suffix="dc=gsr,dc=pt"
usersdn="ou=people,${suffix}"
computersdn="ou=machines,${suffix}"
groupsdn="ou=groups,${suffix}"
hash_encrypt="MD5"
userLoginShell="/bin/bash"
userHome="/home/samba/users/%U"
defaultUserGid="1001"
defaultComputerGid="1000"
skeletonDir="/etc/skel"
smb.conf
userSmbHome="\\TODOSCSI\%U"
smb.conf
userProfile="\\TODOSCSI\profiles\%U"
userHomeDrive="H:"
nombreusuario.cmd
userScript=""
mailDomain="gsr.pt"
# /usr/bin/dpkg-reconfigure libapache-mod-ssl
What type of certificate do you want to create?

  1. dummy     (dummy self-signed Snake Oil cert)
  2. test      (test cert signed by Snake Oil CA)
  3. custom    (custom cert signed by own CA)
  4. existing  (existing cert)


Use  dummy     when you are a vendor package maintainer,
     test      when you are an admin but want to do tests only,
     custom    when you are an admin willing to run a real server
     existing  when you are an admin who upgrades a server.

Normally you would choose 2.

your choice: 3
Which algorithm should be used to generate required key(s)?

  1. RSA
  2. DSA

Normally you would choose 1.

your choice: 1
SSL Certificate Generation Utility (mkcert.sh)
Copyright (c) 1998-2000 Ralf S. Engelschall, All Rights Reserved.

Generating custom certificate signed by own CA [CUSTOM]
______________________________________________________________________

STEP 1: Generating RSA private key for CA (1024 bit) [ca.key]
2477870 semi-random bytes loaded
Generating RSA private key, 1024 bit long modulus
.....++++++
..........................................++++++
e is 65537 (0x10001)
______________________________________________________________________

STEP 2: Generating X.509 certificate signing request for CA [ca.csr]
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
1. Country Name             (2 letter code) [XY]:PT
2. State or Province Name   (full name)     [Snake Desert]:Braganca
3. Locality Name            (eg, city)      [Snake Town]:Braganca
4. Organization Name        (eg, company)   [Snake Oil, Ltd]:Companhia GSR
5. Organizational Unit Name (eg, section)   [Certificate Authority]:Servicos web
6. Common Name              (eg, CA name)   [Snake Oil CA]:gsr.pt
7. Email Address            (eg, name@FQDN) [ca@snakeoil.dom]:sergio@gsr.pt
8. Certificate Validity     (days)          [365]: [Enter]
______________________________________________________________________

STEP 3: Generating X.509 certificate for CA signed by itself [ca.crt]
Certificate Version (1 or 3) [3]:3
Signature ok
subject=/C=PT/ST=Braganca/L=Braganca/O=Companhia \
                                  GSR/OU=Servicos web/CN=gsr.pt/emailAddress=sergio@gsr.pt
Getting Private key
Verify: matching certificate & key modulus
Verify: matching certificate signature
/etc/apache/ssl.crt/ca.crt: /C=PT/ST=Braganca/L=Braganca/O=Companhia \
                                  GSR/OU=Servicos web/CN=gsr.pt/emailAddress=sergio@gsr.pt
error 18 at 0 depth lookup:self signed certificate
OK
______________________________________________________________________

STEP 4: Generating RSA private key for SERVER (1024 bit) [server.key]
2477870 semi-random bytes loaded
Generating RSA private key, 1024 bit long modulus
........++++++
......++++++
e is 65537 (0x10001)
______________________________________________________________________

STEP 5: Generating X.509 certificate signing request for SERVER [server.csr]
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
1. Country Name             (2 letter code) [XY]:PT
2. State or Province Name   (full name)     [Snake Desert]:Braganca
3. Locality Name            (eg, city)      [Snake Town]:Braganca
4. Organization Name        (eg, company)   [Snake Oil, Ltd]:GSR Web
5. Organizational Unit Name (eg, section)   [Webserver Team]:Aplicacoes web
6. Common Name              (eg, FQDN)      [www.snakeoil.dom]:gsr.pt
7. Email Address            (eg, name@fqdn) [www@snakeoil.dom]:sergio@gsr.pt
8. Certificate Validity     (days)          [365]:[Enter]
______________________________________________________________________

STEP 6: Generating X.509 certificate signed by own CA [server.crt]
Certificate Version (1 or 3) [3]:3
Signature ok
subject=/C=PT/ST=Braganca/L=Braganca/O=GSR Web/OU=Aplicacoes \
                                       web/CN=gsr.pt/emailAddress=sergio@gsr.pt
Getting CA Private Key
Verify: matching certificate & key modulus
Verify: matching certificate signature
/etc/apache/ssl.crt/server.crt: OK
______________________________________________________________________

STEP 7: Enrypting RSA private key of CA with a pass phrase for security [ca.key]
The contents of the ca.key file (the generated private key) has to be
kept secret. So we strongly recommend you to encrypt the server.key file
with a Triple-DES cipher and a Pass Phrase.
Encrypt the private key now? [Y/n]: n 
Warning, you're using an unencrypted private key.
Please notice this fact and do this on your own risk.
______________________________________________________________________

STEP 8: Enrypting RSA private key of SERVER with a pass phrase for security [server.key]
The contents of the server.key file (the generated private key) has to be
kept secret. So we strongly recommend you to encrypt the server.key file
with a Triple-DES cipher and a Pass Phrase.
Encrypt the private key now? [Y/n]: n 
Warning, you're using an unencrypted RSA private key.
Please notice this fact and do this on your own risk.
______________________________________________________________________

RESULT: CA and Server Certification Files

o  /etc/apache/ssl.key/ca.key
   The PEM-encoded RSA private key file of the CA which you can
   use to sign other servers or clients. KEEP THIS FILE PRIVATE!

o  /etc/apache/ssl.crt/ca.crt
   The PEM-encoded X.509 certificate file of the CA which you use to
   sign other servers or clients. When you sign clients with it (for
   SSL client authentication) you can configure this file with the
   'SSLCACertificateFile' directive.

o  /etc/apache/ssl.key/server.key
   The PEM-encoded RSA private key file of the server which you configure
   with the 'SSLCertificateKeyFile' directive (automatically done
   when you install via APACI). KEEP THIS FILE PRIVATE!

o  /etc/apache/ssl.crt/server.crt
   The PEM-encoded X.509 certificate file of the server which you configure
   with the 'SSLCertificateFile' directive (automatically done
   when you install via APACI).

o  /etc/apache/ssl.csr/server.csr
   The PEM-encoded X.509 certificate signing request of the server file which
   you can send to an official Certificate Authority (CA) in order
   to request a real server certificate (signed by this CA instead
   of our own CA) which later can replace the /etc/apache/ssl.crt/server.crt
   file.

Congratulations that you establish your server with real certificates.

./snakeoil-ca-rsa.crt ... e52d41d0.0
./ca-bundle.crt ... Skipped
./gsr-ca-rsa.crt ... c43c023d.0
./snakeoil-dsa.crt ... 5d8360e1.0
./snakeoil-rsa.crt ... 82ab5372.0
./ca.crt ... 458c23d7.0
./server.crt ... 6219a630.0
./snakeoil-ca-dsa.crt ... 0cf14d7d.0
# /bin/cp -v /usr/share/doc/libapache-mod-ssl/examples/mod-ssl.conf \
/etc/apache/conf.d/mod_ssl-00-global.conf
«/usr/share/doc/libapache-mod-ssl/examples/mod-ssl.conf» -> «/etc/apache/conf.d/mod_ssl-00-global.conf»
# /bin/chmod -v 644 mod_ssl-00-global.conf
el modo de «mod_ssl-00-global.conf» cambia a 0644 (rw-r--r--)
/etc/apache/conf.d/mod_ssl-00-global.conf
Listen   80

SSLSessionCache   none
#SSLSessionCache         dbm:/var/run/mod_ssl_scache
#SSLSessionCacheTimeout  300

#SSLLog /var/log/apache/ssl_engine.log
#SSLLogLevel info
/etc/apache/conf.d/mod_ssl-00-global.conf
/etc/apache/conf.d/vhost.conf
/etc/apache/conf.d/vhost.conf
# /etc/init.d/apache restart
Restarting apache.
Windows Registry Editor Version 5.00

;
; This registry key is needed for a Windows XP Client to join
; and logon to a Samba domain. Note: Samba 2.2.3a contained
; this key in a broken format which did nothing to the registry -
; however XP reported "registry key imported". If in doubt
; check the key by hand with regedit.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
/usr/share/doc/samba-doc/registry/WinXP_SignOrSeal.reg
/etc/pam.d/common-session
/etc/skel
#!/bin/sh
#
# Copyright (C) 2004 Sergio González González <sergio.gonzalez@hispalinux.es>
# 
# Depends on:
#               - ldapsearch
#
# Based on http://jeroen.protheus.com/postfix-courier-ldap-howto.html
# (c) J.Vriesman
#
# and
#
# Based on http://bulma.net/body.phtml?nIdNoticia=2013
# (c) Jesús Roncero Franco
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
#
#
# This script manage the home directories of LDAP users (make the new users home
# directory and delete the non-existent users home directory)



# Password to bind to ldap server
systempass="********"  
# Bind dn
binddn="cn=admin,dc=gsr,dc=pt" 
# Acount leave
accountleave="ou=people,dc=gsr,dc=pt" 
# ldap host
ldaphost="gsr.pt"
# skel directory
skel="/etc/skel/"
# Home leave (without final slash: '/')
homeleave="/home/samba/users"


usernames=`ldapsearch -h $ldaphost -x -w $systempass -D "$binddn" \
                      -b "$accountleave" uid | grep "^[^#]" | grep "^[^dn]" \
                      | grep uid | awk '{ print $2 }'`

# create personal home directories

for username in $usernames
do
  homedirectory=`ldapsearch -h $ldaphost -x -w $systempass -D "$binddn" \
                            -b "$accountleave" "(uid=$username)" homeDirectory \
                            | grep "^[^#]" | grep homeDirectory \
                            | awk '{ print $2 }'`

  group=`ldapsearch -h $ldaphost -x -w $systempass -D "$binddn" \
                    -b "$accountleave" "(uid=$username)" gidNumber \
                    | grep "^[^#]" | grep gidNumber \
                    | awk '{ print $2 }'`

  if [ ! -d $homedirectory ] && [ ! -z $homedirectory ]
  then

    cp -a $skel $homedirectory
    chown -R $username.$group $homedirectory
  fi

done

# delete personal home directories

for username in `ls $homeleave`
do
  name=`ldapsearch -h $ldaphost -x -w $systempass -D "$binddn" \
                   -b "$accountleave" "(homeDirectory=$homeleave/$username)" uid \
                   | grep "^[^#]" | grep "uid:" | awk '{ print $2 }'`

  if [ -z $name ]
  then
    rm -rf $homeleave/$username
  fi
done
/usr/share/doc/bash/examples/scripts.v2/lowercase
#! /bin/bash
#
# original from
# @(#) lowercase.ksh 1.0 92/10/08
# 92/10/08 john h. dubois iii (john@armory.com)
#
# conversion to bash v2 syntax done by Chet Ramey
#
# Convert to uppercase by Sergio González González
#

Usage="Usage: $name file ..."
phelp()
{
echo "$name: change filenames to upper case.
$Usage
Each file is moved to a name with the same directory component, if any,
and with a filename component that is the same as the original but with
any lower case letters changed to upper case."
}

name=${0##*/}

while getopts "h" opt; do
	case "$opt" in
	h)	phelp; exit 0;;
	*)	echo "$Usage" 1>&2; exit 2;;
	esac
done

shift $((OPTIND - 1))

for file; do
    filename=${file##*/}
    case "$file" in
    */*)    dirname=${file%/*} ;;
    *)    dirname=. ;;
    esac
    nf=$(echo $filename | tr a-z A-Z)
    newname="${dirname}/${nf}"
    if [ "$nf" != "$filename" ]; then
	mv "$file" "$newname"
	echo "$0: $file -> $newname"
    else
	echo "$0: $file not changed."
    fi
done
/usr/share/cups/drivers
/usr/share/cups/drivers
#!/bin/bash

ARCHIVOS="ADFONTS.MFM
ADOBEPS4.DRV
ADOBEPS4.HLP
DEFPRTR2.PPD
ICONLIB.DLL
PSMON.DLL
ADOBEPS5.DLL
ADOBEPSU.DLL
ADOBEPSU.HLP"

for x in $ARCHIVOS
do
	find `pwd` -name "$x" -exec /bin/cp -vf {} /usr/share/cups/drivers \;
done

chmod -v 644 /usr/share/cups/drivers/*
$ /usr/sbin/cupsaddsmb -v -U root -a
Password for root required to access localhost via SAMBA: [Clave]

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05d8c7eb4b \
                           W32X86/InyeccionBN.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05d8c7eb4b as \W32X86/InyeccionBN.ppd \
                             (1571,5 kb/s) (average 1571,5 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                             (3041,1 kb/s) (average 2963,8 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \
                             (2646,8 kb/s) (average 2817,9 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                             (3475,0 kb/s) (average 2832,5 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows NT x86" \
                           "InyeccionBN:cupsdrv5.dll:InyeccionBN.ppd:\
                            cupsui5.dll:cups5.hlp:NULL:RAW:NULL"'
Printer Driver InyeccionBN successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05d8c7eb4b \
                           WIN40/InyeccionBN.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05d8c7eb4b as \WIN40/InyeccionBN.PPD \
                            (1571,5 kb/s) (average 1571,5 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                            (3722,4 kb/s) (average 3653,5 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                            (4838,3 kb/s) (average 4396,1 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                            (3019,2 kb/s) (average 4161,2 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                            (4389,2 kb/s) (average 4162,5 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                            (1774,8 kb/s) (average 3891,2 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                            (1098,0 kb/s) (average 3662,5 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "InyeccionBN:ADOBEPS4.DRV:InyeccionBN.PPD:NULL:\
                            ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,\
                            InyeccionBN.PPD,ADOBEPS4.HLP,PSMON.DLL, \
                            ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
Printer Driver InyeccionBN successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver InyeccionBN InyeccionBN'
Succesfully set InyeccionBN to driver InyeccionBN.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05d92939de \
                           W32X86/InyeccionColor.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05d92939de as \W32X86/InyeccionColor.ppd \
                                (982,2 kb/s) (average 982,2 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                              (3146,0 kb/s) (average 2963,8 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \ 
                              (2713,9 kb/s) (average 2850,3 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                              (2316,7 kb/s) (average 2832,5 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows NT x86" \
                           "InyeccionColor:cupsdrv5.dll:\
                            InyeccionColor.ppd:cupsui5.dll:\
                            cups5.hlp:NULL:RAW:NULL"'
Printer Driver InyeccionColor successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05d92939de \
                           WIN40/InyeccionColor.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05d92939de as \WIN40/InyeccionColor.PPD \
                              (1964,3 kb/s) (average 1964,4 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                              (4043,8 kb/s) (average 3985,6 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                              (4432,3 kb/s) (average 4283,4 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                              (2917,5 kb/s) (average 4048,7 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                              (2633,5 kb/s) (average 4035,2 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                              (1831,1 kb/s) (average 3798,2 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                              (5090,9 kb/s) (average 3822,0 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "InyeccionColor:ADOBEPS4.DRV:InyeccionColor.PPD:\
                            NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,\
                            InyeccionColor.PPD,ADOBEPS4.HLP,PSMON.DLL,\
                            ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
Printer Driver InyeccionColor successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver InyeccionColor InyeccionColor'
Succesfully set InyeccionColor to driver InyeccionColor.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05d96c0f3a \
                           W32X86/LaserBN.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05d96c0f3a as \W32X86/LaserBN.ppd \
                           (1571,5 kb/s) (average 1571,5 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                           (2975,0 kb/s) (average 2902,6 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \
                           (2614,6 kb/s) (average 2770,7 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                           (3475,0 kb/s) (average 2786,1 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows NT x86" \
                           "LaserBN:cupsdrv5.dll:LaserBN.ppd:\
                            cupsui5.dll:cups5.hlp:NULL:RAW:NULL"'
Printer Driver LaserBN successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05d96c0f3a \
                           WIN40/LaserBN.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05d96c0f3a as \WIN40/LaserBN.PPD \
                           (1964,3 kb/s) (average 1964,4 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                           (4043,8 kb/s) (average 3985,6 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                           (4282,5 kb/s) (average 4185,8 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                           (2596,6 kb/s) (average 3890,9 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                           (2633,5 kb/s) (average 3879,4 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                           (1774,8 kb/s) (average 3654,8 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                           (1076,9 kb/s) (average 3452,0 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "LaserBN:ADOBEPS4.DRV:LaserBN.PPD:NULL:\
                            ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,\
                            LaserBN.PPD,ADOBEPS4.HLP,PSMON.DLL,\
                            ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
Printer Driver LaserBN successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver LaserBN LaserBN'
Succesfully set LaserBN to driver LaserBN.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05d9b3e1a0 \
                           W32X86/LaserColor.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05d9b3e1a0 as \W32X86/LaserColor.ppd \
                           (1309,5 kb/s) (average 1309,6 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                           (2709,9 kb/s) (average 2631,4 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \
                           (2614,6 kb/s) (average 2624,1 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                           (3475,0 kb/s) (average 2641,7 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows NT x86" \
                           "LaserColor:cupsdrv5.dll:LaserColor.ppd:\
                            cupsui5.dll:cups5.hlp:NULL:RAW:NULL"'
Printer Driver LaserColor successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05d9b3e1a0 \
                           WIN40/LaserColor.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05d9b3e1a0 as \WIN40/LaserColor.PPD \
                          (1964,3 kb/s) (average 1964,4 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                          (4043,8 kb/s) (average 3985,6 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                          (4694,9 kb/s) (average 4449,3 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                          (2950,6 kb/s) (average 4186,1 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                          (3291,9 kb/s) (average 4179,0 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                          (1860,6 kb/s) (average 3925,5 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                          (5090,9 kb/s) (average 3947,7 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "LaserColor:ADOBEPS4.DRV:LaserColor.PPD:\
                            NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:\
                            ADOBEPS4.DRV,LaserColor.PPD,ADOBEPS4.HLP,\
                            PSMON.DLL,ADFONTS.MFM,DEFPRTR2.PPD,\
                            ICONLIB.DLL"'
Printer Driver LaserColor successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver LaserColor LaserColor'
Succesfully set LaserColor to driver LaserColor.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05d9f9895e \
                           W32X86/Multifuncion.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05d9f9895e as \W32X86/Multifuncion.ppd \
                              (982,2 kb/s) (average 982,2 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                            (3041,1 kb/s) (average 2873,0 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \
                            (2821,0 kb/s) (average 2850,3 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                            (3475,0 kb/s) (average 2864,3 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows NT x86" \
                           "Multifuncion:cupsdrv5.dll:\
                            Multifuncion.ppd:cupsui5.dll:\
                            cups5.hlp:NULL:RAW:NULL"'
Printer Driver Multifuncion successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05d9f9895e \
                           WIN40/Multifuncion.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05d9f9895e as \WIN40/Multifuncion.PPD \
                           (1964,3 kb/s) (average 1964,4 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                           (3747,2 kb/s) (average 3700,9 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                           (4932,4 kb/s) (average 4471,0 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                           (2950,6 kb/s) (average 4202,8 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                           (2633,5 kb/s) (average 4187,3 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                           (1538,1 kb/s) (average 3844,1 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                           (1037,0 kb/s) (average 3604,7 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "Multifuncion:ADOBEPS4.DRV:Multifuncion.PPD:\
                            NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:\
                            ADOBEPS4.DRV,Multifuncion.PPD,ADOBEPS4.HLP,\
                            PSMON.DLL,ADFONTS.MFM,DEFPRTR2.PPD,\
                            ICONLIB.DLL"'
Printer Driver Multifuncion successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver Multifuncion Multifuncion'
Succesfully set Multifuncion to driver Multifuncion.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05da3c1a90 \
                           W32X86/Plotter.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05da3c1a90 as \W32X86/Plotter.ppd \
                        (1964,3 kb/s) (average 1964,4 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                        (2943,0 kb/s) (average 2902,6 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \
                        (3633,8 kb/s) (average 3179,2 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                        (2780,0 kb/s) (average 3166,8 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                        -c 'adddriver "Windows NT x86" \
                        "Plotter:cupsdrv5.dll:Plotter.ppd:\
                         cupsui5.dll:cups5.hlp:NULL:RAW:NULL"'
Printer Driver Plotter successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05da3c1a90 \
                           WIN40/Plotter.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05da3c1a90 as \WIN40/Plotter.PPD \
                      (1571,5 kb/s) (average 1571,5 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                      (3557,5 kb/s) (average 3496,6 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                      (4712,4 kb/s) (average 4253,6 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                      (3054,8 kb/s) (average 4056,5 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                      (2194,6 kb/s) (average 4035,2 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                      (1860,6 kb/s) (average 3804,7 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                      (848,5 kb/s) (average 3505,0 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "Plotter:ADOBEPS4.DRV:Plotter.PPD:NULL:\
                            ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,\
                            Plotter.PPD,ADOBEPS4.HLP,PSMON.DLL,\
                            ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
Printer Driver Plotter successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver Plotter Plotter'
Succesfully set Plotter to driver Plotter.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir W32X86;put /var/tmp/40d05da9be1dc \
                           W32X86/Sublimacion.ppd;put \
                           /usr/share/cups/drivers/cupsdrv5.dll \
                           W32X86/cupsdrv5.dll;put \
                           /usr/share/cups/drivers/cupsui5.dll \
                           W32X86/cupsui5.dll;put \
                           /usr/share/cups/drivers/cups5.hlp \
                           W32X86/cups5.hlp'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/tmp/40d05da9be1dc as \W32X86/Sublimacion.ppd \
                            (1122,5 kb/s) (average 1122,5 kb/s)
putting file /usr/share/cups/drivers/cupsdrv5.dll as \W32X86/cupsdrv5.dll \
                            (4414,5 kb/s) (average 4080,5 kb/s)
putting file /usr/share/cups/drivers/cupsui5.dll as \W32X86/cupsui5.dll \
                            (5229,1 kb/s) (average 4508,6 kb/s)
putting file /usr/share/cups/drivers/cups5.hlp as \W32X86/cups5.hlp \
                            (3475,0 kb/s) (average 4472,4 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows NT x86" \
                           "Sublimacion:cupsdrv5.dll:Sublimacion.ppd:\
                            cupsui5.dll:cups5.hlp:NULL:RAW:NULL"'
Printer Driver Sublimacion successfully installed.

Running command: smbclient //localhost/print\$ -N -U'root%1' \
                           -c 'mkdir WIN40;put /var/tmp/40d05da9be1dc \
                           WIN40/Sublimacion.PPD;put \
                           /usr/share/cups/drivers/ADFONTS.MFM \
                           WIN40/ADFONTS.MFM;put \
                           /usr/share/cups/drivers/ADOBEPS4.DRV \
                           WIN40/ADOBEPS4.DRV;put \
                           /usr/share/cups/drivers/ADOBEPS4.HLP \
                           WIN40/ADOBEPS4.HLP;put \
                           /usr/share/cups/drivers/DEFPRTR2.PPD \
                           WIN40/DEFPRTR2.PPD;put \
                           /usr/share/cups/drivers/ICONLIB.DLL \
                           WIN40/ICONLIB.DLL;put \
                           /usr/share/cups/drivers/PSMON.DLL \
                           WIN40/PSMON.DLL;'
Domain=[GSRDOMAIN] OS=[Unix] Server=[Samba 3.0.7-Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/tmp/40d05da9be1dc as \WIN40/Sublimacion.PPD \
                          (1571,5 kb/s) (average 1571,5 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM \
                          (5620,8 kb/s) (average 5428,0 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV \
                          (5174,0 kb/s) (average 5250,2 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP \
                          (2297,8 kb/s) (average 4529,6 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD \
                          (731,5 kb/s) (average 4387,5 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL \
                          (5015,6 kb/s) (average 4416,2 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL \
                          (3294,1 kb/s) (average 4379,6 kb/s)

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'adddriver "Windows 4.0" \
                           "Sublimacion:ADOBEPS4.DRV:Sublimacion.PPD:\
                            NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,\
                            Sublimacion.PPD,ADOBEPS4.HLP,PSMON.DLL,\
                            ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
Printer Driver Sublimacion successfully installed.

Running command: rpcclient localhost -N -U'root%1' \
                           -c 'setdriver Sublimacion Sublimacion'
Succesfully set Sublimacion to driver Sublimacion.
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
/etc/ldap/slapd.conf
/etc/ldap/ldap.conf
/etc/default/slapd
/etc/nsswitch.conf
/etc/pam_ldap.conf
/etc/libnss-ldap.conf
/etc/pamd.d/common-account
/etc/pamd.d/common-auth
/etc/pamd.d/common-password
/etc/pamd.d/common-session
/etc/nscd.conf
/etc/default/samba
/etc/samba/smb.conf
/etc/samba/smb.conf
/etc/cups/client.conf
/etc/cups/cupsd.conf
/etc/pykota/pykota.conf
/etc/pykota/pykotadmin.conf
/var/www/phpldapadmin/config.php
/var/www/phpldapadmin/templates/template_config.php
/etc/smbldap-tools/smbldap.conf
/etc/smbldap-tools/smbldap_bind.conf
/etc/apache/conf.d/mod_ssl-00-global.conf
/etc/apache/conf.d/vhost.conf
/etc/hosts.allow
/etc/hosts.deny
# Copyright 1998-2003 The OpenLDAP Foundation,  All Rights Reserved.
# 	Restrictions apply, see COPYRIGHT and LICENSE files.
# Usage: configure [options] [host]
# Options: [defaults in brackets after descriptions]
# Configuration:
#   --cache-file=FILE       cache test results in FILE
#   --help                  print this message
#   --no-create             do not create output files
#   --quiet, --silent       do not print `checking...' messages
#   --version               print the version of autoconf that created configure
# Directory and file names:
#   --prefix=PREFIX         install architecture-independent files in PREFIX
#                           [/usr/local]
--prefix=/usr
#   --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
#                           [same as prefix]
#   --bindir=DIR            user executables in DIR [EPREFIX/bin]
#   --sbindir=DIR           system admin executables in DIR [EPREFIX/sbin]
#   --libexecdir=DIR        program executables in DIR [EPREFIX/libexec]
--libexecdir='${prefix}/lib'
#   --datadir=DIR           read-only architecture-independent data in DIR
#                           [PREFIX/share]
#   --sysconfdir=DIR        read-only single-machine data in DIR [PREFIX/etc]
--sysconfdir=/etc
#   --sharedstatedir=DIR    modifiable architecture-independent data in DIR
#                           [PREFIX/com]
#   --localstatedir=DIR     modifiable single-machine data in DIR [PREFIX/var]
--localstatedir=/var/run
#   --libdir=DIR            object code libraries in DIR [EPREFIX/lib]
#   --includedir=DIR        C header files in DIR [PREFIX/include]
#   --oldincludedir=DIR     C header files for non-gcc in DIR [/usr/include]
#   --infodir=DIR           info documentation in DIR [PREFIX/info]
#   --mandir=DIR            man documentation in DIR [PREFIX/man]
--mandir='${prefix}/share/man'
#   --srcdir=DIR            find the sources in DIR [configure dir or ..]
#   --program-prefix=PREFIX prepend PREFIX to installed program names
#   --program-suffix=SUFFIX append SUFFIX to installed program names
#   --program-transform-name=PROGRAM
#                           run sed PROGRAM on installed program names
# Host type:
#   --build=BUILD           configure for building on BUILD [BUILD=HOST]
#   --host=HOST             configure for HOST [guessed]
#   --target=TARGET         configure for TARGET [TARGET=HOST]
# Features and packages:
#   --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
#   --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
#   --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
#   --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
#   --x-includes=DIR        X include files are in DIR
#   --x-libraries=DIR       X library files are in DIR
# --enable and --with options recognized:
#   --with-subdir=DIR       change default subdirectory used for installs
--with-subdir=ldap
#   --enable-debug 	  enable debugging [yes]
## Our users might want to use the -d option
--enable-debug
#   --enable-syslog	  enable syslog support [auto]
--enable-syslog
#   --enable-proctitle	  enable proctitle support [yes]
--enable-proctitle
#   --enable-cache	  enable caching (experimental) [no]
#--enable-cache
#   --enable-referrals	  enable LDAPv2+ Referrals (experimental) [no]
## Better support this standard ldap feature
--enable-referrals
#   --enable-ipv6 	  enable IPv6 support [auto]
## Debian tries to fully support IPv6 so we need this
--enable-ipv6
#   --enable-local	  enable AF_LOCAL (AF_UNIX) socket support [auto]
--enable-local
#   --enable-x-compile	  enable cross compiling [no]
#   --with-cyrus-sasl	  with Cyrus SASL support [auto]
--with-cyrus-sasl
#   --with-fetch		  with freeBSD fetch URL support [auto]
#   --with-kerberos	  with Kerberos support [auto]
#   --with-readline	  with readline support [auto]
--with-readline
#   --with-threads	  with threads [auto]
--with-threads
#   --with-tls		  with TLS/SSL support [auto]
--with-tls
#   --with-yielding-select  with implicitly yielding select [auto]
# 
# SLAPD (Standalone LDAP Daemon) Options:
#   --enable-slapd	  enable building slapd [yes]
--enable-slapd
#     --enable-aci	  enable per-object ACIs (experimental) [no]
#--enable-aci
#     --enable-cleartext	  enable cleartext passwords [yes]
--enable-cleartext
#     --enable-crypt	  enable crypt(3) passwords [no]
--enable-crypt
#     --enable-dynamic	  enable linking built binaries with dynamic libs [no]
--enable-dynamic
#     --enable-kpasswd	  enable Kerberos password verification [no]
#     --enable-lmpasswd	  enable LAN Manager passwords [no]
#     --enable-spasswd	  enable (Cyrus) SASL password verification [no]
--enable-spasswd
#     --enable-modules	  enable dynamic module support [no]
--enable-modules
#     --enable-phonetic	  enable phonetic/soundex [no]
--enable-phonetic
#     --enable-rewrite	  enable DN rewriting in back-ldap and back-meta [no]
--enable-rewrite
#     --enable-rlookups	  enable reverse lookups of client hostnames [no]
--enable-rlookups
#     --enable-slp          enable SLPv2 support [no]
--enable-slp
#     --enable-wrappers	  enable tcp wrapper support [no]
--enable-wrappers
#     --enable-bdb	  enable Berkeley DB backend [yes]
--enable-bdb
#     --with-bdb-module     module type static|dynamic [static]
--with-bdb-module=dynamic
#     --enable-dnssrv	  enable dnssrv backend [no]
--enable-dnssrv
#     --with-dnssrv-module  module type static|dynamic [static]
--with-dnssrv-module=dynamic
#     --enable-ldap	  enable ldap backend [no]
--enable-ldap
#     --with-ldap-module	  module type static|dynamic [static]
--with-ldap-module=dynamic
#     --enable-ldbm	  enable ldbm backend [no]
--enable-ldbm
#     --with-ldbm-api       with LDBM API auto|berkeley|bcompat|mdbm|gdbm [auto]
--with-ldbm-api=berkeley
#     --with-ldbm-module	  module type static|dynamic [static]
--with-ldbm-module=dynamic
#     --with-ldbm-type	  use LDBM type auto|btree|hash [auto]
#     --enable-meta	  enable metadirectory backend [no]
--enable-meta
#     --with-meta-module	  module type static|dynamic [static]
--with-meta-module=dynamic
#     --enable-monitor	  enable monitor backend [no]
--enable-monitor
#     --with-monitor-module module type static|dynamic [static]
--with-monitor-module=dynamic
#     --enable-null	  enable null backend [no]
--enable-null
#     --with-null-module	  module type static|dynamic [static]
--with-null-module=dynamic
#     --enable-passwd	  enable passwd backend [no]
--enable-passwd
#     --with-passwd-module  module type static|dynamic [static]
--with-passwd-module=dynamic
#     --enable-perl	  enable perl backend [no]
## This does not currently build with Perl 5.8 - disable it
--disable-perl
#     --with-perl-module	  module type static|dynamic [static]
#     --enable-shell	  enable shell backend [no]
--enable-shell
#     --with-shell-module	  module type static|dynamic [static]
--with-shell-module=dynamic
#     --enable-sql	  enable sql backend [no]
--enable-sql
#     --with-sql-module	  module type static|dynamic [static]
--with-sql-module=dynamic
# 
# SLURPD (Replication Daemon) Options:
#   --enable-slurpd	  enable building slurpd [auto]
--enable-slurpd
# 
# Library Generation & Linking Options
#   --enable-static[=PKGS]  build static libraries [default=yes]
#   --enable-shared[=PKGS]  build shared libraries [default=yes]
--enable-shared
#   --enable-fast-install[=PKGS]  optimize for fast installation [default=yes]
#   --with-gnu-ld           assume the C compiler uses GNU ld [default=no]
#   --disable-libtool-lock  avoid locking (might break parallel builds)
#   --with-pic              try to use only PIC/non-PIC objects [default=use both]
# 
# See INSTALL file for further details.
/etc/ldap/slapd.conf
# This is the main slapd configuration file. See slapd.conf(5) for more
# info on the configuration options.

#######################################################################
# Global Directives:

# Features to permit
#allow bind_v2

# Schema and objectClass definitions
include     /etc/ldap/schema/core.schema
include     /etc/ldap/schema/cosine.schema
include     /etc/ldap/schema/nis.schema
include     /etc/ldap/schema/inetorgperson.schema
include     /etc/ldap/schema/openldap.schema
include     /etc/ldap/schema/misc.schema
include     /etc/ldap/schema/samba.schema
include     /etc/ldap/schema/pykota.schema

# Schema check allows for forcing entries to
# match schemas for their objectClasses's
schemacheck  on

# Where the pid file is put. The init.d script
# will not stop the server if you change this.
pidfile      /var/run/slapd/slapd.pid

# List of arguments that were passed to the server
argsfile     /var/run/slapd.args

# Read slapd.conf(5) for possible values
loglevel     -1

# Where the dynamically loaded modules are stored
modulepath  /usr/lib/ldap
moduleload  back_ldbm

#######################################################################
# Specific Backend Directives for ldbm:
# Backend specific directives apply to this backend until another
# 'backend' directive occurs
backend     ldbm

#######################################################################
# Specific Backend Directives for 'other':
# Backend specific directives apply to this backend until another
# 'backend' directive occurs
#backend    <other>

#######################################################################
# Specific Directives for database #1, of type ldbm:
# Database specific directives apply to this databasse until another
# 'database' directive occurs
database    ldbm

# The base of your directory in database #1
suffix      "dc=gsr,dc=pt"

# Where the database file are physically stored for database #1
directory   "/var/lib/ldap"

# Indexing options for database #1
#
# Requerido por OpenLDAP
index objectclass   eq

index default       sub
index cn            pres,sub,eq
index sn            pres,sub,eq
index mail          eq,subinitial
index givenname     eq,subinitial

# Requerido para soportar pdb_getsampwnam
index uid           pres,sub,eq

# Requerido para soportar pdb_getsambapwrid()
index displayName   pres,sub,eq

# Descomente las siguientes líneas si está almacenando entradas
# posixAccount y posixGroup en el directorio
index uidNumber     eq
index gidNumber     eq
index memberUid     eq

# Samba 3.*
index sambaSID              eq
index sambaPrimaryGroupSID  eq
index sambaDomainName       eq

# PyKota
index pykotaUserName        pres,eq,sub
index pykotaGroupName       pres,eq,sub
index pykotaPrinterName     pres,eq,sub
index pykotaLastJobIdent    eq

# Save the time that the entry gets modified, for database #1
lastmod       on

# Where to store the replica logs for database #1
# replogfile     /var/lib/ldap/replog

# The userPassword by default can be changed
# by the entry owning it if they are authenticated.
# Others should not be able to see it, except the
# admin entry below
# These access lines apply to database #1 only
access to attribute=userPassword
    by dn="cn=admin,dc=gsr,dc=pt" write
    by dn="cn=readadmin,dc=gsr,dc=pt" read
    by dn="cn=pykotaadmin,dc=gsr,dc=pt" write
    by dn="cn=pykotauser,dc=gsr,dc=pt" read
    by self write
    by anonymous auth
    by * none

# allow the "ldap admin dn" access, but deny everyone else
# (Samba related)
access to attribute=sambaLMPassword,sambaNTPassword
    by dn="cn=admin,dc=gsr,dc=pt" write
    by dn="cn=readadmin,dc=gsr,dc=pt" read
    by dn="cn=pykotaadmin,dc=gsr,dc=pt" write
    by dn="cn=pykotauser,dc=gsr,dc=pt" read
    by * none

# Ensure read access to the base for things like
# supportedSASLMechanisms.  Without this you may
# have problems with SASL not knowing what
# mechanisms are available and the like.
# Note that this is covered by the 'access to *'
# ACL below too but if you change that as people
# are wont to do you'll still need this if you
# want SASL (and possible other things) to work 
# happily.
access to dn.base="" by * read

# The admin dn has full write access, everyone else
# can read everything.
access to *
    by dn="cn=admin,dc=gsr,dc=pt" write
    by dn="cn=readadmin,dc=gsr,dc=pt" read
    by dn="cn=pykotaadmin,dc=gsr,dc=pt" write
    by dn="cn=pykotauser,dc=gsr,dc=pt" read
    by self write
    by users read
    by anonymous auth


# For Netscape Roaming support, each user gets a roaming
# profile for which they have write access to
#access to dn=".*,ou=Roaming,o=morsnet"
#        by dn="cn=admin,dc=gsr,dc=pt" write
#        by dnattr=owner write

# User Limits
limits dn="cn=pykotauser,dc=gsr,dc=pt" size.soft=-1 size.hard=soft
limits dn="cn=pykotaadmin,dc=gsr,dc=pt" size.soft=-1 size.hard=soft

# CA signed certificate and server cert entries: 
 
TLSCipherSuite HIGH:MEDIUM:+SSLv2 
TLSCACertificateFile /etc/ldap/ssl/cacert.pem
TLSCertificateFile /etc/ldap/ssl/certs/servidorcert.pem 
TLSCertificateKeyFile /etc/ldap/ssl/private/servidorkey.pem
 
# Use the following if client authentication is required 
TLSVerifyClient demand 
# ... or not desired at all 
#TLSVerifyClient try
#TLSVerifyClient allow
#TLSVerifyClient never

#TLSCipherSuite ALL

#######################################################################
# Specific Directives for database #2, of type 'other' (can be ldbm too):
# Database specific directives apply to this databasse until another
# 'database' directive occurs
#database        <other>

# The base of your directory for database #2
#suffix		"dc=debian,dc=org"
/etc/ldap/ldap.conf
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $
#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

HOST	gsr.pt
BASE	dc=gsr, dc=pt
PORT	636

TLS_CACERT /etc/ldap/ssl/cacert.pem 
TLS_REQCERT demand
/etc/default/slapd
# Default location of the slapd.conf file
SLAPD_CONF=

# System account to run the slapd server under. If empty the server
# will run as root.
SLAPD_USER="slapd"

# System group to run the slapd server under. If empty the server will
# run in the primary group of its user.
SLAPD_GROUP="slapd"

# Path to the pid file of the slapd server. If not set the init.d script
# will try to figure it out from $SLAPD_CONF (/etc/ldap/slapd.conf)
SLAPD_PIDFILE=

# Configure if the slurpd daemon should be started. Possible values: 
# - yes:   Always start slurpd
# - no:    Never start slurpd
# - auto:  Start slurpd if a replica option is found in slapd.conf (default)
SLURPD_START=auto

# slapd normally serves ldap only on all TCP-ports 389. slapd can also
# service requests on TCP-port 636 (ldaps) and requests via unix
# sockets.
SLAPD_SERVICES="ldap://gsr.pt:389/ ldaps://gsr.pt:636/"

# Additional options to pass to slapd and slurpd
SLAPD_OPTIONS=""
SLURPD_OPTIONS=""
/etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         compat ldap
group:          compat ldap
shadow:         compat ldap

hosts:          files ldap dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis
/etc/pam_ldap.conf
###DEBCONF###
# the configuration of this file will be done by debconf as long as the
# first line of the file says '###DEBCONF###'
#
# you should use dpkg-reconfigure to configure this file
#
# @(#)$Id: ldap.conf,v 1.28 2003/05/29 13:01:04 lukeh Exp $
#
# This is the configuration file for the LDAP nameservice
# switch library and the LDAP PAM module.
#
# PADL Software
# http://www.padl.com
#

# Your LDAP server. Must be resolvable without using LDAP.
# Multiple hosts may be specified, each separated by a 
# space. How long nss_ldap takes to failover depends on
# whether your LDAP client library supports configurable
# network or connect timeouts (see bind_timelimit).
host gsr.pt

# The distinguished name of the search base.
base dc=gsr,dc=pt

# Another way to specify your LDAP server is to provide an
# uri with the server name. This allows to use
# Unix Domain Sockets to connect to a local LDAP Server.
#uri ldap://127.0.0.1/
#uri ldaps://gsr.pt/   
#uri ldapi://%2fvar%2frun%2fldapi_sock/
# Note: %2f encodes the '/' used as directory separator

# The LDAP version to use (defaults to 3
# if supported by client library)
ldap_version 3

# The distinguished name to bind to the server with.
# Optional: default is to bind anonymously.
binddn cn=readadmin,dc=gsr,dc=pt

# The credentials to bind with. 
# Optional: default is no credential.
bindpw 1

# The distinguished name to bind to the server with
# if the effective user ID is root. Password is
# stored in /etc/ldap.secret (mode 600)
rootbinddn cn=admin,dc=gsr,dc=pt

# The port.
# Optional: default is 389.
#port 389

# The search scope.
#scope sub
#scope one
#scope base

# Search timelimit
#timelimit 30

# Bind timelimit
#bind_timelimit 30

# Idle timelimit; client will close connections
# (nss_ldap only) if the server has not been contacted
# for the number of seconds specified below.
#idle_timelimit 3600

# Filter to AND with uid=%s
#pam_filter objectclass=account

# The user ID attribute (defaults to uid)
#pam_login_attribute uid

# Search the root DSE for the password policy (works
# with Netscape Directory Server)
#pam_lookup_policy yes

# Check the 'host' attribute for access control
# Default is no; if set to yes, and user has no
# value for the host attribute, and pam_ldap is
# configured for account management (authorization)
# then the user will not be allowed to login.
#pam_check_host_attr yes

# Check the 'authorizedService' attribute for access
# control
# Default is no; if set to yes, and the user has no
# value for the authorizedService attribute, and
# pam_ldap is configured for account management
# (authorization) then the user will not be allowed
# to login.
#pam_check_service_attr yes

# Group to enforce membership of
#pam_groupdn cn=PAM,ou=Groups,dc=padl,dc=com

# Group member attribute
#pam_member_attribute uniquemember

# Specify a minium or maximum UID number allowed
#pam_min_uid 0
#pam_max_uid 0

# Template login attribute, default template user
# (can be overriden by value of former attribute
# in user's entry)
#pam_login_attribute userPrincipalName
#pam_template_login_attribute uid
#pam_template_login nobody

# HEADS UP: the pam_crypt, pam_nds_passwd,
# and pam_ad_passwd options are no
# longer supported.

# Do not hash the password at all; presume
# the directory server will do it, if
# necessary. This is the default.
pam_password exop

# Hash password locally; required for University of
# Michigan LDAP server, and works with Netscape
# Directory Server if you're using the UNIX-Crypt
# hash mechanism and not using the NT Synchronization
# service. 
#pam_password crypt

# Remove old password first, then update in
# cleartext. Necessary for use with Novell
# Directory Services (NDS)
#pam_password nds

# Update Active Directory password, by
# creating Unicode password and updating
# unicodePwd attribute.
#pam_password ad

# Use the OpenLDAP password change
# extended operation to update the password.
#pam_password exop

# Redirect users to a URL or somesuch on password
# changes.
#pam_password_prohibit_message Please visit http://internal to change your password.

# RFC2307bis naming contexts
# Syntax:
# nss_base_XXX		base?scope?filter
# where scope is {base,one,sub}
# and filter is a filter to be &'d with the
# default filter.
# You can omit the suffix eg:
# nss_base_passwd	ou=People,
# to append the default base DN but this
# may incur a small performance impact.
#nss_base_passwd	ou=People,dc=padl,dc=com?one
#nss_base_shadow	ou=People,dc=padl,dc=com?one
#nss_base_group		ou=Group,dc=padl,dc=com?one
#nss_base_hosts		ou=Hosts,dc=padl,dc=com?one
#nss_base_services	ou=Services,dc=padl,dc=com?one
#nss_base_networks	ou=Networks,dc=padl,dc=com?one
#nss_base_protocols	ou=Protocols,dc=padl,dc=com?one
#nss_base_rpc		ou=Rpc,dc=padl,dc=com?one
#nss_base_ethers	ou=Ethers,dc=padl,dc=com?one
#nss_base_netmasks	ou=Networks,dc=padl,dc=com?ne
#nss_base_bootparams	ou=Ethers,dc=padl,dc=com?one
#nss_base_aliases	ou=Aliases,dc=padl,dc=com?one
#nss_base_netgroup	ou=Netgroup,dc=padl,dc=com?one

# attribute/objectclass mapping
# Syntax:
#nss_map_attribute	rfc2307attribute	mapped_attribute
#nss_map_objectclass	rfc2307objectclass	mapped_objectclass

# configure --enable-nds is no longer supported.
# For NDS now do:
#nss_map_attribute uniqueMember member

# configure --enable-mssfu-schema is no longer supported.
# For MSSFU now do:
#nss_map_objectclass posixAccount User
#nss_map_attribute uid msSFUName
#nss_map_attribute uniqueMember posixMember
#nss_map_attribute userPassword msSFUPassword
#nss_map_attribute homeDirectory msSFUHomeDirectory
#nss_map_objectclass posixGroup Group
#pam_login_attribute msSFUName
#pam_filter objectclass=User
#pam_password ad

# configure --enable-authpassword is no longer supported
# For authPassword support, now do:
#nss_map_attribute userPassword authPassword
#pam_password nds

# For IBM SecureWay support, do:
#nss_map_objectclass posixAccount aixAccount
#nss_map_attribute uid userName
#nss_map_attribute gidNumber gid
#nss_map_attribute uidNumber uid
#nss_map_attribute userPassword passwordChar
#nss_map_objectclass posixGroup aixAccessGroup
#nss_map_attribute cn groupName
#nss_map_attribute uniqueMember member
#pam_login_attribute userName
#pam_filter objectclass=aixAccount
#pam_password clear

# Netscape SDK LDAPS
#ssl on

# Netscape SDK SSL options
#sslpath /etc/ssl/certs/cert7.db

# OpenLDAP SSL mechanism
# start_tls mechanism uses the normal LDAP port, LDAPS typically 636
ssl start_tls
#ssl on

# OpenLDAP SSL options
# Require and verify server certificate (yes/no)
# Default is "no"
tls_checkpeer yes

# CA certificates for server certificate verification
# At least one of these are required if tls_checkpeer is "yes"
tls_cacertfile /etc/ldap/ssl/cacert.pem
#tls_cacertdir /etc/ssl/certs

# Seed the PRNG if /dev/urandom is not provided
#tls_randfile /var/run/egd-pool

# SSL cipher suite
# See man ciphers for syntax
tls_ciphers TLSv1

# Client certificate and key
# Use these, if your server requires client authentication.
tls_cert /home/certs/ldap.cliente.cert.pem
tls_key /home/certs/ldap.cliente.key.pem
/etc/libnss-ldap.conf
###DEBCONF###
# the configuration of this file will be done by debconf as long as the
# first line of the file says '###DEBCONF###'
#
# you should use dpkg-reconfigure libnss-ldap to configure this file.
#
# @(#)$Id: ldap.conf,v 2.35 2004/03/03 21:06:34 lukeh Exp $
#
# This is the configuration file for the LDAP nameservice
# switch library and the LDAP PAM module.
#
# PADL Software
# http://www.padl.com
#

# Your LDAP server. Must be resolvable without using LDAP.
# Multiple hosts may be specified, each separated by a 
# space. How long nss_ldap takes to failover depends on
# whether your LDAP client library supports configurable
# network or connect timeouts (see bind_timelimit).
host gsr.pt

# The distinguished name of the search base.
base dc=gsr,dc=pt

# Another way to specify your LDAP server is to provide an
# uri with the server name. This allows to use
# Unix Domain Sockets to connect to a local LDAP Server.
#uri ldap://127.0.0.1/
#uri ldaps://gsr.pt/   
#uri ldapi://%2fvar%2frun%2fldapi_sock/
# Note: %2f encodes the '/' used as directory separator

# The LDAP version to use (defaults to 3
# if supported by client library)
ldap_version 3

# The distinguished name to bind to the server with.
# Optional: default is to bind anonymously.
binddn cn=readadmin,dc=gsr,dc=pt

# The credentials to bind with. 
# Optional: default is no credential.
bindpw 1

# The distinguished name to bind to the server with
# if the effective user ID is root. Password is
# stored in /etc/ldap.secret (mode 600)
rootbinddn cn=admin,dc=gsr,dc=pt

# The port.
# Optional: default is 389.
#port 389

# The search scope.
#scope sub
#scope one
#scope base

# Search timelimit
#timelimit 30

# Bind/connect timelimit
#bind_timelimit 30

# Reconnect policy: hard (default) will retry connecting to
# the software with exponential backoff, soft will fail
# immediately.
#bind_policy hard

# Idle timelimit; client will close connections
# (nss_ldap only) if the server has not been contacted
# for the number of seconds specified below.
#idle_timelimit 3600

# Filter to AND with uid=%s
#pam_filter objectclass=account

# The user ID attribute (defaults to uid)
#pam_login_attribute uid

# Search the root DSE for the password policy (works
# with Netscape Directory Server)
#pam_lookup_policy yes

# Check the 'host' attribute for access control
# Default is no; if set to yes, and user has no
# value for the host attribute, and pam_ldap is
# configured for account management (authorization)
# then the user will not be allowed to login.
#pam_check_host_attr yes

# Check the 'authorizedService' attribute for access
# control
# Default is no; if set to yes, and the user has no
# value for the authorizedService attribute, and
# pam_ldap is configured for account management
# (authorization) then the user will not be allowed
# to login.
#pam_check_service_attr yes

# Group to enforce membership of
#pam_groupdn cn=PAM,ou=Groups,dc=padl,dc=com

# Group member attribute
#pam_member_attribute uniquemember

# Specify a minium or maximum UID number allowed
#pam_min_uid 0
#pam_max_uid 0

# Template login attribute, default template user
# (can be overriden by value of former attribute
# in user's entry)
#pam_login_attribute userPrincipalName
#pam_template_login_attribute uid
#pam_template_login nobody

# HEADS UP: the pam_crypt, pam_nds_passwd,
# and pam_ad_passwd options are no
# longer supported.

# Do not hash the password at all; presume
# the directory server will do it, if
# necessary. This is the default.
#pam_password clear

# Hash password locally; required for University of
# Michigan LDAP server, and works with Netscape
# Directory Server if you're using the UNIX-Crypt
# hash mechanism and not using the NT Synchronization
# service. 
#pam_password crypt

# Remove old password first, then update in
# cleartext. Necessary for use with Novell
# Directory Services (NDS)
#pam_password nds

# Update Active Directory password, by
# creating Unicode password and updating
# unicodePwd attribute.
#pam_password ad

# Use the OpenLDAP password change
# extended operation to update the password.
#pam_password exop

# Redirect users to a URL or somesuch on password
# changes.
#pam_password_prohibit_message Please visit http://internal to change your password.

# RFC2307bis naming contexts
# Syntax:
# nss_base_XXX		base?scope?filter
# where scope is {base,one,sub}
# and filter is a filter to be &'d with the
# default filter.
# You can omit the suffix eg:
# nss_base_passwd	ou=People,
# to append the default base DN but this
# may incur a small performance impact.
#nss_base_passwd	ou=People,dc=padl,dc=com?one
#nss_base_shadow	ou=People,dc=padl,dc=com?one
#nss_base_group		ou=Group,dc=padl,dc=com?one
#nss_base_hosts		ou=Hosts,dc=padl,dc=com?one
#nss_base_services	ou=Services,dc=padl,dc=com?one
#nss_base_networks	ou=Networks,dc=padl,dc=com?one
#nss_base_protocols	ou=Protocols,dc=padl,dc=com?one
#nss_base_rpc		ou=Rpc,dc=padl,dc=com?one
#nss_base_ethers	ou=Ethers,dc=padl,dc=com?one
#nss_base_netmasks	ou=Networks,dc=padl,dc=com?ne
#nss_base_bootparams	ou=Ethers,dc=padl,dc=com?one
#nss_base_aliases	ou=Aliases,dc=padl,dc=com?one
#nss_base_netgroup	ou=Netgroup,dc=padl,dc=com?one

# attribute/objectclass mapping
# Syntax:
#nss_map_attribute	rfc2307attribute	mapped_attribute
#nss_map_objectclass	rfc2307objectclass	mapped_objectclass

# configure --enable-nds is no longer supported.
# NDS mappings
#nss_map_attribute uniqueMember member

# Services for UNIX 3.5 mappings
#nss_map_objectclass posixAccount User
#nss_map_objectclass shadowAccount User
#nss_map_attribute uid msSFU30Name
#nss_map_attribute uniqueMember msSFU30PosixMember
#nss_map_attribute userPassword msSFU30Password
#nss_map_attribute homeDirectory msSFU30HomeDirectory
#nss_map_attribute homeDirectory msSFUHomeDirectory
#nss_map_objectclass posixGroup Group
#pam_login_attribute msSFU30Name
#pam_filter objectclass=User
#pam_password ad

# configure --enable-mssfu-schema is no longer supported.
# Services for UNIX 2.0 mappings
#nss_map_objectclass posixAccount User
#nss_map_objectclass shadowAccount user
#nss_map_attribute uid msSFUName
#nss_map_attribute uniqueMember posixMember
#nss_map_attribute userPassword msSFUPassword
#nss_map_attribute homeDirectory msSFUHomeDirectory
#nss_map_attribute shadowLastChange pwdLastSet
#nss_map_objectclass posixGroup Group
#nss_map_attribute cn msSFUName
#pam_login_attribute msSFUName
#pam_filter objectclass=User
#pam_password ad

# RFC 2307 (AD) mappings
#nss_map_objectclass posixAccount user
#nss_map_objectclass shadowAccount user
#nss_map_attribute uid sAMAccountName
#nss_map_attribute homeDirectory unixHomeDirectory
#nss_map_attribute shadowLastChange pwdLastSet
#nss_map_objectclass posixGroup group
#nss_map_attribute uniqueMember member
#pam_login_attribute sAMAccountName
#pam_filter objectclass=User
#pam_password ad

# configure --enable-authpassword is no longer supported
# AuthPassword mappings
#nss_map_attribute userPassword authPassword

# AIX SecureWay mappings
#nss_map_objectclass posixAccount aixAccount
#nss_base_passwd ou=aixaccount,?one
#nss_map_attribute uid userName
#nss_map_attribute gidNumber gid
#nss_map_attribute uidNumber uid
#nss_map_attribute userPassword passwordChar
#nss_map_objectclass posixGroup aixAccessGroup
#nss_base_group ou=aixgroup,?one
#nss_map_attribute cn groupName
#nss_map_attribute uniqueMember member
#pam_login_attribute userName
#pam_filter objectclass=aixAccount
#pam_password clear

# Netscape SDK LDAPS
#ssl on

# Netscape SDK SSL options
#sslpath /etc/ssl/certs/cert7.db

# OpenLDAP SSL mechanism
# start_tls mechanism uses the normal LDAP port, LDAPS typically 636
ssl start_tls
#ssl on

# OpenLDAP SSL options
# Require and verify server certificate (yes/no)
# Default is "no"
tls_checkpeer yes

# CA certificates for server certificate verification
# At least one of these are required if tls_checkpeer is "yes"
tls_cacertfile /etc/ldap/ssl/cacert.pem
#tls_cacertdir /etc/ssl/certs

# Seed the PRNG if /dev/urandom is not provided
#tls_randfile /var/run/egd-pool

# SSL cipher suite
# See man ciphers for syntax
tls_ciphers TLSv1

# Client certificate and key
# Use these, if your server requires client authentication.
tls_cert /home/certs/ldap.cliente.cert.pem
tls_key /home/certs/ldap.cliente.key.pem

# Disable SASL security layers. This is needed for AD.
#sasl_secprops maxssf=0

# Override the default Kerberos ticket cache location.
#krb5_ccname FILE:/etc/.ldapcache
/etc/pamd.d/common-account
#
# /etc/pam.d/common-account - authorization settings common to all services
#
# This module performs non-authentication based account management. It is
# typically used to restrict/permit access to a service based on the time of day,
# currently available system resources (maximum number of users) or perhaps
# the location of the applicant user---`root' login only on the console.
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authorization modules that define
# the central access policy for use on the system.  The default is to
# only deny service to users whose accounts are expired in /etc/shadow.
#
account	required	pam_unix.so
account	sufficient	pam_ldap.so
/etc/pamd.d/common-auth
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
# This module type provides two aspects of authenticating the user.
# Firstly, it establishes that the user is who they claim to be, by
# instructing the application to prompt the user for a password or other
# means of identification. Secondly, the module can grant group membership
# (independently of the /etc/groups file) or other privileges through
# its credential granting properties. 
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.).  The default is to use the
# traditional Unix authentication mechanisms.
#

auth	sufficient	pam_unix.so
auth	sufficient	pam_ldap.so try_first_pass
auth	required	pam_env.so
auth	required	pam_securetty.so
auth	required	pam_unix_auth.so

# Se escribe un aviso en el archivo designado por
# syslog para la autentificación, en este caso:
# /var/log/auth.log
#
auth	required	pam_warn.so

auth	required	pam_deny.so
/etc/pamd.d/common-password
#
# /etc/pam.d/common-password - password-related modules common to all services
#
# This module type is required for updating the authentication token associated
# with the user. Typically, there is one module for each `challenge/response'
# based authentication (auth) module-type.
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define  the services to be
# used to change user passwords.  The default is pam_unix

password required	pam_cracklib.so retry=3 minlen=8 difok=4
password sufficient	pam_unix.so use_authtok md5 shadow
password sufficient	pam_ldap.so use_authtok
password required	pam_warn.so
password required	pam_deny.so
/etc/pamd.d/common-session
#
# /etc/pam.d/common-session - session-related modules common to all services
#
# This module is associated with doing things that need to be done for the
# user before/after they can be given service. Such things include the
# logging of information concerning the opening/closing of some data exchange
# with a user, mounting directories, etc. .
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define tasks to be performed
# at the start and end of sessions of *any* kind (both interactive and
# non-interactive).  The default is pam_unix.
#
session	required	pam_mkhomedir.so skel=/etc/skel/ umask=0022
session	required	pam_limits.so
session	required	pam_unix.so
session	optional	pam_ldap.so
/etc/nscd.conf
#
# /etc/nscd.conf
#
# An example Name Service Cache config file.  This file is needed by nscd.
#
# Legal entries are:
#
#   logfile         <file>
#   debug-level     <level>
#   threads         <#threads to use>
#   server-user     <user to run server as instead of root>
#       server-user is ignored if nscd is started with -S parameters
#       stat-user               <user who is allowed to request statistics>
#
#   enable-cache            <service> <yes|no>
#   positive-time-to-live   <service> <time in seconds>
#   negative-time-to-live   <service> <time in seconds>
#   suggested-size          <service> <prime number>
#   check-files             <service> <yes|no>
#
# Currently supported cache names (services): passwd, group, hosts
#


    logfile         /var/log/nscd.log
#   threads         6
    server-user     nscd
#   stat-user       somebody
    debug-level     0

    enable-cache            passwd       yes
    positive-time-to-live   passwd       600
    negative-time-to-live   passwd       20
    suggested-size          passwd       211
    check-files             passwd       yes
    
    enable-cache            group       yes
    positive-time-to-live   group       3600
    negative-time-to-live   group       60
    suggested-size          group       211
    check-files             group       yes
    
    enable-cache            hosts       yes
    positive-time-to-live   hosts       3600
    negative-time-to-live   hosts       20
    suggested-size          hosts       211
    check-files             hosts       yes
/etc/default/samba
# Defaults for samba initscript
# sourced by /etc/init.d/samba
# installed at /etc/default/samba by the maintainer scripts
#

#
# This is a POSIX shell fragment
#

# How should Samba (smbd) run? Possible values are "daemons"
#	or "inetd".
RUN_MODE="daemons"
/etc/samba/smb.conf
#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentary and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not many any basic syntactic 
# errors. 
#

#======================= Global Settings =======================

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
   workgroup = GSRDOMAIN

# server string is the equivalent of the NT Description field
   server string = %h server (Samba %v)

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
;   wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z

# This will prevent nmbd to search for NetBIOS names through DNS.
   dns proxy = no

# What naming service and in what order should we use to resolve host names
# to IP addresses
;   name resolve order = lmhosts host wins bcast


#### Debugging/Accounting ####

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 1000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
;   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.
   syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d


####### Authentication #######

# "security = user" is always a good idea. This will require a Unix account
# in this server for every user accessing the server. See
# /usr/share/doc/samba-doc/htmldocs/ServerType.html in the samba-doc
# package for details.
;   security = user

# You may wish to use password encryption.  See the section on
# 'encrypt passwords' in the smb.conf(5) manpage before enabling.
   encrypt passwords = true

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.  
   passdb backend = tdbsam guest

   obey pam restrictions = yes

;   guest account = nobody
   invalid users = root

# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
;   unix password sync = no

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for
# sending the correct chat script for the passwd program in Debian Potato).
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
;   pam password change = no


########## Printing ##########

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
;   load printers = yes

# lpr(ng) printing. You may wish to override the location of the
# printcap file
;   printing = bsd
;   printcap name = /etc/printcap

# CUPS printing.  See also the cupsaddsmb(8) manpage in the
# cupsys-client package.
;   printing = cups
;   printcap name = cups

# When using [print$], root is implicitly a 'printer admin', but you can
# also give this right to other users to add drivers and set printer
# properties
;   printer admin = @ntadmin


######## File sharing ########

# Name mangling options
;   preserve case = yes
;   short preserve case = yes


############ Misc ############

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /home/samba/etc/smb.conf.%m

# Most people will find that this option gives better performance.
# See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html
# for details
# You may want to add the following on a Linux system:
#         SO_RCVBUF=8192 SO_SNDBUF=8192
   socket options = TCP_NODELAY

# The following parameter is useful only if you have the linpopup package
# installed. The samba maintainer and the linpopup maintainer are
# working to ease installation and configuration of linpopup and samba.
;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &

# Domain Master specifies Samba to be the Domain Master Browser. If this
# machine will be configured as a BDC (a secondary logon server), you
# must set this to 'no'; otherwise, the default behavior is recommended.
;   domain master = auto

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash

#======================= Share Definitions =======================

[homes]
   comment = Home Directories
   browseable = no

# By default, the home directories are exported read-only. Change next
# parameter to 'yes' if you want to be able to write to them.
   writable = no

# File creation mask is set to 0700 for security reasons. If you want to
# create files with group=rw permissions, set next parameter to 0775.
   create mask = 0700

# Directory creation mask is set to 0700 for security reasons. If you want to
# create dirs. with group=rw permissions, set next parameter to 0775.
   directory mask = 0700

# Un-comment the following and create the netlogon directory for Domain Logons
# (you need to configure Samba to act as a domain controller too.)
;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no

[printers]
   comment = All Printers
   browseable = no
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode = 0700

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
# Uncomment to allow remote administration of Windows print drivers.
# Replace 'ntadmin' with the name of the group your admin users are
# members of.
;   write list = root, @ntadmin

# A sample share for sharing your CD-ROM with others.
;[cdrom]
;   comment = Samba server's CD-ROM
;   writable = no
;   locking = no
;   path = /cdrom
;   public = yes

# The next two parameters show how to auto-mount a CD-ROM when the
#	cdrom share is accesed. For this to work /etc/fstab must contain
#	an entry like this:
#
#       /dev/scd0   /cdrom  iso9660 defaults,noauto,ro,user   0 0
#
# The CD-ROM gets unmounted automatically after the connection to the
#
# If you don't want to use auto-mounting/unmounting make sure the CD
#	is mounted on /cdrom
#
;   preexec = /bin/mount /cdrom
;   postexec = /bin/umount /cdrom
/etc/samba/smb.conf
#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentary and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not many any basic syntactic
# errors.
#

#======================= Global Settings =======================

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
workgroup = GSRDOMAIN

# This sets the NetBIOS name by which a Samba server is known.
netbios name = TODOSCSI

# server string is the equivalent of the NT Description field
server string = SAMBA-LDAP PDC server

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z

# This will prevent nmbd to search for NetBIOS names through DNS.
dns proxy = no

# What naming service and in what order should we use to resolve host names
# to IP addresses
name resolve order = lmhosts host wins bcast


#### Debugging/Accounting ####

# This tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/log.%m

# The value of the parameter (a astring) allows the debug level
# (logging level) to be specified in  the  smb.conf file.
# (passdb:5 auth:10 winbind:2)
log level = 0

# Put a capping on the size of the log files (in Kb).
# (0 means no limit)
max log size = 1000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.
syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
panic action = /usr/share/samba/panic-action %d


####### Authentication #######

# "security = user" is always a good idea. This will require a Unix account
# in this server for every user accessing the server. See
# /usr/share/doc/samba-doc/htmldocs/ServerType.html in the samba-doc
# package for details.
security = user

# You may wish to use password encryption.  See the section on
# 'encrypt passwords' in the smb.conf(5) manpage before enabling.
encrypt passwords = true

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.
passdb backend = ldapsam:ldap://gsr.pt

# This parameter control whether or not Samba should obey PAM's
# account and session management directives. The default
# behavior is to use PAM for clear text authentication only and
# to ignore any account or session management. Note that Samba
# always ignores PAM for authentication in the  case  of
# encrypt passwords = yes.
obey pam restrictions = yes

# This is a username which will be used for access to services which
# are specified as "guest ok"
guest account = guest

# This is a list of users that should not be allowed to login to this service.
#   invalid users = root

# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
unix password sync = yes

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for
# sending the correct chat script for the passwd program in Debian Potato).
;   passwd program = /usr/bin/passwd %u
passwd program = /usr/sbin/smbldap-passwd -o %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
pam password change = no


####### LDAP-specific settings ########

# The ldap admin dn defines the Distinguished Name (DN) name used by Samba
# to contact the ldap server when retreiving user account information.
# The ldap admin dn is used in conjunction
# with the admin dn password stored in the private/secrets.tdb file.
# See the smbpasswd(8) man page for more information on how to accmplish this.
ldap admin dn = cn=admin,dc=gsr,dc=pt

# This parameter should contain the FQDN of the ldap directory server which
# should be queried to locate user account information.
;    ldap server = gsr.pt

# This option is used to control the tcp port number used to contact the
# ldap server. The default is to use the stand LDAPS port 636.
;   ldap port = 389

# This option is used to define whether or not Samba should use SSL when
# connecting to the ldap server. ('off', 'start_tls', or 'on' (default))
ldap ssl = star_tls

# This parameter specifies whether a delete operation in the ldapsam deletes
# the complete entry or only the attributes specific to Samba.
ldap delete dn = no

# This parameter specifies the RFC 2254 compliant LDAP search filter.
# The default is to match the login name with the uid attribute for
# all entries matching the sambaSamAccount objectclass.
# Note that this filter should only return one entry.
;   ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))

# Specifies where user and machine accounts are added to the tree.
# Can be overriden by ldap user suffix and ldap machine suffix.
# It also used as the base dn for all ldap searches.
ldap suffix = dc=gsr,dc=pt

# This parameter specifies where users are added to the tree.
ldap user suffix = ou=people

# This parameters specifies the suffix that is used for groups when these
# are added to the LDAP directory.
ldap group suffix = ou=groups

# It specifies where machines should be added to the ldap tree.
ldap machine suffix = ou=machines


########## Printing ##########

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
load printers = yes

# lpr(ng) printing. You may wish to override the location of the
# printcap file
;   printing = bsd
;   printcap name = /etc/printcap

# CUPS printing.  See also the cupsaddsmb(8) manpage in the
# cupsys-client package.
printing = cups

# When using [print$], root is implicitly a 'printer admin', but you can
# also give this right to other users to add drivers and set printer
# properties
printer admin = @domainprintoperator


######## File sharing ########

# Name mangling options
preserve case = yes


#### Domain Controller #######


# This integer value controls what level Samba advertises itself as for browse
# elections. The value of this parameter determines whether nmbd(8) has a
# chance of becoming a local master browser for the WORKGROUP in the
# local broadcast area.
os level = 80

# This boolean parameter controls if nmbd(8) is a preferred master browser
# for its workgroup.
preferred master = yes

# Domain Master specifies Samba to be the Domain Master Browser. If this
# machine will be configured as a BDC (a secondary logon server), you
# must set this to 'no'; otherwise, the default behavior is recommended.
domain master = yes

# This option allows nmbd(8) to try and become a local master browser
# on a subnet.
local master = yes

# If set to yes, the Samba server will act as a Primary Domain Controller
# (PDC) for  the  workgroup  it  is  in.
domain logons = yes

# This  parameter specifies the home directory where roaming profiles
# (NTuser.dat etc files for Windows NT) are stored.
logon path = \\%L\profiles\%u

# This parameter specifies the local path to which the home directory
# will be connected and is only used by NT Workstations.
logon drive = H:

# This  parameter  specifies the home directory location when a Win95/98
# or NT Workstation logs into a Samba PDC.
logon home = \\%L\%u\.profile

# This parameter specifies the batch file (.bat) or NT command file
# (.cmd) to be downloaded and run  on a machine when a user successfully
# logs in.
;   logon script = logon.cmd
logon script = 

# Users and groups allowed to be 'Domain Admins'
;   domain admin group = @domainadmins


############ Misc ############

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /home/samba/etc/smb.conf.%m

# Most people will find that this option gives better performance.
# See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html
# for details
# You may want to add the following on a Linux system:
#         SO_RCVBUF=8192 SO_SNDBUF=8192
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
winbind uid = 10000-20000
winbind gid = 10000-20000

# When filling out the user information for a Windows NT user,
# the winbindd(8) daemon uses this parameter to fill in the login
# shell for that user.
template shell = /bin/bash

# This parameter specifies what OS ACL semantics should be
# compatible with. Possible values are winnt for Windows NT 4,
# win2k for Windows 2000 and above and auto. If you specify auto,
# the value for this parameter will be based upon the version
# of the client. There should be no reason to change this
# parameter from the default.
acl compatibility = Auto

# Using smbldap-tools to add machines
add user script = /usr/sbin/smbldap-useradd.pl -w %u


#======================= Share Definitions =======================

[homes]
comment = Home Directories

# This controls whether this share is seen in the list of
# available shares in a net view and in the browse list.
browseable = no
read only = no

# File creation mask is set to 0700 for security reasons. If you want to
# create files with group=rw permissions, set next parameter to 0775.
create mask = 0700

# Directory creation mask is set to 0700 for security reasons. If you want to
# create dirs. with group=rw permissions, set next parameter to 0775.
directory mask = 0700

[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
share modes = no
guest ok = yes
write list = @domainadmins

[profiles]
comment = User's Profiles
path = /home/samba/profiles
read only = no
browseable = no
create mask = 0600
directory mask = 0700
guest ok = yes

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes
printer admin = root, @domainprintoperator
;   create mask = 0700

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
write list = root, @domainprintoperator

[tmp]
comment = Temporal
read only = no
path = /tmp

[cdrom]
comment = Samba server's CD-ROM
locking = no
path = /cdrom
guest ok = yes
/etc/cups/client.conf
#
# "$Id: client.conf,v 1.8 2004/02/25 20:15:27 mike Exp $"
#
#   Sample client configuration file for the Common UNIX Printing System
#   (CUPS).
#
#   Copyright 1997-2004 by Easy Software Products, all rights reserved.
#
#   These coded instructions, statements, and computer programs are the
#   property of Easy Software Products and are protected by Federal
#   copyright law.  Distribution and use rights are outlined in the file
#   "LICENSE.txt" which should have been included with this file.  If this
#   file is missing or damaged please contact Easy Software Products
#   at:
#
#       Attn: CUPS Licensing Information
#       Easy Software Products
#       44141 Airport View Drive, Suite 204
#       Hollywood, Maryland 20636-3111 USA
#
#       Voice: (301) 373-9603
#       EMail: cups-info@cups.org
#         WWW: http://www.cups.org
#

########################################################################
#                                                                      #
# This is the CUPS client configuration file.  This file is used to    #
# define client-specific parameters, such as the default server or     #
# default encryption settings.                                         #
#                                                                      #
########################################################################

#
# ServerName: the hostname of your server.  By default CUPS will use the
# hostname of the system or the value of the CUPS_SERVER environment
# variable.  ONLY ONE SERVER NAME MAY BE SPECIFIED AT A TIME.  To use
# more than one server you must use a local scheduler with browsing
# and possibly polling.
#

ServerName gsr.pt

#
# Encryption: whether or not to use encryption; this depends on having
# the OpenSSL library linked into the CUPS library.
#
# Possible values:
#
#     Always       - Always use encryption (SSL)
#     Never        - Never use encryption
#     Required     - Use TLS encryption upgrade
#     IfRequested  - Use encryption if the server requests it
#
# The default value is "IfRequested".  This parameter can also be set
# using the CUPS_ENCRYPTION environment variable.
#

#Encryption Always
#Encryption Never
#Encryption Required
#Encryption IfRequested


#
# End of "$Id: client.conf,v 1.8 2004/02/25 20:15:27 mike Exp $".
#
/etc/cups/cupsd.conf
#
# "$Id: cupsd.conf.in,v 1.14 2004/02/25 20:14:51 mike Exp $"
#
#   Sample configuration file for the Common UNIX Printing System (CUPS)
#   scheduler.
#
#   Copyright 1997-2004 by Easy Software Products, all rights reserved.
#
#   These coded instructions, statements, and computer programs are the
#   property of Easy Software Products and are protected by Federal
#   copyright law.  Distribution and use rights are outlined in the file
#   "LICENSE.txt" which should have been included with this file.  If this
#   file is missing or damaged please contact Easy Software Products
#   at:
#
#       Attn: CUPS Licensing Information
#       Easy Software Products
#       44141 Airport View Drive, Suite 204
#       Hollywood, Maryland 20636-3111 USA
#
#       Voice: (301) 373-9603
#       EMail: cups-info@cups.org
#         WWW: http://www.cups.org
#

########################################################################
#                                                                      #
# This is the CUPS configuration file.  If you are familiar with       #
# Apache or any of the other popular web servers, we've followed the   #
# same format.  Any configuration variable used here has the same      #
# semantics as the corresponding variable in Apache.  If we need       #
# different functionality then a different name is used to avoid       #
# confusion...                                                         #
#                                                                      #
########################################################################


########
######## Server Identity
########

#
# ServerName: the hostname of your server, as advertised to the world.
# By default CUPS will use the hostname of the system.
#
# To set the default server used by clients, see the client.conf file.
#

ServerName gsr.pt

#
# ServerAdmin: the email address to send all complaints/problems to.
# By default CUPS will use "root@hostname".
#

ServerAdmin sergio@gsr.pt


########
######## Server Options
########

#
# AccessLog: the access log file; if this does not start with a leading /
# then it is assumed to be relative to ServerRoot.  By default set to
# "/var/log/cups/access_log"
#
# You can also use the special name "syslog" to send the output to the
# syslog file or daemon.
#

AccessLog /var/log/cups/access_log

#
# Classification: the classification level of the server.  If set, this
# classification is displayed on all pages, and raw printing is disabled.
# The default is the empty string.
#

#Classification classified
#Classification confidential
#Classification secret
#Classification topsecret
#Classification unclassified

#
# ClassifyOverride: whether to allow users to override the classification
# on printouts. If enabled, users can limit banner pages to before or
# after the job, and can change the classification of a job, but cannot
# completely eliminate the classification or banners.
#
# The default is off.
#

#ClassifyOverride off

#
# DataDir: the root directory for the CUPS data files.
# By default "/usr/share/cups".
#

DataDir /usr/share/cups

#
# DefaultCharset: the default character set to use. If not specified,
# defaults to "utf-8".  Note that this can also be overridden in
# HTML documents...
#

DefaultCharset notused

#
# DefaultLanguage: the default language if not specified by the browser.
# If not specified, the current locale is used.
#

DefaultLanguage es

#
# DocumentRoot: the root directory for HTTP documents that are served.
# By default "/usr/share/cups/doc-root".
#

DocumentRoot /usr/share/cups/doc-root

#
# ErrorLog: the error log file; if this does not start with a leading /
# then it is assumed to be relative to ServerRoot.  By default set to
# "/var/log/cups/error_log"
#
# You can also use the special name "syslog" to send the output to the
# syslog file or daemon.
#

ErrorLog /var/log/cups/error_log

#
# FileDevice: determines whether the scheduler will allow new printers
# to be added using device URIs of the form "file:/foo/bar". The default
# is not to allow file devices due to the potential security vulnerability
# and due to the fact that file devices do not support raw printing.
#

FileDevice No


#
# FontPath: the path to locate all font files (currently only for pstoraster)
# By default "/usr/share/cups/fonts".
#

FontPath /usr/share/cups/fonts

#
# LogLevel: controls the number of messages logged to the ErrorLog
# file and can be one of the following:
#
#     debug2	Log everything.
#     debug	Log almost everything.
#     info      Log all requests and state changes.
#     warn      Log errors and warnings.
#     error     Log only errors.
#     none      Log nothing.
#

LogLevel debug2

#
# MaxLogSize: controls the maximum size of each log file before they are
# rotated.  Defaults to 1048576 (1MB).  Set to 0 to disable log rotating.
#

MaxLogSize 0

#
# PageLog: the page log file; if this does not start with a leading /
# then it is assumed to be relative to ServerRoot.  By default set to
# "/var/log/cups/page_log"
#
# You can also use the special name "syslog" to send the output to the
# syslog file or daemon.
#

PageLog /var/log/cups/page_log

#
# PreserveJobHistory: whether or not to preserve the job history after a
# job is completed, cancelled, or stopped.  Default is Yes.
#

PreserveJobHistory Yes

#
# PreserveJobFiles: whether or not to preserve the job files after a
# job is completed, cancelled, or stopped.  Default is No.
#

PreserveJobFiles No

#
# AutoPurgeJobs: automatically purge jobs when not needed for quotas.
# Default is No.
#

AutoPurgeJobs No

#
# MaxCopies: maximum number of copies that a user can request. Default is
# 100.
#

MaxCopies 100

#
# MaxJobs: maximum number of jobs to keep in memory (active and completed.)
# Default is 500; the value 0 is used for no limit.
#

MaxJobs 500

#
# MaxJobsPerPrinter: maximum number of active jobs per printer. The default
# is 0 for no limit.
#

MaxJobsPerPrinter 0

#
# MaxJobsPerUser: maximum number of active jobs per user. The default
# is 0 for no limit.
#

MaxJobsPerUser 0

#
# MaxPrinterHistory: controls the maximum number of history collections
# in the printer-state-history attribute.  Set to 0 to disable history
# data.
#

MaxPrinterHistory 10

#
# Printcap: the name of the printcap file.  Default is /etc/printcap.
# Leave blank to disable printcap file generation.
#

Printcap /var/run/cups/printcap

#
# PrintcapFormat: the format of the printcap file, currently either
# BSD or Solaris.  The default is "BSD".
#

#PrintcapFormat BSD
#PrintcapFormat Solaris

#
# PrintcapGUI: the name of the GUI options panel program to associate
# with print queues under IRIX.  The default is "/usr/bin/glpoptions"
# from ESP Print Pro.
#
# This option is only used under IRIX; the options panel program
# must accept the "-d printer" and "-o options" options and write
# the selected printer options back to stdout on completion.
#

#PrintcapGUI /usr/bin/glpoptions

#
# RequestRoot: the directory where request files are stored.
# By default "/var/spool/cups".
#

RequestRoot /var/spool/cups

#
# RemoteRoot: the name of the user assigned to unauthenticated accesses
# from remote systems.  By default "remroot".
#

#RemoteRoot remroot

#
# ServerBin: the root directory for the scheduler executables.
# By default "/usr/lib/cups".
#

ServerBin /usr/lib/cups

#
# ServerRoot: the root directory for the scheduler.
# By default "/etc/cups".
#

ServerRoot /etc/cups


########
######## Fax Support
########

#
# FaxRetryLimit: the number of times a fax job is retried.
# The default is 5 times.
#

#FaxRetryLimit 5

#
# FaxRetryInterval: the number of seconds between fax job retries.
# The default is 300 seconds/5 minutes.
#

#FaxRetryInterval 300


########
######## Encryption Support
########

#
# ServerCertificate: the file to read containing the server's certificate.
# Defaults to "/etc/cups/ssl/server.crt".
#

ServerCertificate /etc/cups/ssl/certs/servidorcert.pem

#
# ServerKey: the file to read containing the server's key.
# Defaults to "/etc/cups/ssl/server.key".
#

ServerKey /etc/cups/ssl/private/servidorkey.pem


########
######## Filter Options
########

#
# User/Group: the user and group the server runs under.  Normally this
# must be lp and lpadmin, however you can configure things for another
# user or group as needed.
#
# Note: the server must be run initially as root to support the
# default IPP port of 631.  It changes users whenever an external
# program is run, or if the RunAsUser directive is specified...
#

User lp
Group lpadmin

#
# RIPCache: the amount of memory that each RIP should use to cache
# bitmaps.  The value can be any real number followed by "k" for
# kilobytes, "m" for megabytes, "g" for gigabytes, or "t" for tiles
# (1 tile = 256x256 pixels.)  Defaults to "8m" (8 megabytes).
#

RIPCache 8m

#
# TempDir: the directory to put temporary files in.  This directory must be
# writable by the user defined above!  Defaults to "/var/spool/cups/tmp" or
# the value of the TMPDIR environment variable.
#

TempDir /var/spool/cups/tmp

#
# FilterLimit: sets the maximum cost of all job filters that can be run
# at the same time.  A limit of 0 means no limit.  A typical job may need
# a filter limit of at least 200; limits less than the minimum required
# by a job force a single job to be printed at any time.
#
# The default limit is 0 (unlimited).
#

FilterLimit 0

########
######## Network Options
########

#
# Ports/addresses that we listen to.  The default port 631 is reserved
# for the Internet Printing Protocol (IPP) and is what we use here.
#
# You can have multiple Port/Listen lines to listen to more than one
# port or address, or to restrict access:
#
#    Port 80
#    Port 631
#    Listen hostname
#    Listen hostname:80
#    Listen hostname:631
#    Listen 1.2.3.4
#    Listen 1.2.3.4:631
# 
# NOTE: Unfortunately, most web browsers don't support TLS or HTTP Upgrades
# for encryption.  If you want to support web-based encryption you'll
# probably need to listen on port 443 (the "https" port...)
#

#Port 80
#Port 443
#Port 631

Listen gsr.pt:631

SSLListen gsr.pt:6443

#
# HostNameLookups: whether or not to do lookups on IP addresses to get a
# fully-qualified hostname.  This defaults to Off for performance reasons...
#

HostNameLookups Off

#
# KeepAlive: whether or not to support the Keep-Alive connection
# option.  Default is on.
#

KeepAlive On

#
# KeepAliveTimeout: the timeout before Keep-Alive connections are
# automatically closed.  Default is 60 seconds.
#

KeepAliveTimeout 60

#
# MaxClients: controls the maximum number of simultaneous clients that
# will be handled.  Defaults to 100.
#

MaxClients 100

#
# MaxClientsPerHost: controls the maximum number of simultaneous clients that
# will be handled from a specific host.  Defaults to 10 or 1/10th of the
# MaxClients setting, whichever is larger.  A value of 0 specifies the
# automatic (10 or 1/10th) setting.
#

MaxClientsPerHost 0

#
# MaxRequestSize: controls the maximum size of HTTP requests and print files.
# Set to 0 to disable this feature (defaults to 0.)
#

MaxRequestSize 0

#
# Timeout: the timeout before requests time out.  Default is 300 seconds.
#

Timeout 300


########
######## Browsing Options
########

#
# Browsing: whether or not to broadcast and/or listen for CUPS printer
# information on the network.  Enabled by default.
#

#Browsing On

#
# BrowseProtocols: which protocols to use for browsing.  Can be
# any of the following separated by whitespace and/or commas:
#
#     all  - Use all supported protocols.
#     cups - Use the CUPS browse protocol.
#     slp  - Use the SLPv2 protocol.
#
# The default is "cups".
#
# NOTE: If you choose to use SLPv2, it is *strongly* recommended that
#       you have at least one SLP Directory Agent (DA) on your
#       network.  Otherwise, browse updates can take several seconds,
#       during which the scheduler will not respond to client
#       requests.
#

#BrowseProtocols cups

#
# BrowseAddress: specifies a broadcast address to be used.  By
# default browsing information is not sent!
#
# Note: HP-UX does not properly handle broadcast unless you have a
# Class A, B, C, or D netmask (i.e. no CIDR support).
#
# Note: Using the "global" broadcast address (255.255.255.255) will
# activate a Linux demand-dial link with the default configuration.
# If you have a LAN as well as the dial-up link, use the LAN's
# broadcast address.
#
# The @LOCAL address broadcasts to all non point-to-point interfaces.
# For example, if you have a LAN and a dial-up link, @LOCAL would
# send printer updates to the LAN but not to the dial-up link.
# Similarly, the @IF(name) address sends to the named network
# interface, e.g. @IF(eth0) under Linux.  Interfaces are refreshed
# automatically (no more than once every 60 seconds), so they can
# be used on dynamically-configured interfaces, e.g. PPP, 802.11, etc.
#

#BrowseAddress x.y.z.255
#BrowseAddress x.y.255.255
#BrowseAddress x.255.255.255
#BrowseAddress 255.255.255.255
#BrowseAddress @LOCAL
#BrowseAddress @IF(name)

#
# BrowseShortNames: whether or not to use "short" names for remote printers
# when possible (e.g. "printer" instead of "printer@host".)  Enabled by
# default.
#

#BrowseShortNames Yes

#
# BrowseAllow: specifies an address mask to allow for incoming browser
# packets. The default is to allow packets from all addresses.
#
# BrowseDeny: specifies an address mask to deny for incoming browser
# packets. The default is to deny packets from no addresses.
#
# Both "BrowseAllow" and "BrowseDeny" accept the following notations for
# addresses:
#
#     All
#     None
#     *.domain.com
#     .domain.com
#     host.domain.com
#     nnn.*
#     nnn.nnn.*
#     nnn.nnn.nnn.*
#     nnn.nnn.nnn.nnn
#     nnn.nnn.nnn.nnn/mm
#     nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm
#     @LOCAL
#     @IF(name)
#
# The hostname/domainname restrictions only work if you have turned hostname
# lookups on!
#

#BrowseAllow address
#BrowseDeny address

#
# BrowseInterval: the time between browsing updates in seconds.  Default
# is 30 seconds.
#
# Note that browsing information is sent whenever a printer's state changes
# as well, so this represents the maximum time between updates.
#
# Set this to 0 to disable outgoing broadcasts so your local printers are
# not advertised but you can still see printers on other hosts.
#

#BrowseInterval 30

#
# BrowseOrder: specifies the order of BrowseAllow/BrowseDeny comparisons.
#

#BrowseOrder allow,deny
#BrowseOrder deny,allow

#
# BrowsePoll: poll the named server(s) for printers
#

#BrowsePoll address:port

#
# BrowsePort: the port used for UDP broadcasts.  By default this is
# the IPP port; if you change this you need to do it on all servers.
# Only one BrowsePort is recognized.
#

#BrowsePort 631

#
# BrowseRelay: relay browser packets from one address/network to another.
#

#BrowseRelay source-address destination-address
#BrowseRelay @IF(src) @IF(dst)

#
# BrowseTimeout: the timeout for network printers - if we don't
# get an update within this time the printer will be removed
# from the printer list.  This number definitely should not be
# less the BrowseInterval value for obvious reasons.  Defaults
# to 300 seconds.
#

#BrowseTimeout 300

#
# ImplicitClasses: whether or not to use implicit classes.
#
# Printer classes can be specified explicitly in the classes.conf
# file, implicitly based upon the printers available on the LAN, or
# both.
#
# When ImplicitClasses is On, printers on the LAN with the same name
# (e.g. Acme-LaserPrint-1000) will be put into a class with the same
# name. This allows you to setup multiple redundant queues on a LAN
# without a lot of administrative difficulties.  If a user sends a
# job to Acme-LaserPrint-1000, the job will go to the first available
# queue.
#
# Enabled by default.
#

#ImplicitClasses On

#
# ImplicitAnyClasses: whether or not to create "AnyPrinter" implicit
# classes.
#
# When ImplicitAnyClasses is On and a local queue of the same name
# exists, e.g. "printer", "printer@server1", "printer@server1", then
# an implicit class called "Anyprinter" is created instead.
#
# When ImplicitAnyClasses is Off, implicit classes are not created
# when there is a local queue of the same name.
#
# Disabled by default.
#

#ImplicitAnyCLasses Off

#
# HideImplicitMembers: whether or not to show the members of an
# implicit class.
#
# When HideImplicitMembers is On, any remote printers that are
# part of an implicit class are hidden from the user, who will
# then only see a single queue even though many queues will be
# supporting the implicit class.
#
# Enabled by default.
#

#HideImplicitMembers On


########
######## Security Options
########

#
# SystemGroup: the group name for "System" (printer administration)
# access.  The default varies depending on the operating system, but
# will be "sys", "system", or "root" (checked for in that order.)
#
# Debian: The default CUPS group is "lpadmin".
#

#SystemGroup lpadmin

#
# RootCertDuration: How frequently the root certificate is regenerated.
# Defaults to 300 seconds.
#

#RootCertDuration 300

#
# Access permissions for each directory served by the scheduler.
# Locations are relative to DocumentRoot...
#
# AuthType: the authorization to use:
#
#    None   - Perform no authentication
#    Basic  - Perform authentication using the HTTP Basic method.
#    Digest - Perform authentication using the HTTP Digest method.
#
#    (Note: local certificate authentication can be substituted by
#           the client for Basic or Digest when connecting to the
#           localhost interface)
#
# AuthClass: the authorization class; currently only "Anonymous", "User",
# "System" (valid user belonging to group SystemGroup), and "Group"
# (valid user belonging to the specified group) are supported.
#
# AuthGroupName: the group name for "Group" authorization.
#
# Order: the order of Allow/Deny processing.
#
# Allow: allows access from the specified hostname, domain, IP address,
# network, or interface.
#
# Deny: denies access from the specified hostname, domain, IP address,
# network, or interface.
#
# Both "Allow" and "Deny" accept the following notations for addresses:
#
#     All
#     None
#     *.domain.com
#     .domain.com
#     host.domain.com
#     nnn.*
#     nnn.nnn.*
#     nnn.nnn.nnn.*
#     nnn.nnn.nnn.nnn
#     nnn.nnn.nnn.nnn/mm
#     nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm
#     @LOCAL
#     @IF(name)
#
# The host and domain address require that you enable hostname lookups
# with "HostNameLookups On" above.
#
# The @LOCAL address allows or denies from all non point-to-point
# interfaces.  For example, if you have a LAN and a dial-up link,
# @LOCAL could allow connections from the LAN but not from the dial-up
# link.  Similarly, the @IF(name) address allows or denies from the
# named network interface, e.g. @IF(eth0) under Linux.  Interfaces are
# refreshed automatically (no more than once every 60 seconds), so
# they can be used on dynamically-configured interfaces, e.g. PPP,
# 802.11, etc.
#
# Encryption: whether or not to use encryption; this depends on having
# the OpenSSL library linked into the CUPS library and scheduler.
#
# Possible values:
#
#     Always       - Always use encryption (SSL)
#     Never        - Never use encryption
#     Required     - Use TLS encryption upgrade
#     IfRequested  - Use encryption if the server requests it
#
# The default value is "IfRequested".
#

<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
</Location>

#<Location /classes>
#
# You may wish to limit access to printers and classes, either with Allow
# and Deny lines, or by requiring a username and password.
#
#</Location>

#<Location /classes/name>
#
# You may wish to limit access to printers and classes, either with Allow
# and Deny lines, or by requiring a username and password.
#
#</Location>

<Location /jobs>
#
# You may wish to limit access to job operations, either with Allow
# and Deny lines, or by requiring a username and password.
#
AuthType Basic
AuthClass User
#Encryption Required
</Location>

#<Location /printers>
#
# You may wish to limit access to printers and classes, either with Allow
# and Deny lines, or by requiring a username and password.
#
#</Location>

#<Location /printers/name>
#
# You may wish to limit access to printers and classes, either with Allow
# and Deny lines, or by requiring a username and password.
#

## Anonymous access (default)
#AuthType None

## Require a username and password (Basic authentication)
#AuthType Basic
#AuthClass User

## Require a username and password (Digest/MD5 authentication)
#AuthType Digest
#AuthClass User

## Restrict access to local domain
#Order Deny,Allow
#Deny From All
#Allow From .mydomain.com
#</Location>

<Location /admin>
#
# You definitely will want to limit access to the administration functions.
# The default configuration requires a local connection from a user who
# is a member of the system group to do any admin tasks.  You can change
# the group name using the SystemGroup directive.
#

AuthType Basic
AuthClass System

## Restrict access to local domain
Order Deny,Allow
Deny From All
Allow From 127.0.0.1

#Encryption Required
</Location>

#
# End of "$Id: cupsd.conf.in,v 1.14 2004/02/25 20:14:51 mike Exp $".
#
/etc/pykota/pykota.conf
# PyKota sample configuration file
#
# Copy this file into the /etc/pykota/ directory
# under the name /etc/pykota/pykota.conf
#
# PyKota - Print Quotas for CUPS and LPRng
#
# (c) 2003-2004 Jerome Alet <alet@librelogiciel.com>
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307, USA.
#
# $Id: pykota.conf.sample,v 1.104 2004/10/06 08:19:29 jalet Exp $
#

[global]
# Storage backend for quotas
# only PGStorage (PostgreSQL) and LDAPStorage (OpenLDAP) are supported.
# MySQL and BerkeleyDB are planned.

# the 'postgresql' value is deprecated, use 'pgstorage' instead.
storagebackend: ldapstorage

# Quota Storage Server hostname (and optional port)
# e.g. db.example.com:5432
storageserver: ldap://gsr.pt:389

#
# name of the Quota Storage Database
storagename: dc=gsr,dc=pt

# 
# Quota Storage normal user's name and password
# These two fields contain a username and optional password 
# which may give readonly access to your print quota database.
# 
# PLEASE ENSURE THAT THIS USER CAN'T WRITE TO YOUR PRINT QUOTA
# DATABASE, OTHERWISE ANY USER WHO COULD READ THIS CONFIGURATION
# FILE COULD CHANGE HIS PRINT QUOTA.
#
storageuser: cn=pykotauser,dc=gsr,dc=pt
storageuserpw: **********

# Should the database caching mechanism be enabled or not ?
# If unset, caching is disabled. Possible values Y/N/YES/NO
# caching mechanism works with both PostgreSQL and OpenLDAP backends
# but may be really interesting only with OpenLDAP.
#
# ACTIVATING CACHE MAY CAUSE PRECISION PROBLEMS IN PRINT ACCOUNTING
# IF AN USER PRINTS ON SEVERAL PRINTERS AT THE SAME TIME.
# YOU MAY FIND IT INTERESTING ANYWAY, ESPECIALLY FOR LDAP.
#
# FYI, I ALWAYS SET IT TO YES !
#
storagecaching: No

# Should full job history be disabled ?
# If unset or set to No, full job history is kept in the database.
# This will be useful in the future when the report generator
# will be written.
# Disabling the job history can be useful with heavily loaded
# LDAP servers, to not make the LDAP tree grow out of control.
# Disabling the job history with the PostgreSQL backend works too
# but it's probably less useful than with LDAP.
disablehistory: No

# LDAP example, uncomment and adapt it to your own configuration :
#storagebackend: ldapstorage
#storageserver: ldap://ldap.librelogiciel.com:389
#storagename: dc=librelogiciel,dc=com
#storageuser: cn=notadmin,dc=librelogiciel,dc=com
#storageuserpw: abc.123
#
# Here we define some helpers to know where 
# to plug into an existing LDAP directory
userbase: ou=people,dc=gsr,dc=pt
userrdn: uid
balancebase: ou=people,dc=gsr,dc=pt
balancerdn: uid
groupbase: ou=groups,dc=gsr,dc=pt
grouprdn: cn
printerbase: ou=printers,ou=pykota,dc=gsr,dc=pt
printerrdn: cn
jobbase: ou=jobs,ou=pykota,dc=gsr,dc=pt
userquotabase: ou=uquotas,ou=pykota,dc=gsr,dc=pt
groupquotabase: ou=gquotas,ou=pykota,dc=gsr,dc=pt
lastjobbase: ou=lastjobs,ou=pykota,dc=gsr,dc=pt
#
# How to create new accounts and groups
# authorized values are "below" and "attach(objectclass name [, fail|warn])"
#
# "below" creates the new accounts/groups as standalone entries
# below the above defined 'userbase' ou
# 
# attach(objectclass name [, action]) tries to find some existing user/group
# using the above defined 'userrdn' or 'grouprdn' and 'userbase'
# 'groupbase', and attach the PyKota specific entries to it.
# if action is "warn" and no entry exists to attach to, a new
# entry is created, and a message is logged. 
# if action is "fail" and no entry exists to attach to, program
# logs an error message and aborts.
# if action is not set, the default value is "fail".
#
# a possible value:  newuser: attach(posixAccount, warn)
newuser : attach(posixAccount, warn)
newgroup : attach(posixGroup, warn)
#
# LDAP attribute which stores the user's email address
usermail : mail

# 
# Choose what attribute contains the list of group members
# common values are : memberUid, uniqueMember, member
groupmembers: memberUid

# Activate low-level LDAP cache yes/no
# Nothing to do with "storagecaching" which is higher level
# and database independant.
# This saves some search queries and may help with heavily
# loaded LDAP servers.
# This is EXPERIMENTAL.
#
# BEWARE : SETTING THIS TO 'YES' CAUSES PROBLEMS FOR NOW
# BETTER TO LET IT SET TO 'NO'
# ldapcache: no

# Where to log ?
# supported values : stderr, system (system means syslog, 
# but don't use 'syslog' here) if the value is not set
# then the default SYSTEM applies.
logger: system

# Enable debugging ? Put YES or NO there.
# From now on, YES is the default in this sample
# configuration file, so that debugging is activated
# when configuring PyKota. After all works, just
# put NO instead to save some disk space in your
# logs.
# Actually only database queries are logged.
debug : Yes

# Mail server to use to warn users
# If the value is not set then localhost is used.
smtpserver: localhost

# Crash messages' recipient : in addition to the log files
# each software crash can be sent to the author of PyKota
# or any other person of your choice. By default this
# is disabled. The recipient pykotacrashed@librelogiciel.com
# reaches PyKota's author.
# The 'adminmail' (defined a bit below) is CCed.
#
# Privacy concerns : what is sent is only :
#
#        - a copy of the software's traceback
#        - a copy of the software's command line arguments
#        - a copy of the software's environment variables
# 
# suggested value
# crashrecipient: pykotacrashed@librelogiciel.com

# Email domain
# If the value is not set, and the mail attribute for the user
# is not set in the PyKota storage, be it LDAP (see usermail directive
# above) or PostgreSQL, then email messages are sent to 
# username@smtpserver
#
# If the value is set, then email messages are sent to
# username@maildomain using the SMTP server defined above
#
# Set the appropriate value below, example.com set as per RFC2606.
maildomain: gsr.pt

# Should we force usernames to be all lowercase when printing ?
# Default is No. 
# This is a global option only.
# Some people reported that WinXP sends mixed case usernames
# setting 'utolower: Yes' solves the problem.
# Of course you have to use lowercase only when adding
# users with edpykota, because ALL database accesses are
# still case sensitive.
#
# If utolower is Yes, the usernames received from the printing
# system is converted to lowercase at the start of the cupspykota
# backend or of the lprngpykota filter.
#
# If utolower is No, which is the default, strict case checking
# is done, this means that users 'Jerome' and 'jerome' are
# different. Printer and groups names are ALWAYS case sensitive.
utolower: No

# Should we split usernames on a specific separator when printing ?
# Default is No, i.e. if the value is unset.
# This is a global option only.
# This option adds support for Samba's Winbind utility, which
# prefixes usernames with domain name and separator character.
# Of course if you set this then you have to use NO separator when 
# adding users with edpykota.
#
# If winbind_separator is set, the usernames received from the printing
# system are split on the separator's value, and only the last part
# (real username) is used.
#
# If winbind_separator is not set, which is the default, strict 
# username equality checking will be done (modulo the setting
# of the 'utolower' directive), this means that users 'DOMAIN1/jerome',
# 'Domain2/jerome' and 'jerome' are different. 
# winbind_separator: /

# What is the accounting backend to use
# 
# supported values :
#
#    - hardware : asks the printer for its lifetime page counter
#                 via either SNMP, AppleTalk, or any external
#                 command. This method is the method used by
#                 default in PyKota since its beginning.
#
#                 In the lines below "%(printer)s" is automatically replaced
#                 at run time with your printer's Fully Qualified Domain Name
#                 for network printers.
#                 e.g. myprinter.example.com
#
#         Recommended values :
#
#             accounter: hardware(snmp)
#
#               Extracts the printer's internal page counter via SNMP.
#
#         Or :
#
#             accounter: hardware(pjl)
# 
#               Extracts the printer's internal page counter via PJL queries
#               over port tcp/9100.
#
#         Other Examples : 
#         
#             accounter: hardware(/usr/bin/snmpget -v1 -c public -Ov \
#               %(printer)s mib-2.43.10.2.1.4.1.1 | cut -f 2,2 -d " ")
#         
#         Another untested example, using npadmin :
#         
#             accounter: hardware(/usr/bin/npadmin --pagecount %(printer)s)
#         
#         Another example, for AppleTalk printers which works fine :
#         (You may need the pap CUPS backend installed, and copy the 
#         pagecount.ps file from untested/netatalk into /etc or any 
#         appropriate location)
#         
#             accounter: hardware(/usr/share/pykota/papwaitprinter.sh \
#                        "MyPrinter:LaserWriter@*" && /usr/bin/pap -p \
#                        "MyPrinter:LaserWriter@*" /usr/share/pykota/pagecount.ps \
#                         2>/dev/null | /bin/grep -v status | /bin/grep \
#                         -v Connect | /usr/bin/tail -1)
#         
#         An example for parallel printers like the HP Laserjet 5MP :
#         
#             accounter: hardware(/bin/cat /usr/share/pykota/pagecount.pjl \
#                 >/dev/lp0 && /usr/bin/head -2 </dev/lp0 | /usr/bin/tail -1)
#         
#         This value can be set either globally or per printer or both.
#         If both are defined, the printer option has priority.
#         
#         Some examples and comments provided by Bob Martel from csuohio.edu
#         
#         For several printers I could not get the page count using snmpget.  I
#         resorted to snmpwalk:
#         
#             accounter: hardware(/opt/local/net-snmp/bin/snmpwalk -v 1 -Cc \
#                                 -c public %(printer)s | grep \
#                                 mib-2.43.10.2.1.4.1.1 | cut -d " " -f4)
#         
#         The last example is still more ugly, some of the printers only provided
#         their counters without names, but at least always on the same line:
#         
#             accounter: hardware(/opt/local/net-snmp/bin/snmpwalk \
#                                 -v 1 -Cc -c public -Ov %(printer)s | \
#                                 grep Counter32 | tail -2 | head -1 | cut -d " " -f2)
#         
#         An example using netcat and a preformatted PJL job which you can find
#         in the untested/pjl directory, which is sent to a JetDirect print
#         server on port 9100 :
#         
#             accounter: hardware(/bin/nc -w 2 %(printer)s 9100 \
#                        </usr/share/pykota/pagecount.pjl | /usr/bin/tail -2)
#         
#         An example using the contributed pagecount.pl script which does 
#         the same as above, but should work on more printers : 
#         
#             accounter: hardware(LC_ALL=C /usr/share/pykota/pagecount.pl \
#                                 %(printer)s 9100)
#         
#         NB : the LC_ALL=C is used because sometimes Perl can correctly set
#              locale and is verbose about it, causing PyKota to miss the
#              correct answer.
#
#         WARNING : In any case, when using an hardware accounter, please test
#                   the command line outside of PyKota before. This will save
#                   you some headaches in case it doesn't work as expected.
#         
#         The waitprinter.sh is there to wait until the printer is idle again.
#         This should prevent a job to be sent to the printer while another one is 
#         not yet finished (not all pages are printed, but the complete job is in 
#         the printer)
#         
#   YOU ABSOLUTELY HAVE TO BE SURE YOU HAVE A SCRIPT WHICH WAITS FOR THE
#   PRINTER BEING READY BEFORE ASKING FOR ITS INTERNAL PAGE COUNTER.
#         
#   PYKOTA INCLUDES SUCH SCRIPTS FOR SNMP AND APPLETALK PRINTERS, MORE TO COME
#
#   SOME OF THE ABOVE EXAMPLES DON'T USE SUCH A SCRIPT, YOU HAVE BEEN WARNED
#
#
#   WITH THE SPECIAL MAGIC hardware(snmp) AND hardware(pjl) VALUES, PYKOTA
#   TAKES CARE OF ALL THIS FOR YOU, SO PLEASE UNDERSTAND THAT IT IS PREFERABLE
#   TO USE THESE TWO METHODS : THEY WORK FINE, REQUIRE LITTLE TO NO CPU,
#   AND DO ALL THE HARD WORK AUTOMATICALLY. IF YOU REALLY NEED TO YOU CAN USE
#   YOUR OWN EXTERNAL COMMANDS AS DESCRIBED ABOVE, JUST BE CAREFUL WITH THIS.
#         
#
#    - software : delegates the job's size computation to any 
#                 external command of your choice. 
#
#                 best choice for this is probably to set it
#                 this way :
#
#                   accounter: software(/usr/bin/pkpgcounter)
#
#                 pkpgcounter is a command line tool which is
#                 part of PyKota and which can handle both
#                 DSC compliant or binary PostScript, PCL5, PCL6 (aka PCLXL)
#                 and PDF documents. More file formats will be added
#                 in the future, as time permits.
#
#                 while pkpgcounter is the recommended value
#                 you can use whatever command you want provided
#                 that your command accepts the job's data on its
#                 standard input and prints the job's size in pages
#                 as a single integer on its standard output.
# 
# This value can be set either globally or on a per printer basis
# If both are defined, the printer option has priority.
#
# accounter: hardware(/usr/share/pykota/waitprinter.sh %(printer)s && \
#                     /usr/bin/snmpget -v1 -c public -Ov %(printer)s \
#                     mib-2.43.10.2.1.4.1.1 | cut -f 2,2 -d " ")
# accounter: hardware(snmp)
# accounter: hardware(pjl)
accounter: software(/usr/bin/pkpgcounter)

# What should we do if the accounter's subprocess doesn't return
# a valid result (for example doesn't return an integer on its stdout)
#
# Valid values are : 'continue' and 'stop'. 'stop' is the default
# if unset.
#
# 'continue' means try to process as usual, this may introduce
# accounting errors and free jobs. This was the default behavior
# until v1.20alpha5.
#
# 'stop' means fail and stop the print queue. If an accounter
# error occurs, most of the time this is a misconfiguration, so
# stopping the print queue is usually the better thing to do 
# until the admin has fixed the configuration.
#
# This value can be set either globally or on a per printer basis
# If both are defined, the printer option has priority.
#
# onaccountererror: continue
onaccountererror: stop

# Print Quota administrator
# These values can be set either globally or per printer or both.
# If both are defined, the printer option has priority.
# If these values are not set, the default admin root 
# and the default adminmail root@localhost are used.
admin: Sergio González González
adminmail: root@localhost

#
# Who should we send an email to in case a quota is reached ?
# possible values are : DevNull, User, Admin, Both, External(some command)
# The Both value means that the User and the Admin will receive 
# an email message.
# The DevNull value means no email message will be sent.
# This value can be set either globally or per printer or both.
# If both are defined, the printer option has priority.
# If the value is not set, then the default BOTH applies.
#
#   Format of the external syntax :
#
#       mailto: external(/usr/bin/mycommand >/dev/null)
#
#   You can use :
#
#       '%(action)s'            will contain either WARN or DENY
#       '%(username)s'          will contain the user's name
#       '%(printername)s'       will contain the printer's name
#       '%(email)s'             will contain the user's email address
#       '%(message)s'           will contain the message if you want 
#                               to use it.
#
#   On your command line, to pass arguments to your command.
#   Example :
#
#       mailto: external(/usr/bin/callpager %(username)s \
#                        "Quota problem on %(printername)s" >/dev/null)
#
#   To automatically send a WinPopup message (this may only work with a PDC, 
#   here the same machine does Samba as PDC + CUPS) :
#
#       mailto: external(echo "%(message)s"  | /usr/bin/iconv --to-code utf-8 \
#        --from-code iso-8859-15 | /usr/bin/smbclient -M "%(username)s" 2>&1 >/dev/null)
#
#   NB : I use ISO-8859-15, but Windows expects UTF-8, so we pipe the message
#        into iconv before sending it to the Windows user.
#
# or more simply :
#
#       mailto: external(/usr/share/pykota/mailandpopup.sh %(username)s \
#                        %(printername)s "%(email)s" "%(message)s" 2>&1 >/dev/null)
#
#   NB : The mailandpopup.sh shell script is now included in PyKota
#
#   NB : in ANY case, don't forget to redirect your command's standard output
#        somewhere (e.g. >/dev/null) so that there's no perturbation to the 
#        underlying layer (filter or backend)
#
mailto: both

#
# Grace delay in days
# This value can be set either globally or per printer or both.
# If both are defined, the printer option has priority.
# If the value is not set then the default seven (7) days applies.
gracedelay: 7

#
# Poor man's threshold
# If account balance reaches below this amount,
# a warning message is sent by email
#
# If unset, default poor man's threshold is 1.0.
# This option can only appear in the global section
poorman: 2.0

# Poor man's warning message
# The warning message that is sent if the "poorman" value is reached
# Again this must appear in the global section
poorwarn: Su saldo en la cuota de impresión es bajo.
 Dentro de poco no podrá volver a imprimir.

# Soft limit reached warning message
# The warning message that is sent if the soft quota limit is reached
# May appear either globally or on a per-printer basis
softwarn: Ha alcanzado su límite blando en la cuota de impresión.
 Esto significa que podrá seguir imprimiendo algún tiempo,
 pero debería contactar con su administrador para comprar
 más cuota de impresión.
 
# Hard limit reached error message
# The error message that is sent if the hard quota limit is reached
# May appear either globally or on a per-printer basis
hardwarn: Ha alcanzado su límite duro en la cuota de impresión.
 Esto significa que no podrá volver a imprimir.
 Contacte con su administrador en <root@gsr.pt> tan
 pronto como le sea posible para solucionar el
 problema.

# one section per printer, or no other section at all if all options 
# are defined globally.
# Each section's name must be the same as the printer's queue name as defined
# in your printing system, be it CUPS or LPRng, between square brackets, for
# example a print queue named 'hpmarketing' would appear in this file as
# [hpmarketing]


# Default policy to apply when either :
#
#       - Printer doesn't exist in PyKota's database
#       - User doesn't exist in PyKota's database
#       - User has no quota entry for this Printer in PyKota's database
#
# Value can be either allow or deny or external(some command here)
#
# This value can be set either globally or per printer or both.
# If both are defined, the printer option has priority.
# If the value is not set then the default policy DENY applies.
# There's no policy wrt inexistant groups, they are ignored.
#
# external policy can be used to launch any external command of your choice,
# for example to automatically add the user to the quota storage 
# if he is unknown. Example :
# 
#   policy: external(/usr/bin/edpykota --add --printer %(printername)s \
#                    --softlimit 50 --hardlimit 60 %(username)s >/dev/null) 
#
# NB : If you want to limit users by their account balance value, it is preferable to
# use the following policy to automate user account creation on first print :
#
#   policy: external(/usr/bin/autopykota --initbalance 25.0 >/dev/null) 
#
#   This will automatically add the user if he doesn't already exist, and
#   set his initial balance value to 25.0 (for example). If the user already 
#   exists then his balance value will not be modified. 
#   Please don't use autopykota if you want to limit your users by page
#   quota, and in any case, carefully read autopykota's help or manpage
#   and understand its goal before using it in your own configuration.
#
# Of course you can launch any command of your choice with this, e.g. :
#
#   policy: external(/usr/local/bin/myadminscript.sh %(username)s >/dev/null)

# You can use :
#
#       '%(username)s'          will contain the user's name
#       '%(printername)s'       will contain the printer's name
#
#   On your command line, to pass arguments to your command. 
#
#   NB : Don't forget to redirect your command's standard output somewhere 
#        (e.g. >/dev/null) so that there's no perturbation to the underlying
#        layer (filter or backend)
#
# If the printer, user, or user quota entry still doesn't exist after 
# external policy command was launched (the external command didn't add it), 
# or if an error occured during the execution of the external policy 
# command, then the job is rejected.
#
policy: deny

# Pre and Post Hooks 
# These directives allow the easy plug-in of any command of your choice
# at different phases of PyKota's execution.
# Pre and Post Hooks can access some of PyKota's internal information
# by reading environment variables as described below.
# The actual phase of PyKota's execution is available in the
# PYKOTAPHASE environment variable.
# Pre and Post Hooks can be defined either globally, per printer,
# or both. If both are defined, the printer specific hook has
# priority.
#
# List of available environment variables :
# NB : Most of these variables are also available during the execution
# of external commands defined in the accounter and mailto 
# directives.
#
# PYKOTAMD5SUM : Contains an hexadecimal digest of the md5 sum of the job's datas
# PYKOTAPHASE : BEFORE or AFTER the job is sent to the printer
# PYKOTAACTION : ALLOW or DENY or WARN for current print job
# PYKOTAUSERNAME : user's name
# PYKOTAPRINTERNAME : printer's name
# PYKOTAPGROUPS : list of printers groups the current printer is a member of
# PYKOTAJOBID : job's id
# PYKOTATITLE : job's title
# PYKOTAFILENAME : job's filename
# PYKOTACOPIES : number of copies
# PYKOTAOPTIONS : job's options
# PYKOTABALANCE : user's account balance
# PYKOTALIFETIMEPAID : user's grand total paid 
# PYKOTALIMITBY : user print limiting factor, for example 'quota' or 'balance'
# PYKOTAPAGECOUNTER : user's page counter on this printer
# PYKOTALIFEPAGECOUNTER : user's life time page counter on this printer
# PYKOTASOFTLIMIT : user's soft page limit on this printer
# PYKOTAHARDLIMIT : user's hard page limit on this printer
# PYKOTADATELIMIT : user's soft to hard limit date limit on this printer
# PYKOTASTATUS : contains "CANCELLED" when SIGTERM was received by PyKota
#                else is not set.
# PYKOTAJOBSIZEBYTES : contains the job's size in bytes. Always available.
# PYKOTAPRECOMPUTEDJOBSIZE : contains the precomputed job's size (with enforcement: strict)
# PYKOTAPRECOMPUTEDJOBPRICE : contains the precomputed job's price (with enforcement: strict)
# PYKOTAJOBORIGINATINGHOSTNAME : contains the client's hostname if 
#                                it is possible to retrieve it.
# PYKOTAPRINTERHOSTNAME : the printer's hostname or IP address for network
#                         printers, or "localhost" if not defined or not
#                         meaningful.

# PreHook : gets executed after being sure the user, printer and user quota
# entry on the printer both exist in the PyKota database, and after
# checking if the user is allowed to print or not, but just before
# the job is sent to the printer (if allowed)
# prehook has access to many environment variables :
#
# PYKOTAACTION contains either "ALLOW", "WARN" or "DENY" and 
# represents the action which is to be done wrt the print job.
# PYKOTAPHASE contains 'BEFORE' during execution of prehook 
#
# uncomment the line below to see what environment variables are available
# prehook: /usr/bin/printenv >/tmp/before

# PostHook : gets executed after the job has been added to the history.
# posthook has access to all the environment variables defined above,
# as well as two additionnal environment variables : PYKOTAJOBPRICE 
# and PYKOTAJOBSIZE. 
# PYKOTAPHASE contains 'AFTER' during execution of posthook.
#
# uncomment the line below to see what environment variables are available
# posthook: /usr/bin/printenv >/tmp/after

# How should enforcement be done for this printer ?
#
# "laxist" is the default if value is not set, and allows users
# to be over quota on their last job. 
#
# "strict" tries to prevent users from ever being over quota.
#
# Enforcement can be defined either globally, per printer,
# or both. If both are defined, the printer specific enforcement 
# setting has priority. 
#
# valid values : "strict" or "laxist"
#
# default value
# enforcement : laxist
enforcement : strict
/etc/pykota/pykotadmin.conf
# PyKota sample administrator's configuration file
#
# Copy it into the /etc/pykota/ directory under
# the /etc/pykota/pykotadmin.conf name, and 
# ensure that only the root user and the user
# the printing system is run as can read it.
#
# Under NO circumstances regular users should 
# be allowed to read this file.
#
# PyKota - Print Quotas for CUPS and LPRng
#
# (c) 2003-2004 Jerome Alet <alet@librelogiciel.com>
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307, USA.
#
# $Id: pykotadmin.conf.sample,v 1.2 2004/01/08 14:10:32 jalet Exp $
#

#
# THIS FILE CONTAINS SENSITIVE DATAS LIKE A USERNAME AND PASSWORD
# WHICH ALLOW READ/WRITE ACCESS TO YOUR PRINT QUOTA DATABASE.
#
# ONLY THE root USER AND THE USER THE PRINTING SYSTEM IS RUN AS
# (e.g. lp) SHOULD BE ALLOWED TO READ THIS FILE !
#

#
# THIS FILE CAN ONLY CONTAIN A [global] SECTION AND TWO FIELDS
# NAMED storageadmin AND storageadminpw
#

[global]

# Quota Storage administrator's name and password
storageadmin: cn=pykotaadmin,dc=gsr,dc=pt
storageadminpw: **********
/var/www/phpldapadmin/config.php
<?php

/*
 *                  The phpLDAPadmin config file
 *
 *   This is where you customize phpLDAPadmin. The most important
 *   part is immediately below: The "LDAP Servers" section.
 *   You must specify at least one LDAP server there. You may add
 *   as many as you like. You can also specify your language, and
 *   many other options.
 *
 */

// Your LDAP servers
$i=0;
$servers = array();

/*  A convenient name that will appear in the tree viewer and throughout
    phpLDAPadmin to identify this LDAP server to users. */
$servers[$i]['name'] = 'TodoSCSI';    

/*  Examples:

       'ldap.example.com', 
       'ldaps://ldap.example.com/',
       'ldapi://%2fusr%local%2fvar%2frun%2fldapi'
        (Unix socket at /usr/local/var/run/ldap)

    Note: Leave 'host' blank to make phpLDAPadmin ignore this server. */
$servers[$i]['host'] = 'ldap://gsr.pt';  

/*  The base DN of your LDAP server. Leave this blank to have phpLDAPadmin
    auto-detect it for you. */
$servers[$i]['base'] = 'dc=gsr,dc=pt';

/*  The port your LDAP server listens on (no quotes). 389 is standard. */
$servers[$i]['port'] = 389;

/*  Three options for auth_type: 

       1. 'cookie': you will login via a web form, and a client-side cookie will
          store your login dn and password. 
       2. 'session': same as cookie but your login dn and password are stored on
          the web server in a session variable.
       3. 'config': specify your login dn and password here in this config file.
          No login will be required to use phpLDAPadmin for this server. 

    Choose wisely to protect your authentication information appropriately
    for your situation. */
$servers[$i]['auth_type'] = 'session';

/* The DN of the user for phpLDAPadmin to bind with. For anonymous binds or
   'cookie' or 'session' auth_types, leave the login_dn and login_pass blank.
   If you specify a login_attr in conjunction with a cookie or session auth_type,
   then you can also specify the login_dn/login_pass here for searching the
   directory for users (ie, if your LDAP server does not allow anonymous binds. */
$servers[$i]['login_dn'] = 'cn=admin,dc=gsr,dc=pt';

/* Your LDAP password. If you specified an empty login_dn above, this MUST
   also be blank. */
$servers[$i]['login_pass'] = '';

/* Use TLS (Transport Layer Security) to connect to the LDAP server. */
$servers[$i]['tls'] = true;

/* If the link between your web server and this LDAP server is slow, it is
   recommended that you set 'low_bandwidth' to true. This will cause
   phpLDAPadmin to forego some "fancy" features to conserve bandwidth. */
$servers[$i]['low_bandwidth'] = false;

/*  Default password hashing algorithm. One of md5, ssha, sha, md5crpyt,
    smd5, blowfish, crypt or leave blank for now default algorithm. */
$servers[$i]['default_hash'] = 'crypt';

/* If you specified 'cookie' or 'session' as the auth_type above, you can optionally
   specify here an attribute to use when logging in. If you enter 'uid' and login as
   'dsmith', phpLDAPadmin will search for (uid=dsmith) and log in as that user. Leave
   blank or specify 'dn' to use full DN for logging in. Note also that if your LDAP
   server requires you to login to perform searches, you can enter the DN to use when
   searching in 'login_dn' and 'login_pass' above. */
$servers[$i]['login_attr'] = 'dn';

/* If 'login_attr' is used above such that phpLDAPadmin will search for your DN
   at login, you may restrict the search to a specific objectClass.
   E.g., set this to 'posixAccount' or 'inetOrgPerson', depending upon your setup. */
$servers[$i]['login_class'] = '';

/* Specify true If you want phpLDAPadmin to not display or permit any
   modification to the LDAP server. */
$servers[$i]['read_only'] = false;

/* Specify false if you do not want phpLDAPadmin to draw the 'Create new'
   links in the tree viewer. */
$servers[$i]['show_create'] = true;

/* This feature allows phpLDAPadmin to automatically determine the next
   available uidNumber for a new entry. */
$servers[$i]['enable_auto_uid_numbers'] = true;

/* The mechanism to use when finding the next available uidNumber. Two possible
   values: 'uidpool' or 'search'. The 'uidpool' mechanism uses an existing
   uidPool entry in your LDAP server to blindly lookup the next available
   uidNumber. The 'search' mechanism searches for entries with a uidNumber value
   and finds the first available uidNumber (slower). */
$servers[$i]['auto_uid_number_mechanism'] = 'search'; 

/* The DN of the search base when the 'search' mechanism is used above. */
$servers[$i]['auto_uid_number_search_base'] = 'ou=people,dc=gsr,dc=pt'; 

/* The minimum number to use when searching for the next available UID number
   (only when 'search' is used for auto_uid_number_mechanism' */
$servers[$i]['auto_uid_number_min'] = 1000;

/* The DN of the uidPool entry when 'uidpool' mechanism is used above. */
$servers[$i]['auto_uid_number_uid_pool_dn'] = 'cn=uidPool,dc=example,dc=com'; 

/* If you set this, then phpldapadmin will bind to LDAP with this user
   ID when searching for the uidnumber. The idea is, this user id would
   have full (readonly) access to uidnumber in your ldap directory (the
   logged in user may not), so that you can be guaranteed to get a unique
   uidnumber for your directory. */
$servers[$i]['auto_uid_number_search_dn'] = '';

/* The password for the dn above */
$servers[$i]['auto_uid_number_search_dn_pass'] = '';



// If you want to configure additional LDAP servers, do so below.
#$i++;
#servers[$i]['name'] = 'Another server';
#servers[$i]['host'] = '';
#servers[$i]['base'] = 'dc=gsr,dc=pt';
#servers[$i]['port'] = 636;
#servers[$i]['auth_type'] = 'session';
#servers[$i]['login_dn'] = '';
#servers[$i]['login_pass'] = '';
#servers[$i]['tls'] = true;
#servers[$i]['low_bandwidth'] = false;
#servers[$i]['default_hash'] = 'crypt';
#servers[$i]['login_attr'] = 'dn';
#servers[$i]['login_class'] = '';
#servers[$i]['read_only'] = false;
#servers[$i]['show_create'] = true;
#servers[$i]['enable_auto_uid_numbers'] = false;
#servers[$i]['auto_uid_number_mechanism'] = 'search'; 
#servers[$i]['auto_uid_number_search_base'] = 'ou=People,dc=example,dc=com'; 
#servers[$i]['auto_uid_number_min'] = 1000;
#servers[$i]['auto_uid_number_uid_pool_dn'] = 'cn=uidPool,dc=example,dc=com';

// If you want to configure more LDAP servers, copy and paste the above 
// (including the "$i++;")

// The temporary storage directory where we will put jpegPhoto data
// This directory must be readable and writable by your web server 
$jpeg_temp_dir = "/tmp";       // Example for Unix systems
//$jpeg_temp_dir = "c:\\temp"; // Example for Windows systems

/**                            **/
/**   Appearance and Behavior  **/
/**                            **/

// Aliases and Referrrals
//
// Similar to ldapsearh's -a option, the following options allow you to configure 
// how phpLDAPadmin will treat aliases and referrals in the LDAP tree. 
// For the following four settings, avaialable options include:
//
//    LDAP_DEREF_NEVER     - aliases are never dereferenced (eg, the contents of 
//                           the alias itself are shown and not the referenced entry).
//    LDAP_DEREF_SEARCHING - aliases should be dereferenced during the search but
//                           not when locating the base object of the search.
//    LDAP_DEREF_FINDING   - aliases should be dereferenced when locating the base
//                           object but not during the search.
//    LDAP_DEREF_ALWAYS    - aliases should be dereferenced always (eg, the contents
//                           of the referenced entry is shown and not the aliasing entry)

// How to handle references and aliases in the search form. See above for options.
$search_deref = LDAP_DEREF_ALWAYS; 

// How to handle references and aliases in the tree viewer. See above for options.
$tree_deref = LDAP_DEREF_NEVER;

// How to handle references and aliases for exports. See above for options.
$export_deref = LDAP_DEREF_NEVER;

// How to handle references and aliases when viewing entries. See above for options.
$view_deref = LDAP_DEREF_NEVER;


// The language setting. If you set this to 'auto', phpLDAPadmin will 
// attempt to determine your language automatically. Otherwise, available 
// lanaguages are: 'ct', 'de', 'en', 'es', 'fr', 'it', 'nl', and 'ru'
// Localization is not complete yet, but most strings have been translated.
// Please help by writing language files. See lang/en.php for an example.
$language = 'auto';

// Set to true if you want to draw a checkbox next to each entry in the tree viewer
// to be able to delete multiple entries at once
$enable_mass_delete = false;

// Set to true if you want LDAP data to be displayed read-only (without input fields)
// when a user logs in to a server anonymously
$anonymous_bind_implies_read_only = true;

// Set to true if you want phpLDAPadmin to redirect anonymous 
// users to a search form with no tree viewer on the left after
// logging in.
$anonymous_bind_redirect_no_tree = false;

// If you used auth_type 'form' in the servers list, you can adjust how long the
// cookie will last (default is 0 seconds, which expires when you close the browser)
$cookie_time = 0; // seconds

// How many pixels wide do you want your left frame view (for the tree browser)
$tree_width = 320; // pixels

// How long to keep jpegPhoto temporary files in the jpeg_temp_dir directory
// (in seconds)
$jpeg_tmp_keep_time = 120; // seconds

// Would you like to see helpful hint text occacsionally?
$show_hints = true; // set to false to disable hints

// When using the search page, limit result size to this many entries
$search_result_size_limit = 50;

// If true, display password values as ******. Otherwise display them in clear-text
// If you use clear-text passwords, it is recommended to set this to true. If you use
// hashed passwords (sha, md5, crypt, etc), hashed passwords are already obfuscated by 
// the hashing algorithm and this should probably be left false.
$obfuscate_password_display = false;

/**                              **/
/** Simple Search Form Config **/
/**                              **/

// Which attributes to include in the drop-down menu of the simple search form
// (comma-separated) Change this to suit your needs for convenient searching.
// Be sure to change the corresponding list below ($search_attributes_display)
$search_attributes = "uid, cn, gidNumber, objectClass, telephoneNumber, mail, street";

// This list corresponds to the list directly above. If you want to present
// more readable names for your search attributes, do so here. Both lists
// must have the same number of entries.
$search_attributes_display = "User Name, Common Name, Group ID, Object Class, Phone \
                              Number, Email, Address";

// The list of attributes to display in each search result entry. 
// Note that you can add * to the list to display all attributes
$search_result_attributes = "cn, sn, uid, postalAddress, telephoneNumber"; 

// You can re-arrange the order of the search criteria on the simple search
// form by modifying this array. You cannot however change the names of the
// criteria. Criteria names will be translated at run-time.
$search_criteria_options = array( "equals", "starts with", "contains", \
                                  "ends with", "sounds like" );

// If you want certain attributes to be editable as multi-line, include them
// in this list. A multi-line textarea will be drawn instead of a single-line text field
$multi_line_attributes = array( "postalAddress", "homePostalAddress", "personalSignature" );

// A list of syntax OIDs which support multi-line attribute values:
$multi_line_syntax_oids = array( 
                            // octet string syntax OID:
                            "1.3.6.1.4.1.1466.115.121.1.40", 
                            // postal address syntax OID:
                            "1.3.6.1.4.1.1466.115.121.1.41"  );

/**                                         **/
/** User-friendly attribute translation     **/
/**                                         **/

$friendly_attrs = array();

// Use this array to map attribute names to user friendly names. For example, if you
// don't want to see "facsimileTelephoneNumber" but rather "Fax".

$friendly_attrs[ 'facsimileTelephoneNumber' ] =         'Fax';
$friendly_attrs[ 'telephoneNumber' ]  =                 'Phone';

/**                                         **/
/** Hidden attributes                       **/
/**                                         **/

// You may want to hide certain attributes from being displayed in the editor screen
// Do this by adding the desired attributes to this list (and uncomment it). This
// only affects the editor screen. Attributes will still be visible in the schema
// browser and elsewhere. An example is provided below:

//$hidden_attrs = array( 'jpegPhoto', 'objectClass' );

/**                                         **/
/** Read-only attributes                    **/
/**                                         **/

// You may want to phpLDAPadmin to display certain attributes as read only, meaning
// that users will not be presented a form for modifying those attributes, and they
// will not be allowed to be modified on the "back-end" either. You may configure
// this list here:

//$read_only_attrs = array( 'objectClass' );

// An example of how to specify multiple read-only attributes:
// $read_only_attrs = array( 'jpegPhoto', 'objectClass', 'someAttribute' );

/**                                         **/
/** Predefined Queries (canned views)       **/
/**                                         **/

// To make searching easier, you may setup predefined queries below
// (activate the lines by removing "//")
//$q=0;
//$queries = array();
// /* The name that will appear in the simple search form */
//$queries[$q]['name'] = 'Samba Users';
// /* The ldap server to query, must be defined in the $servers list above */
//$queries[$q]['server'] = '0';
// /* The base to search on */
//$queries[$q]['base'] = 'dc=gsr,dc=pt';
// /* The search scope (sub, base, one) */
//$queries[$q]['scope'] = 'sub';
// /* The LDAP filter to use */
//$queries[$q]['filter'] = '(&(objectclass=sambaAccount)(objectClass=posixAcount))'; 
// /* The attributes to return */
//$queries[$q]['attributes'] = 'uid, smbHome, uidNumber'; 


// Add more pre-defined queries by copying the text below
//$q++;
//$queries[$q]['name'] = 'Organizations';
//$queries[$q]['server'] = '0';
//$queries[$q]['base'] = 'dc=gsr,dc=pt';
//$queries[$q]['scope'] = 'sub';
//$queries[$q]['filter'] = '(|(objeCtclass=organization)(objectClass=organizationalUnit))';
//$queries[$q]['attributes'] = 'ou, o';

//$q++;
//$queries[$q]['name'] = 'Last name starts with S';
//$queries[$q]['server'] = '0';
//$queries[$q]['base'] = 'dc=gsr,dc=pt';
//$queries[$q]['scope'] = 'sub';
//$queries[$q]['filter'] = '(sn=s*)';
//$queries[$q]['attributes'] = '*';

?>
/var/www/phpldapadmin/templates/template_config.php
<?php
// $Header: /cvsroot/phpldapadmin/phpldapadmin/templates/template_config.php,v \
                                          1.17 2004/05/08 11:14:55 xrenard Exp $

/**
 * template_config.php
 * -------------------
 * General configuration file for templates.
 * File Map:
 * 1 - Generic templates configuration
 * 2 - Samba template configuration
 * 3 - method used in template and other files
 */


/*######################################################################################
## Templates for entry creation                                                       ##
## ----------------------------                                                       ##
##                                                                                    ##
## Fill in this array with templates that you can create to suit your needs.          ##
## Each entry defines a description (to be displayed in the template list) and        ##
## a handler, which is a file that will be executed with certain POST vars set.       ##
## See the templates provided here for examples of how to make your own template.     ##
##                                                                                    ##
######################################################################################*/


$templates = array();

$templates[] =
        array(  'desc'    => 'User Account',
                'icon'    => 'images/user.png',
                'handler' => 'new_user_template.php' );
		// You can use the 'regexp' directive to restrict where
		// entries can be created for this template
                //'regexp' => '^ou=People,o=.*,c=.*$'
		//'regexp' => '^ou=People,dc=.*,dc=.*$'

$templates[] =
        array(  'desc'    => 'Address Book Entry (inetOrgPerson)',
                'icon'    => 'images/user.png',
                'handler' => 'new_address_template.php' );

$templates[] =
        array(  'desc'    => 'Kolab User Entry',
                'icon'    => 'images/user.png',
                'handler' => 'new_kolab_template.php' );

$templates[] =
        array(  'desc'    => 'Organizational Unit',
                'icon'    => 'images/ou.png',
                'handler' => 'new_ou_template.php' );

$templates[] =
        array(  'desc'    => 'Posix Group',
                'icon'    => 'images/ou.png',
                'handler' => 'new_posix_group_template.php' );

$templates[] =
        array(  'desc'    => 'Samba NT Machine',
                'icon'    => 'images/nt_machine.png',
                'handler' => 'new_nt_machine.php' );
$templates[] =
        array(  'desc'    => 'Samba 3 NT Machine',
                'icon'    => 'images/nt_machine.png',
                'handler' => 'new_smb3_nt_machine.php' );
/*$templates[] =
        array(  'desc'    => 'Samba  User',
                'icon'    => 'images/nt_user.png',
                'handler' => 'new_smbuser_template.php' );
*/
$templates[] =
        array(  'desc'    => 'Samba 3 User',
                'icon'    => 'images/nt_user.png',
                'handler' => 'new_smb3_user_template.php' );
$templates[] =
        array(  'desc'    => 'Samba 3 Group Mapping',
                'icon'    => 'images/ou.png',
                'handler' => 'new_smbgroup_template.php' );

$templates[] =
        array(  'desc'    => 'DNS Entry',
                'icon'    => 'images/dc.png',
                'handler' => 'new_dns_entry.php' );

$templates[] =
	array(  'desc'    => 'Simple Security Object',
		'icon'    => 'images/user.png',
		'handler' => 'new_security_object_template.php' ); 

$templates[] =
	array(  'desc'    => 'Custom',
		'icon'    => 'images/object.png',
		'handler' => 'custom.php' ); 


/*#####################################################################################
## POSIX GROUP TEMPLATE CONFIGURATION                                                ##
## ----------------------------------                                                ##
##                                                                                   ##  
#####################################################################################*/

// uncomment to set the base dn of posix groups
// default is set to the base dn of the server
$base_posix_groups="ou=groups,dc=gsr,dc=pt";




/*######################################################################################
##  SAMBA TEMPLATE CONFIGURATION                                                      ##
##  ----------------------------                                                      ##
##                                                                                    ##
##  In order to use the samba templates, you might edit the following properties:     ##  
##  1 - $mkntpwdCommand : the path to the mkntpwd utility provided with/by Samba.     ##
##  2 - $default_samba3_domains : the domain name and the domain sid.                 ##   
##                                                                                    ##
######################################################################################*/

// path 2 the mkntpwd utility (Customize)
$mkntpwdCommand = "/usr/sbin/smbldap-passwd";

// Default domains definition (Customize)
//   (use `net getlocalsid` on samba server)
$default_samba3_domains = array();
$default_samba3_domains[] =
        array(  'name'   => 'GSRDOMAIN',
                'sid' => 'S-1-5-21-2817058862-34499604-3382793611' );

// The base dn of samba group. (CUSTOMIZE)
$samba_base_groups = "ou=groups,dc=gsr,dc=pt";


//Definition of built-in local groups
$built_in_local_groups = array(
                "S-1-5-21-2817058862-34499604-3382793611-512" => "Administrators",
                "S-1-5-21-2817058862-34499604-3382793611-513" => "Users",
                "S-1-5-21-2817058862-34499604-3382793611-514" => "Guests",
                "S-1-5-21-2817058862-34499604-3382793611-21007" => "Power Users",
                "S-1-5-21-2817058862-34499604-3382793611-21009" => "Account Operators",
                "S-1-5-21-2817058862-34499604-3382793611-21011" => "Server Operators",
                "S-1-5-21-2817058862-34499604-3382793611-2101" => "Print Operators",
                "S-1-5-21-2817058862-34499604-3382793611-21015" => "backup Operators",
                "S-1-5-21-2817058862-34499604-3382793611-21017" => "Replicator" );


/*######################################################################################
##  Methods used in/by templates                                                      ## 
##  ----------------------------                                                      ##
######################################################################################*/

/*
 * Returns the name of the template to use based on the DN and
 * objectClasses of an entry. If no specific modification
 * template is available, simply return 'default'. The caller
 * should append '.php' and prepend 'templates/modification/'
 * to the returned string to get the file name.
 */

function get_template( $server_id, $dn )
{
        // fetch and lowercase all the objectClasses in an array
        $object_classes = get_object_attr( $server_id, $dn, 'objectClass', true );

        if( $object_classes === null || $object_classes === false)
                return 'default';

        foreach( $object_classes as $i => $class )
                $object_classes[$i] = strtolower( $class );

        $rdn = get_rdn( $dn );
	if( in_array( 'groupofnames', $object_classes ) || 
	    in_array( 'groupofuniquenames', $object_classes ) )
	    	return 'group_of_names';
	/*
        if( in_array( 'person', $object_classes ) &&
            in_array( 'posixaccount', $object_classes ) )
                return 'user';
	*/
	// TODO: Write other templates and criteria therefor
	// else if ...
	//    return 'some other template';
	// else if ...
	//    return 'some other template';
	// etc.

	return 'default';
}

/**
 * Return the domains info
 *  
 */

function get_samba3_domains(){
  global $default_samba3_domains;

  // do the search for the sambadomainname object here
  // In the meantime, just return the default domains
  return $default_samba3_domains;
}


/**
 * Utily class to get the samba passwords.
 */

class MkntPasswdUtil{


  var $clearPassword = NULL;
  var $sambaPassword ;
  function MkntPasswdUtil(){
    $sambaPassword = array("sambaLMPassword" => NULL,
			   "sambaNTPassword" => NULL);
  }
  
  function createSambaPasswords($password){
    global $mkntpwdCommand;
    $this->clearPassword = $password;
    file_exists ( $mkntpwdCommand ) && is_executable ( $mkntpwdCommand ) or \
                  pla_error(' Unable to create the Samba passwords. Please, \
                  check the configuration in template_config.php');
    $sambaPassCommand = $mkntpwdCommand . " " . $password;
    if($sambaPassCommandOutput = shell_exec($sambaPassCommand)){
      $this->sambaPassword['sambaLMPassword'] = trim( substr( \
             $sambaPassCommandOutput , 0 , strPos( $sambaPassCommandOutput,':' ) ) );
      $this->sambaPassword['sambaNTPassword'] = trim( substr( \
             $sambaPassCommandOutput, strPos( $sambaPassCommandOutput ,':' ) +1 ) );
      return true;
    }
    else{
      return false;
    }
  }

  function getSambaLMPassword(){
    return $this->sambaPassword['sambaLMPassword'];
  }

  function getSambaNTPassword(){
    return $this->sambaPassword['sambaNTPassword'];
  }
  
  function getSambaClearPassword(){
    return $this->clearPassword;
  }
  
  function valueOf($key){
    return  $this->sambaPassword[$key];
  }

}


/**
 * Return posix group entries
 *
 */

function get_posix_groups( $server_id , $base_dn = NULL ){
  global $servers;
  if( is_null( $base_dn ) )
    $base_dn = $servers[$server_id]['base'];  
  
  $results = pla_ldap_search( $server_id, "objectclass=posixGroup", $base_dn, array() );
  if( !$results )
    return false;
  else
    return $results;
}
?>
/etc/smbldap-tools/smbldap.conf
# $Source: /opt/cvs/samba/smbldap-tools/smbldap.conf,v $
# $Id: smbldap.conf,v 1.14 2004/06/25 20:57:51 jtournier Exp $
#
# smbldap-tools.conf : Q & D configuration file for smbldap-tools

#  This code was developped by IDEALX (http://IDEALX.org/) and
#  contributors (their names can be found in the CONTRIBUTORS file).
#
#                 Copyright (C) 2001-2002 IDEALX
#
#  This program is free software; you can redistribute it and/or
#  modify it under the terms of the GNU General Public License
#  as published by the Free Software Foundation; either version 2
#  of the License, or (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program; if not, write to the Free Software
#  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
#  USA.

#  Purpose :
#       . be the configuration file for all smbldap-tools scripts

##############################################################################
#
# General Configuration
#
##############################################################################

# Put your own SID
# to obtain this number do: net getlocalsid
SID="S-1-5-21-2817058862-34499604-3382793611"

##############################################################################
#
# LDAP Configuration
#
##############################################################################

# Notes: to use to dual ldap servers backend for Samba, you must patch
# Samba with the dual-head patch from IDEALX. If not using this patch
# just use the same server for slaveLDAP and masterLDAP.
# Those two servers declarations can also be used when you have 
# . one master LDAP server where all writing operations must be done
# . one slave LDAP server where all reading operations must be done
#   (typically a replication directory)

# Ex: slaveLDAP=127.0.0.1
slaveLDAP="gsr.pt"
slavePort="389"

# Master LDAP : needed for write operations
# Ex: masterLDAP=127.0.0.1
masterLDAP="gsr.pt"
masterPort="389"

# Use TLS for LDAP
# If set to 1, this option will use start_tls for connection
# (you should also used the port 389)
ldapTLS="1"

# How to verify the server's certificate (none, optional or require)
# see "man Net::LDAP" in start_tls section for more details
verify="require"

# CA certificate
# see "man Net::LDAP" in start_tls section for more details
cafile="/etc/ldap/ssl/cacert.pem"

# certificate to use to connect to the ldap server
# see "man Net::LDAP" in start_tls section for more details
clientcert="/home/certs/ldap.cliente.cert.pem"

# key certificate to use to connect to the ldap server
# see "man Net::LDAP" in start_tls section for more details
clientkey="/home/certs/ldap.cliente.key.pem"

# LDAP Suffix
# Ex: suffix=dc=IDEALX,dc=ORG
suffix="dc=gsr,dc=pt"

# Where are stored Users
# Ex: usersdn="ou=Users,dc=IDEALX,dc=ORG"
usersdn="ou=people,${suffix}"

# Where are stored Computers
# Ex: computersdn="ou=Computers,dc=IDEALX,dc=ORG"
computersdn="ou=machines,${suffix}"

# Where are stored Groups
# Ex groupsdn="ou=Groups,dc=IDEALX,dc=ORG"
groupsdn="ou=groups,${suffix}"

# Where are stored Idmap entries (used if samba is a domain member server)
# Ex groupsdn="ou=Idmap,dc=IDEALX,dc=ORG"
#idmapdn="ou=Idmap,${suffix}"

# Where to store next uidNumber and gidNumber available
#sambaUnixIdPooldn="cn=NextFreeUnixId,${suffix}"

# Default scope Used
scope="sub"

# Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA)
hash_encrypt="MD5"

# if hash_encrypt is set to CRYPT, you may set a salt format.
# default is "%s", but many systems will generate MD5 hashed
# passwords if you use "$1$%.8s". This parameter is optional!
crypt_salt_format="%s"

##############################################################################
# 
# Unix Accounts Configuration
# 
##############################################################################

# Login defs
# Default Login Shell
# Ex: userLoginShell="/bin/bash"
userLoginShell="/bin/bash"

# Home directory
# Ex: userHome="/home/%U"
userHome="/home/samba/users/%U"

# Gecos
userGecos="System User"

# Default User (POSIX and Samba) GID
defaultUserGid="1001"

# Default Computer (Samba) GID
defaultComputerGid="1000"

# Skel dir
skeletonDir="/etc/skel"

# Default password validation time (time in days) Comment the next line if
# you don't want password to be enable for defaultMaxPasswordAge days (be
# careful to the sambaPwdMustChange attribute's value)
# defaultMaxPasswordAge="99"

##############################################################################
#
# SAMBA Configuration
#
##############################################################################

# The UNC path to home drives location (%U username substitution)
# Ex: \\My-PDC-netbios-name\homes\%U
# Just set it to a null string if you want to use the smb.conf 'logon home'
# directive and/or disable roaming profiles
userSmbHome="\\TODOSCSI\%U"

# The UNC path to profiles locations (%U username substitution)
# Ex: \\My-PDC-netbios-name\profiles\%U
# Just set it to a null string if you want to use the smb.conf 'logon path'
# directive and/or disable roaming profiles
userProfile="\\TODOSCSI\profiles\%U"

# The default Home Drive Letter mapping
# (will be automatically mapped at logon time if home directory exist)
# Ex: H: for H:
userHomeDrive="H:"

# The default user netlogon script name (%U username substitution)
# if not used, will be automatically username.cmd
# make sure script file is edited under dos
# Ex: %U.cmd
# userScript="startup.cmd" # make sure script file is edited under dos
userScript=""

# Domain appended to the users "mail"-attribute
# when smbldap-useradd -M is used
mailDomain="gsr.pt"

##############################################################################
#
# SMBLDAP-TOOLS Configuration (default are ok for a RedHat)
#
##############################################################################

# Allows not to use smbpasswd (if with_smbpasswd == 0 in smbldap_conf.pm) but
# prefer Crypt::SmbHash library
with_smbpasswd="0"
smbpasswd="/usr/bin/smbpasswd"
/etc/smbldap-tools/smbldap_bind.conf
############################
# Credential Configuration #
############################
# Notes: you can specify two differents configuration if you use a
# master ldap for writing access and a slave ldap server for reading access
# By default, we will use the same DN (so it will work for standard Samba
# release)
slaveDN="cn=admin,dc=gsr,dc=pt"
slavePw="********"
masterDN="cn=admin,dc=gsr,dc=pt"
masterPw="********"
/etc/apache/conf.d/mod_ssl-00-global.conf
# The whole SSL configuration in this context applies both to
# the main server and all SSL-enabled virtual hosts.

# We surround the directives with <IfModule> .. </Ifmodule>, so that Apache
# will keep a valid configuration even if mod_ssl is unavailable.
<IfModule mod_ssl.c>
	# These will make apache listen to port 443 in addition to the
	# standard port 80. HTTPS requests use port 443.
	#Listen 80
	Listen 443

	# Some MIME-types for downloading Certificates and CRLs
	AddType application/x-x509-ca-cert .crt
	AddType application/x-pkcs7-crl    .crl

	# Semaphore:
	#   Configure the path to the mutual exclusion semaphore the
	#   SSL engine uses internally for inter-process synchronization.
	SSLMutex file:/var/run/mod_ssl_mutex

	# Inter-Process Session Cache:
	#   Configure the SSL Session Cache: First either `none'
	#   or `dbm:/path/to/file' for the mechanism to use and
	#   second the expiring timeout (in seconds).
	SSLSessionCache         dbm:/var/run/mod_ssl_scache
	SSLSessionCacheTimeout  300
	#SSLSessionCache         none

	# Pseudo Random Number Generator (PRNG):
	#   Configure one or more sources to seed the PRNG of the 
	#   SSL library. The seed data should be of good random quality.
	SSLRandomSeed startup file:/dev/urandom 512
	SSLRandomSeed connect file:/dev/urandom 512

	# Logging:
	#   The home of the dedicated SSL protocol logfile. Errors are
	#   additionally duplicated in the general error log file.  Put
	#   this somewhere where it cannot be used for symlink attacks on
	#   a real server (i.e. somewhere where only root can write).
	#   Log levels are (ascending order: higher ones include lower ones):
	#   none, error, warn, info, trace, debug.
	SSLLog /var/log/apache/ssl_engine.log
	SSLLogLevel info
</IfModule>
/etc/apache/conf.d/vhost.conf
### Section 3: Virtual Hosts
#
# VirtualHost: If you want to maintain multiple domains/hostnames on your
# machine you can setup VirtualHost containers for them.
# Please see the documentation at <URL:http://www.apache.org/docs/vhosts/>
# for further details before you try to setup virtual hosts.
# You may use the command line option '-S' to verify your virtual host
# configuration.

#
# If you want to use name-based virtual hosts you need to define at
# least one IP address (and port number) for them.

NameVirtualHost gsr.pt
NameVirtualHost gsr.pt:443

#
# gsr.pt
#

<VirtualHost gsr.pt>
        ServerName gsr.pt
        ServerAdmin sergio@gsr.pt
        DocumentRoot /var/www/
        # Logs Globales
        ErrorLog /var/log/apache/error.log
        CustomLog /var/log/apache/access.log combined
</VirtualHost>

#
# gsr.pt:443
#

<VirtualHost gsr.pt:443>
        ServerName gsr.pt
        ServerAdmin sergio@gsr.pt
        DocumentRoot /var/www/
        # Logs
        ErrorLog /var/log/apache/ssl-error.log
        CustomLog /var/log/apache/ssl-access.log combined

        <IfModule mod_ssl.c>
                SSLEngine on
                SSLCertificateFile    /etc/apache/ssl.crt/server.crt
                SSLCertificateKeyFile /etc/apache/ssl.key/server.key
                SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
        </IfModule>
</VirtualHost>
/etc/hosts.allow
# /etc/hosts.allow: list of hosts that are allowed to access the system.
#                   See the manual pages hosts_access(5), hosts_options(5)
#                   and /usr/doc/netbase/portmapper.txt.gz
#
# Example:    ALL: LOCAL @some_netgroup
#             ALL: .foobar.edu EXCEPT terminalserver.foobar.edu
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap(8)
# and /usr/doc/portmap/portmapper.txt.gz for further information.
#
slapd: 192.168.2.1
/etc/hosts.deny
# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
#                  See the manual pages hosts_access(5), hosts_options(5)
#                  and /usr/doc/netbase/portmapper.txt.gz
#
# Example:    ALL: some.host.name, .some.domain
#             ALL EXCEPT in.fingerd: other.host.name, .other.domain
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap(8)
# and /usr/doc/portmap/portmapper.txt.gz for further information.
#
# The PARANOID wildcard matches any host whose name does not match its
# address. You may wish to enable this to ensure any programs that don't
# validate looked up hostnames still leave understandable logs. In past
# versions of Debian this has been the default.
# ALL: PARANOID

# Desautorizar a todos los hosts con nombre sospechoso
ALL: PARANOID

# Desautorizar a todos los hosts
ALL:ALL
<cups-info@cups.org>
cups
cups
<derekn@foolabs.com>

Historial de revisiones
Revisión 0.2	15-10-2004	sgg
Revisión del documento, añadido soporte de cifrado en todo el proceso y cambio de licencia de publicación.
Revisión 0.1	19-06-2004	sgg
Documento inicial

Nivel	Descripción
-1	Habilita todo el depurado
0	Sin depurado
1	Rastrea las llamadas a funciones
2	Depura el manejo de paquetes
4	Rastreo de depuración intensivo
8	Administración de la conexión
16	Muestra los paquetes enviados y recibidos
32	Procesado de búsqueda por filtro
64	Procesado del archivo de configuración
128	Procesado de la lista de control de acceso
256	stats log connections/operations/results
512	stats log entries sent
1024	Muestra las comunicaciones con los backends de la shell
2048	Muestra las entradas analizadas (parsing)

Directiva	Valor	Descripción
BASE	dn	Base por defecto (Default Base - DN) a utilizar cuando se realizan operaciones ldap
BINDDN	dn	Base por defecto a la que cambiar cuando se realizan operaciones ldap específicas para usuarios
HOST	nombre[:puerto]	Nombre de los servidores LDAP a los que conectarse (separados por espacios)
PORT	número	Puerto por defecto utilizado en las conexiones a un servidor LDAP. 636 = SSL
SIZELIMIT	número	Límite de resultados devueltos en una búsqueda (0 = sin límite)
TIMELIMIT	número	Límite en el tiempo de búsqueda (0 = sin límite)
TLS	nivel	Si el usuario ha de utilizar TLS por defecto ( never \| hard ), el uso de esta directiva está desaconsejado; es incompatible con la petición StartTLS de LDAPv3
TLS_CACERT	nombre de un archivo	Especifica el archivo que contiene todos los certificados pertenecientes a entidades certificadoras que el cliente reconoce
TLS_CACERTDIR	directorio	Usado si falla TLS_CACERT
TLS_REQCERT	nivel	Especifica que tipo de comprobación se ha de realizar a un certificado de servidor ( never \| allow \| try \| demand,hard )
TLS_CERT	nombre de un archivo	Autentificación de clientes: especifica el certificado del cliente específico del usuario
TLS_KEY	nombre de un archivo	Autentificación de clientes: especifica la llave privada, para la entrada TLS_CERT, específico del usuario

Rol	Valor
b-node	Hace uso de registro y resolución broadcast únicamente
p-node	Hace uso de registro y resolución punto-a-punto únicamente
m-node (mixto)	Hace uso de broadcast para el registro. Si lo consigue, notifica al servidor NBNS el resultado. Hace uso de broadcast para la resolución; utiliza NBNS si el broadcast no ha tenido éxito
h-node (híbrido)	Hace uso del servidor NBNS para el registro y la resolución; utiliza broadcast si el servidor NBNS no responde o no está operativo

Nombre del Recurso	Valor en hexadecimal del byte
Standard Workstation Service	00
Messenger Service	03
RAS Server Service	06
Domain Master Browser Service (associated with primary domain controller)	1B
Master Browser name	1D
NetDDE Service	1F
Fileserver (including printer server)	20
RAS Client Service	21
Network Monitor Agent	BE
Network Monitor Utility	BF

	Nota
	Indica un apunte sobre el tema que se esté tratando cerca de este texto.

	Importante
	Informa de algo a tener en cuenta con respecto al texto cercano.

	Nota
	Los conceptos teóricos se han basado en la introducción de la entrada bibliográfica OpenLDAPProject01

	Aviso
	Tenga cuidado con la elección de esta pantalla, puede perder los datos almacenados en la base de datos de OpenLDAP si “accidentalmente” se desinstala slapd.

	Nota
	Esta pantalla de configuración puede no aparecer cuando instale OpenLDAP en su sistema, no se preocupe por ello. El motivo para que no aparezca es que no existen datos en el directorio `/var/lib/ldap`, esto se puede deber a que esta sea su primera instalación de OpenLDAP o se hayan borrado los datos de dicho directorio, entre otros.

	Nota
	En la captura de pantalla anterior se ha eliminado la línea que hacía referencia la instrucción tecleada (/bin/ps auxf \| /bin/grep slapd) y se ha añadido la línea de información sobre cada parte de la captura, para mejorar la legibilidad.

	Aquí se puede ver que el host con el que establece la conexión es el correcto.
	Una vez encontrado el host, se conecta satisfactoriamente al mismo.
	En este momento comienzan los errores de conexión.

	Nota
	En el Capítulo 3, Retoques iniciales a la configuración por defecto de OpenLDAP se verá como configurar slapd para que arranque automáticamente con la especificación de la interfaces.

	Nota
	Un ejemplo completo de este archivo de configuración se encuentra en el Apéndice S, Archivo de configuración `/etc/default/slapd`

	Usuario con el que se está ejecutando slapd.
	Parámetros de ejecución de slapd, se puede apreciar que se ha indicado el usuario (-u slapd) y grupo (-g slapd) de ejecución del demonio.

	Inicialmente el demonio slapd escucha en el puerto 389 en todas la interfaces.
	Una vez reiniciado con la nueva configuración, el demonio slapd escucha en las interfaces requeridas.
	La lista de parámetros pasados al demonio slapd ha aumentado, ahora se especifica el host donde ha de escuchar y con qué protocolo.

	Nota
	La salida de la orden /bin/ps se ha retocado para mejorar la legibilidad.

	Nota
	En el Apéndice R, Archivo de configuración `/etc/ldap/ldap.conf` posee un ejemplo completo de configuración.

	Aviso
	Tal y como se distribuye el paquete de OpenLDAP en Debian GNU/Linux, no es posible, al menos a la hora de generar esta documentación, hacer uso de cifrado en las comunicaciones relacionadas con LDAP. En la Sección 4.4, “Solución temporal a los problemas de OpenLDAP en Debian GNU/Linux” se detallará el problema y se dará una solución temporal, a la espera de que se solucionen los problemas con este paquete en Debian^[9].

	Nota
	La versión de OpenSSL empleada para generar esta documentación ha sido la 0.9.7d.

	Nota
	Para la elaboración de este capítulo, se ha empleado, principalmente, la entrada bibliográfica Soper01 y el capítulo 6 de la entraba bibliográfica Tournier01.

	Nota
	Para la elaboración de esta documentación se ha elegido la creación de un certificado a partir de una CA (Sección 4.2.2, “Certificado emitido por una CA”) y sobre este método se basará el resto de la documentación. De todas formas, se ha incluido en la Sección 4.2.1, “Certificado autofirmado” el otro método existente, a título informativo.

	Aviso
	Cuando se pregunte por el “Common Name”, ha de teclear el nombre del dominio de su servidor (FQDN), como por ejemplo: miservidor.pt, y no “su nombre” como sugiere OpenSSL. ¡Esta equivocación es la causa del 90% de los errores en el el certificado del servidor!

	Nota
	OpenLDAP sólo trabaja con llaves no cifradas, por lo que se ha de emplear el parámetro “-nodes” de OpenSSL para evitar el cifrado de la llave privada.

	Nota
	Puede observarse en el ejemplo anterior, que las tres opciones poseen el mismo valor: “server.pem”. Esto diferirá si se ha obtenido el certificado a partir de una CA, como puede verse en el Ejemplo 4.9, “Líneas de configuración para un servidor SSL/TLS”.

Integración de redes con OpenLDAP, Samba, CUPS y PyKota

Autor: Sergio González González

Prefacio

1. introducción

2. Organización

2.1. OpenLDAP

2.2. Samba

2.3. CUPS

2.4. PyKota

2.5. Apéndices

3. Convenciones utilizadas en esta documentación

4. Agradecimientos

OpenLDAP

Capítulo 1. Conceptos teóricos

1.1. Introducción

1.2. ¿Qué es un servicio de directorios?

1.3. ¿Qué es LDAP?

1.3.1. ¿Qué tipo de información se puede almacenar en un directorio?

1.3.2. ¿Cómo se almacena la información?

1.3.3. ¿Cómo es referenciada la información?

1.3.4. ¿Cómo se accede a la información?

1.3.5. ¿Cómo se protege la información de los accesos no autorizados?

1.4. ¿Cómo trabaja LDAP?

1.5. Sobre X.500

1.6. ¿Cuál es la diferencia entre LDAPv2 y LDAPv3?

1.7. ¿Qué es slapd y qué puede hacer?

1.7.1. LDAPv3:

1.7.2. Simple Authentication and Security Layer (SASL):

1.7.3. Transport Layer Security:

1.7.4. Control Topológico

1.7.5. Control de Acceso:

1.7.6. Internacionalización:

1.7.7. Elección del backend de la base de datos:

1.7.8. Muchas instancias de bases de datos:

1.7.9. IP genérica de módulos:

1.7.10. Hilos:

1.7.11. Replicación:

1.7.12. Proxy caché:

1.7.13. Configuración:

1.8. ¿Qué es slurpd y que puede hacer?

1.9. Información adicional sobre el proyecto

1.9.1. Página principal

1.9.2. Cómo obtener OpenLDAP

1.9.3. Documentación

1.9.4. Información de soporte

1.9.5. Reporte de bugs

1.9.6. Cómo contactar

Capítulo 2. Instalación

2.1. Consideraciones previas

2.2. Pasos para la instalación

2.2.1. Instalación de slapd y ldap-utils

2.2.2. Observaciones a la instalación

2.3. Comprobaciones iniciales de la instalación

2.3.1. Ejecución del demonio

2.3.2. Conectando con el servidor

2.3.2.1. Posibles problemas de conexión

2.3.2.1.1. TCP Wrappers

2.3.2.1.2. Address family not supported by protocol

Capítulo 3. Retoques iniciales a la configuración por defecto de OpenLDAP

3.1. /etc/default/slapd

3.1.1. Cambio del usuario y grupo de ejecución de slapd

3.1.1.1. Creación del usuario y grupo para slapd

3.1.1.2. Cambio de propietario/grupo en los archivos de slapd

3.1.1.3. Especificar el usuario/grupo con el que ejecutar slapd

3.1.1.4. Arrancando el demonio slapd

3.1.2. Especificación de las interfaces donde escuchar

3.2. /etc/ldap/ldap.conf

3.3. /etc/ldap/slapd.conf

Capítulo 4. Preparando la conexión segura

Creación de certificados

4.1. Introducción

4.2. Creación de un certificado

4.2.1. Certificado autofirmado

4.2.2. Certificado emitido por una CA

4.2.3. El certificado de los clientes

4.3. Configuración de OpenLDAP

4.3.1. Servidor

4.3.2. Cliente

4.3.2.1. Directivas de configuración del cliente LDAP

4.3.2.2. Ejemplo de un archivo ldap.conf

3.1. `/etc/default/slapd`

3.2. `/etc/ldap/ldap.conf`

3.3. `/etc/ldap/slapd.conf`

4.3.2.2. Ejemplo de un archivo `ldap.conf`

4.3.2.3. Ejemplo de un archivo `.ldaprc`

5.3.1. `/etc/libnss-ldap.conf` y `/etc/pam_ldap.conf`

5.3.2. `/etc/nsswitch.conf`

5.3.3.1. `/etc/pam.d/common-account`

5.3.3.2. `/etc/pam.d/common-auth`

5.3.3.3. `/etc/pam.d/common-session`

5.3.3.4. `/etc/pam.d/common-passwd`

	Este archivo se corresponde con el archivo `newcert.pem` generado tras el Ejemplo 4.6, “Firma del CSR”
	Este archivo se corresponde con el archivo `newreq.pem` generado tras el Ejemplo 4.6, “Firma del CSR”

	Nota
	Un ejemplo completo del archivo de configuración del demonio slapd se encuentra en el Apéndice Q, Archivo de configuración `/etc/ldap/slapd.conf`

	Atención
	Si se requiere la autentificación de los clientes, se necesita añadir el certificado y la llave privada del cliente al archivo `ldaprc` o `.ldaprc`.

	Nota
	En el directorio `/etc/ldap/schema` se encuentran varias definiciones de esquemas para LDAP.

Archivo	Directiva	Básica	OK	Buena	Mejor	La mejor
`slapd.conf`	TLSCACertificateFile o TLSCACertificatePath	x	x	x	x	x
	TLSCertificateFile	x	x	x	x	x
	TLSCertificateKeyFile	x	x	x	x	x
	TLSCipherSuite	-	x	x	x	x
	TLSVerifyClient	never	never	allow	try	demand
`ldap.conf`	TLS_CACERT	-	x	x	x	x
	TLS_CACERTDIR (opcional)	-	x	x	x	x
	TLS_REQCERT	never	never	allow	try	demand
`ldaprc` o `.ldaprc`	TLS_CERT	-	-	-	x	x
`ldaprc` o `.ldaprc`	TLS_KEY	-	-	-	x	x

	Atención
	De todas formas, ha de tomarse esta solución como algo temporal (a la espera de que se solucionen los problemas con el paquete de Debian). Si se desea hacer uso de cifrado junto con OpenLDAP en un entorno de producción, sería recomendable utilizar la versión oficial estable de OpenLDAP (en estos momentos es la versión 2.2.*), que todavía no tiene paquetes para Debian.

	Nota
	Asegúrese de tener una entrada deb-src en el archivo `/etc/apt/sources.list` que apunte a uno de los mirrors de Debian, para poder bajarse el código fuente de OpenLDAP.

	Nota
	Antes de ejecutar la siguiente orden, ha de asegurarse que valor tiene la variable TLSVerifyClient. Si su valor es demand, la orden no se ejecutará correctamente, ya que el cliente no se ha autentificado, como se requiere en la configuración de OpenLDAP.

	Nota
	Normalmente, para finalizar la ejecución de la orden anterior, se ha de pulsar Ctrl+c. No se preocupe por ello.

	Nota
	Este capítulo se ha basado en la entrada bibliográfica metaconsultancy01, entre otras.