Harmonic MediaGrid Installation And Configuration Manual page 132

Chapter 4 System Configuration
4. Create a Samba machine account with the hostname of the ContentBridge. You will need to
provide the password for the user. For example, for a High Bandwidth ContentBridge with
hostname
[root@eng-ldap ~]# /var/lib/samba/sbin/smbldap-useradd -w -i hbcb205
5. Check if the account is created. For example, for a High Bandwidth ContentBridge with
hostname
[root@eng-ldap ~]# /var/lib/samba/sbin/smbldap-usershow hbcb205$
NOTE: Configuring different ContentBridges in a Harmonic MediaGrid cluster with different directory
access authentication protocols (for example, ADS, LDAP, and OpenDirectory) is not supported. The
following set of steps will reset the authentication mechanism for all ContentBridges in the cluster.
Configuring Samba Settings on the High Bandwidth ContentBridge
1. Connect a monitor and keyboard to the High Bandwidth ContentBridge.
2. Log on to the High Bandwidth ContentBridge using the following user name and password:
User name: ovnuser
Password: OVN@SvCaUsa
3. Stop smb service. For example, for a High Bandwidth ContentBridge with hostname
hbcb205:
[root@hbcb205 ~]# service smb stop
4. Update the following configuration file:
Note the following settings:
security = DOMAIN
workgroup = <domain_name>
password server = <ldap_FQDN>
add user script = /opt/omutils/bin/omadduser %u
a. Replace
base in the LDAP server configuration, which is the name that uniquely identifies an entry
in the directory.
b. Replace
/opt/omclb/conf/smb.conf
5. Copy
Joining the High Bandwidth ContentBridge to the LDAP Domain
1. Make sure you are logged in to the High Bandwidth ContentBridge, and then enter the
following command:
net rpc join -U<ldap_admin>%<ldap_admin_password> -S <ldap_FQDN>
The following example shows the expected result:
Joined domain SNV-ENG.
[root@hbcb205 ~]#
2. Remove any "CB" entries that provide access to individual users from the /etc/gateway.conf
and /etc/passwd files.
a. Open
b. Open
contain "CB" in this file).
3. Restart the gateway service. For example, for a High Bandwidth ContentBridge with hostname
hbcb205
© 2017 Harmonic Inc. All rights reserved.
Joining a Harmonic MediaGrid Cluster to a Lightweight Directory Access Protocol
hbcb205
:
hbcb205
:
domain_name
with the LDAP domain using the distinguished name of the search
ldap_FQDN
with the Fully Qualified Domain Name of the LDAP server.
/etc/gateway.conf
and delete entries for individual users beginning with "CB. "
/etc/passwd
and delete entries for the same individual users (the entries do not
:
/opt/omclb/conf/smb.conf
/etc/samba/smb.conf
to
132
.
Harmonic MediaGrid Release 4.1
(LDAP) Domain