Skip to content

Simple Samba self service user creation & password reset with SAML login

Notifications You must be signed in to change notification settings

XDjackieXD/SAMBL

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

53 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

SAML Samba Server Service

This little tool allows you to create yourself a user in a samba domain by login in with SAML and setting a password. In the default configuration the passwords set this way will expire after one year so we don't have to deal with deactivating accounts of peoples who left the team.

The ACS URL is https://your.domain/saml/acs and the entity ID is https://your.domain/saml/metadata.xml. It expects that no other entity creates samba accounts as it uses a file to keep track of UID numbers! From SAML it expects the additional attributes name and surname. The Username has to be a valid email address (if it isn't you'll have to change the line username = auth_data.nameid.split('@')[0] in sambl.py to match your SAML username to samba username mapping.

As this piece of software is feature complete for our usecase it won't see updates often. I will maintain functionality with new samba and python versions though as we are actively using this piece of software for our internal fileserver.

IMPORTANT: Please make sure that the reverse proxy pointing at this service sets the X-Forwarded-Proto header! (see NGINX example)

Dependencies

  • python
  • Samba-Python-API
  • python-flask
  • python-flask-saml2
  • python-flask-wtf
  • python-werkzeug
  • python-urllib3
  • uwsgi
  • uwsgi-plugin-python

About

Simple Samba self service user creation & password reset with SAML login

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published