Package: conductor Architecture: amd64 Version: 0.2.1-1 Priority: optional Section: admin Maintainer: Samba Conductor maintainers Installed-Size: 30584 Depends: systemd | systemd-standalone-sysusers | systemd-sysusers Recommends: samba-ad-dc (>= 2:4.19) Suggests: conductor-backup, conductor-provisioner, conductor-sync Filename: pool/main/c/conductor/conductor_0.2.1-1_amd64.deb SHA512: 63b7ce71cfec2391afeea412e2cc750eab2d0a9f0787f4a5aafa6945794b5d6fb23af1c873539ce29727bf85322ecbcc533421816b5638fa9c9a430bebcb9835 Homepage: https://github.com/openbasalt/samba-conductor Size: 13240596 SHA256: fb9a8c48051766b884d96fb7451ae67b5cee887491ce2d17dd12c5dc3f8cf373 SHA1: 656478f932a3c7e9228b887b1b012b5e91c2b2e6 MD5sum: 0e6e011701227268ab79aee0bc4ed100 Description: web administrator and self-service portal for Samba AD Samba Conductor manages a Samba Active Directory domain from the browser: users, groups, OUs, computers, DNS, Group Policy links, password policies, lockouts and bulk operations, plus a self-service portal for every user. Every change uses the signed-in user's own Kerberos identity, is previewed before it is applied and is recorded in a hash-chained audit log; administrators need a second factor. . This package also contains conductor-helper, the small privileged service that runs the few samba-tool operations that need root on the domain controller. Nothing is started at installation: run "conductor setup" first (see the README in /usr/share/doc/conductor). Package: conductor-backup Architecture: amd64 Version: 0.1.1-1 Priority: optional Section: admin Maintainer: Samba Conductor maintainers Installed-Size: 8952 Depends: systemd | systemd-standalone-sysusers | systemd-sysusers Suggests: conductor, samba-ad-dc, iproute2 Filename: pool/main/c/conductor-backup/conductor-backup_0.1.1-1_amd64.deb SHA512: 15acbb50fa5df28da6e6ea6cacda84584c289e5283143517558f2e5eaa02593639059a663a367d74daded8895b2613e4064b9f9bb893200a75668b66e60bc4ee Homepage: https://github.com/openbasalt/samba-conductor-backup Size: 3884802 SHA256: 2cee9f8f40284b07230eae2debfc9fd2add1877f85d88b7b0ecf94694a2863c9 SHA1: 1c309af4b7b6b65a507737673d068d53d4059170 MD5sum: 58d5eef78cb6b3ad32d2a3ee093dbf7f Description: encrypted Samba AD backups, restore and restore drills conductor-backup takes online backups of a Samba Active Directory domain (through conductor-helper, with an account that holds only replication rights), encrypts them with age to keys that never live on the domain controller, uploads them to S3-compatible storage or a local directory with signed manifests, applies a retention policy and sends alerts. On a separate drill host it restores the newest backup into a network-less sandbox and checks that the domain answers, proving the backups restore. . Nothing is started at installation (see the README in /usr/share/doc/conductor-backup). Package: conductor-files Architecture: amd64 Version: 0.0.0+git20261004164232.fd88e032fbf0-1 Priority: optional Section: admin Maintainer: Samba Conductor maintainers Installed-Size: 7118 Recommends: samba (>= 2:4.19), winbind, samba-common-bin, python3-samba, samba-ad-provision, acl, attr Filename: pool/main/c/conductor-files/conductor-files_0.0.0+git20261004164232.fd88e032fbf0-1_amd64.deb SHA512: 9c9d37ea18cecccb46b0d7118ed91d9b548b0896c5882cc45132db40240cd7b306a5a78ca05f788a2ef833e335b062f103fe7c930f08ad0c4000323092db7c1c Homepage: https://github.com/openbasalt/samba-conductor-files Size: 3037876 SHA256: 0803ab83bb4ba7333a745cc3a332ee7d7d4dcf2ecc899721d73ccb71ace8c8af SHA1: 4e5c4c73fcca1fee023fbdd3cdce73867e8ea414 MD5sum: 09ef5445e3cf4aed55bf6109ed402cf3 Description: Samba Conductor agent for domain-member file servers conductor-files runs on a Samba domain-member file server (never on a domain controller) and lets Samba Conductor's web interface manage its shares: shares in Samba's registry configuration, access by AD group applied as NT ACLs, live sessions. conductor connects over TLS 1.3 with both keys pinned after a one-time enrollment code made on the file server; every change is previewed, confirmed and audited on both sides. . Nothing is started at installation (see the README in /usr/share/doc/conductor-files). Package: conductor-idp Architecture: amd64 Version: 0.1.2-1 Priority: optional Section: admin Maintainer: Samba Conductor maintainers Installed-Size: 20002 Depends: systemd | systemd-standalone-sysusers | systemd-sysusers Suggests: conductor Filename: pool/main/c/conductor-idp/conductor-idp_0.1.2-1_amd64.deb SHA512: ff5f01c11f2da990fe268bead3aa3a425d92871c4a22d1c6bb6ffbf98531fec907973fb7c88096af3da581bac5610c3752e90e3f3f21c21b99ec35eee3180035 Homepage: https://github.com/openbasalt/samba-conductor-idp Size: 8434542 SHA256: ddd87b5599f4317182c29bdab7f939881d5b1b5846da2d3063dd1cff75e1c1c3 SHA1: f7ea25e47bc8c17c2ba232840c262d65747c7bb4 MD5sum: 114dbd15f3c030d3772bfef603174cf1 Description: OpenID Connect and SAML 2.0 identity provider backed by Samba AD conductor-idp signs users in with their Active Directory account (Kerberos or LDAPS to the domain controllers) and serves OpenID Connect (Authorization Code with PKCE, discovery, JWKS with key rotation, refresh token rotation) and SAML 2.0 to registered applications, with access per AD group and the Samba Conductor second-factor policy. It is part of Samba Conductor and can run on a domain controller or on any host with LDAPS access to one. . Nothing is started at installation: configure it first (see the README in /usr/share/doc/conductor-idp). Package: conductor-provisioner Architecture: amd64 Version: 0.1.1-1 Priority: optional Section: admin Maintainer: Samba Conductor maintainers Installed-Size: 12026 Depends: systemd | systemd-standalone-sysusers | systemd-sysusers Suggests: conductor Filename: pool/main/c/conductor-provisioner/conductor-provisioner_0.1.1-1_amd64.deb SHA512: 3b36d9a6f5b3dc80cb05dc26c332504859bbdc36304c0259a419e3e6581e6ffc1f8ba3af310cf947b841139cae8df257b46a8c0a414f275ae9cd69cfb6dd610a Homepage: https://github.com/openbasalt/samba-conductor-provisioner Size: 5317516 SHA256: 6784427fabe7ed89f62b5ff3f1626ee721549938b95d976d42849c9fd721b69b SHA1: e1f473878d0605ef48038f21a55348e3262a0c41 MD5sum: 183a137c09248bc1bf4a663ed2680b79 Description: delegated Active Directory writes for Samba Conductor conductor-provisioner holds a least-privilege account delegated on the managed OUs of a Samba Active Directory domain and executes typed operations for conductor over a local socket: one-time invitation and password reset tokens, password set, lockout clear, account enable and the Google-first plan operations. Its own rules (scope, privileged accounts, hourly ceilings, token binding) hold even if conductor is compromised, and every change and refusal is audited. . Nothing is started at installation (see the README in /usr/share/doc/conductor-provisioner). Package: conductor-sync Architecture: amd64 Version: 0.2.1-1 Priority: optional Section: admin Maintainer: Samba Conductor maintainers Installed-Size: 13957 Depends: systemd | systemd-standalone-sysusers | systemd-sysusers Suggests: conductor Filename: pool/main/c/conductor-sync/conductor-sync_0.2.1-1_amd64.deb SHA512: 6e06d32b21c62c3c9279cf128bdf47af989aeca4aae9d61ad8ce16d49502a616dc389b9b2d5824dc559e4ff745fb0c3671909bcb9feacf8325e73cea19a3d1f9 Homepage: https://github.com/openbasalt/samba-conductor-sync Size: 6060590 SHA256: 9c1d72cf949566335975acd4e84eaf37d4e081e1043a32440326fa6d93578755 SHA1: bf6ccd02a9f44b7114793cb21090927e3f4a8b8e MD5sum: 0a07eff40833684b41f3c275aaf62afc Description: provisioning from Samba AD to Google Workspace conductor-sync reads users and groups from Samba Active Directory with a read-only account and provisions them to Google Workspace: accounts, groups, memberships and suspension. Every run computes a plan first; scheduled runs apply only plans inside configured safety limits, nothing is ever deleted automatically, and every operation is recorded and audited. It is part of Samba Conductor; conductor's web interface can drive it through a local management API. . Nothing is started at installation, and a new configuration stays in dry-run (see the README in /usr/share/doc/conductor-sync).