I am running Samba 3.0 HEAD with LDAP 2.0. I have ldapsam enabled buy when
I try to log into my server from a W2K machine I get the following in my
error log:
sam_password_ok: NO NT password stored for user root.
The log file shows that Samba successfully retrieved the root posixAccount
record and the log displays some of the data (i.e. home directory) that is
stored for root in LDAP. The only problem is Samba acts like it cannot find
the password anywhere. I have reset the password a number of times and can
see that there is something stored in LDAP when I perform an ldapsearch. I
have also checked to make sure LDAP allows read access to the password
fields. The following is in my slapd.conf:
access to attr=userpassword
by self write
by * read
access to *
by self write
by dn=".+" read
by * read
Does anyone have any ideas why Samba cannot read the password? Thanks in
advance!
---------My smb.conf---------------
[global]
workgroup = ELUCIDATION
server string = %h server (Samba %v)
obey pam restrictions = Yes
passdb backend = ldapsam unixsam guest
non unix account range = 10000-19999
passwd program = /usr/local/sbin/smbldap-passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spas
sword:* %n\n .
log level = 10
log file = /var/log/samba/log.%m
max log size = 1000
time server = Yes
logon script = logon.cmd
logon drive = H:
domain logons = Yes
os level = 64
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap ssl = no
On Fri, 2003-04-11 at 14:00, Samba Newsgroups wrote:> I am running Samba 3.0 HEAD with LDAP 2.0. I have ldapsam enabled buy when > I try to log into my server from a W2K machine I get the following in my > error log: > > sam_password_ok: NO NT password stored for user root. > > The log file shows that Samba successfully retrieved the root posixAccount > record and the log displays some of the data (i.e. home directory) that is > stored for root in LDAP. The only problem is Samba acts like it cannot find > the password anywhere. I have reset the password a number of times and can > see that there is something stored in LDAP when I perform an ldapsearch. I > have also checked to make sure LDAP allows read access to the password > fields. The following is in my slapd.conf: >you did add samba.schema to your slapd.conf right? have you updated the NT and LM passwords with either smbpasswd or the smbldap tools? brad -- Bradley W. Langhorst <brad@langhorst.com>
The samba.schema is there and I confirmed is the version from CVS. I have updated the password with smbldap-passwd.pl. It appears to work fine. The log shows: Apr 11 15:46:06 sam slapd[26266]: do_modify: dn (uid=root,ou=Users,dc=elucidation) Apr 11 15:46:06 sam slapd[26266]: modifications: Apr 11 15:46:06 sam slapd[26266]: ^Ireplace: lmpassword Apr 11 15:46:06 sam slapd[26266]: ^Ireplace: ntpassword Apr 11 15:46:06 sam slapd[26266]: ldbm_back_modify: Apr 11 15:46:06 sam slapd[26266]: ldbm_modify_internal: replace Apr 11 15:46:06 sam last message repeated 3 times Apr 11 15:46:06 sam slapd[26266]: ldbm_cache_open (blksize 8192) (maxids 2046) (maxindirect 5) Apr 11 15:46:07 sam last message repeated 3 times Apr 11 15:46:07 sam slapd[26266]: send_ldap_result: 0:: Apr 11 15:46:07 sam slapd[26252]: daemon: activity on 1 descriptors Apr 11 15:46:07 sam slapd[26252]: daemon: activity on: Thanks for the assistance. What else do you think might be the problem?? -----Original Message----- From: Bradley W. Langhorst [ mailto:brad@langhorst.com <mailto:brad@langhorst.com> ] Sent: Friday, April 11, 2003 2:26 PM To: Peak, John Cc: samba@lists.samba.org Subject: Re: [Samba] Can't Find Password On Fri, 2003-04-11 at 14:00, Samba Newsgroups wrote:> I am running Samba 3.0 HEAD with LDAP 2.0. I have ldapsam enabled buywhen> I try to log into my server from a W2K machine I get the following inmy> error log: > > sam_password_ok: NO NT password stored for user root. > > The log file shows that Samba successfully retrieved the rootposixAccount> record and the log displays some of the data (i.e. home directory)that is> stored for root in LDAP. The only problem is Samba acts like itcannot find> the password anywhere. I have reset the password a number of timesand can> see that there is something stored in LDAP when I perform anldapsearch. I> have also checked to make sure LDAP allows read access to the password> fields. The following is in my slapd.conf: >you did add samba.schema to your slapd.conf right? have you updated the NT and LM passwords with either smbpasswd or the smbldap tools? brad -- Bradley W. Langhorst <brad@langhorst.com>