Hi,
I'm trying to configure a Linux machine with Samba 3 + OpenLDAP to be a
PDC for some Windows XP machines. I'm following the Samba-3 by Example
and it's been all ok except when I try to join a Windows machine to the
domain. In the Samba server a get the following errors:
[2004/07/24 21:34:56, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1312)
ldapsam_modify_entry: Failed to add user dn= uid=kosh
$,ou=People,dc=xpto with: Already exists
[2004/07/24 21:34:56, 0] passdb/pdb_ldap.c:ldapsam_add_sam_account(1729)
ldapsam_add_sam_account: failed to modify/add user with uid = kosh$
(dn = uid=kosh$,ou=People,dc=xpto)
[2004/07/24 21:34:56, 0] rpc_server/srv_samr_nt.c:_samr_create_user
(2267)
could not add user/computer kosh$ to passdb. Check permissions?
I'm using the Idealx smbldap tools and have this in the smb.conf file:
add user script = /usr/local/sbin/smbldap-useradd.pl -a -m '%u'
delete user script = /usr/local/sbin/smbldap-userdel.pl "%u"
add group script = /usr/local/sbin/smbldap-groupadd.pl -p '%g'
delete group script = /usr/local/sbin/smbldap-groupdel.pl '%g'
add user to group script = /usr/local/sbin/smbldap-groupmod.pl -m '%
u' '%g'
delete user from group script = /usr/local/sbin/smbldap-groupmod.pl -
x '%u' '%g'
set primary group script = /usr/local/sbin/smbldap-usermod.pl -g '%g'
'%u'
add machine script = /usr/local/sbin/smbldap-useradd.pl -w '%u'
The script seems to work since the machine user is created in the LDAP
database:
dn: uid=kosh$,ou=People,dc=xpto
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
cn: kosh$
sn: kosh$
uid: kosh$
uidNumber: 1003
gidNumber: 553
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
structuralObjectClass: inetOrgPerson
entryUUID: ab713f8a-71fc-1028-86cf-ec068f83861c
creatorsName: cn=admin,dc=xpto
createTimestamp: 20040724203456Z
entryCSN: 2004072420:34:56Z#0x0001#0#0000
modifiersName: cn=admin,dc=xpto
modifyTimestamp: 20040724203456Z
Is there some permission issue (maybe in the slapd.conf file)? Can
anybody help me?
Thanks
--
Paulo Silva <pjs@eurotux.com>
Eurotux, SA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Esta =?ISO-8859-1?Q?=E9?= uma parte de mensagem
assinada digitalmente
Url :
http://lists.samba.org/archive/samba/attachments/20040724/ba4c6582/attachment.bin
