samba - Jul 2006 - 3.0.23 for Debian Sarge: LDAP problems

Hi,

I always prefer the Samba packages for Debian-Stable from the
Samba-Team and I never had a problem so far (thank you, Simo!).

Yesterday I updated from 3.0.22 to 3.0.23 in my LDAP-based network. I
updated samba.schema, added "index sambaSID eq,sub" to my slapd.conf
and ran slapindex. When I started slapd and samba afterwards, I saw
error messages like these (from smbd.log):

[2006/07/20 00:14:36, 0] lib/smbldap.c:smb_ldap_setup_conn(638)
  ldap_initialize: Time limit exceeded
[2006/07/20 00:14:36, 1] lib/smbldap.c:another_ldap_try(1150)
  Connection to LDAP server failed for the 1 try!
[2006/07/20 00:14:37, 0] lib/smbldap.c:smb_ldap_setup_conn(638)
  ldap_initialize: Time limit exceeded
[2006/07/20 00:14:37, 1] lib/smbldap.c:another_ldap_try(1150)
  Connection to LDAP server failed for the 2 try!
...
... [message repeated several times]
...
[2006/07/20 00:14:50, 1] lib/smbldap.c:another_ldap_try(1150)
  Connection to LDAP server failed for the 15 try!
[2006/07/20 00:14:51, 0] lib/smbldap.c:smb_ldap_setup_conn(638)
  ldap_initialize: Time limit exceeded
[2006/07/20 00:14:51, 0] smbd/server.c:main(960)
  ERROR: failed to setup guest info.

So Samba/smbd does not work anymore. The same errors occur when I run
the net command:

athena:~# net groupmap list
[2006/07/20 14:14:48, 0] lib/smbldap.c:smb_ldap_setup_conn(638)
  ldap_initialize: Time limit exceeded
[2006/07/20 14:14:49, 0] lib/smbldap.c:smb_ldap_setup_conn(638)
  ldap_initialize: Time limit exceeded
...
... [message repeated several times]
...
[2006/07/20 14:15:18, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(3039)
  ldapsam_setsamgrent: LDAP search failed: Time limit exceeded
[2006/07/20 14:15:18, 0]
passdb/pdb_ldap.c:ldapsam_enum_group_mapping(3111)
  ldapsam_enum_group_mapping: Unable to open passdb


Switching back to the previous slapd.conf and samba.schema doesn't work,
disabling TLS did not help either. The slapd can be connected with any
other non-Samba tool (ldapsearch, phpldapadmin).

Does anybody have an idea what the problem might be?

thank you,
Uwe

Hi all,
> Does anybody have an idea what the problem might be?
I have found the reason for the problem: Samba 3.0.23 and
3.0.23a do not parse the "passdb backend" entry in the smb.conf
correctly anymore (tested on Debian Sarge and FreeBSD 6.1).

According to the smb.conf man page, it is allowed to put the ldap
URIs in double qoutes:

    passdb backend = ldapsam:"ldap://ldap-1.example.com \
                  ldap://ldap-2.example.com"

This does not work for 3.0.23(a) anymore, it works as soon as you
remove the double quotes. I guess it has to do with the fact that
the use of multiple passdb backends is not supported with 3.0.23.

Thanks,
Uwe