Patrick Dung
2007-Jun-06 20:17 UTC
[Samba] Problem about samba3 on freebsd, with smbldap-tools [solved]
Hi I have figured out what went wrong. I have previously complied samba without ldap support. There are tdb files in /var/db/samba. I have just uninstall samba and remove all tdb files (this instruction was given when run make deinstall in the samba3 ports, but I didn't follow it before). I did a fresh recompile with ldap support and now the problem is gone. Thanks Patrick --- Patrick Dung <patrick_dkt@yahoo.com.hk> wrote:> My domain name is WORKGROUP > > 1. smbldap-usershow WORKGROUP\$ or smbldap-usershow DOMAIN\$ > shows user "XXX" doesn't exist in both FreeBSD/Linux > > 2. I have used smbldap-populate and I have verified the items is > added > into the ldap server: > > dn: dc=localdomain > dn: ou=people,dc=localdomain > dn: ou=group,dc=localdomain > dn: ou=computers,dc=localdomain > dn: ou=Idmap,dc=localdomain > dn: uid=root,ou=people,dc=localdomain > dn: uid=nobody,ou=people,dc=localdomain > dn: cn=Domain Admins,ou=group,dc=localdomain > dn: cn=Domain Users,ou=group,dc=localdomain > dn: cn=Domain Guests,ou=group,dc=localdomain > dn: cn=Domain Computers,ou=group,dc=localdomain > dn: cn=Administrators,ou=group,dc=localdomain > dn: cn=Account Operators,ou=group,dc=localdomain > dn: cn=Print Operators,ou=group,dc=localdomain > dn: cn=Backup Operators,ou=group,dc=localdomain > dn: cn=Replicators,ou=group,dc=localdomain > dn: sambaDomainName=WORKGROUP,dc=localdomain > dn: uid=w2000srv$,ou=computers,dc=localdomain > dn: uid=server$,ou=computers,dc=localdomain > > 3. I have used slapcat and found no special problem. > BTW, I have found this in my samba log: > > [2007/06/05 18:00:40, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > > 4. I am using the same setup (eg. ldap access list, smb.conf) for > both > FreeBSD and Linux. > > Only FreeBSD have the problem. > > Regards > Patrick > > --- Cardon Denis <denis.cardon@tranquilitsystems.com> wrote: > > > Patrick Dung a ?crit : > > > Hi > > > > > > I have tried to setup freebsd (with samba3 ports), backend is > > openldap > > > with smbldap-tools. > > > > > > After a windows client joined the domain, I tried to right click > a > > > folder to set Security/permission. > > > > > > The windows client has a popup windows which display: > > > > > > The program cannot open the required dialog box > > > because it cannot determine whether the computer named "DOMAIN" > is > > > joined to a domain > > > > > > I have also tried to do same setup with Debian/Linux with the > same > > > settings in samba/openldap but it did not have this problem. > > > > Have you check that the entry is correctly created into the ldap > tree > > (type smbldap-usershow DOMAIN\$ if DOMAIN is really your computer > > name...). You should also check that the group id/SID of your > > computers > > does exist in your ldap. When the windows box is joined to a > domain, > > you > > should get a log of the complete smbldap-useradd line used for > adding > > the computer in your smb.log file. If it failed, you can replay it > on > > the command line to see what is the error code. Perhaps there is a > > missing perl library. > > > > Hope this helps, > > > > Denis > > > > > > > > > > > BTW seems HPUX with the CIFS also get this problem: > > > http://docs.hp.com/en/B8725-90119/ar01s05.html > > > > > > Any ideas? > > > > > > Thanks > > > Patrick > > > > > > > > > > > > > > >____________________________________________________________________________________> > > Building a website is a piece of cake. Yahoo! Small Business > gives > > you all the tools to get online. > > > http://smallbusiness.yahoo.com/webhosting > > > > > > -- > > Denis Cardon > > Tranquil IT Systems > > 10 rue du Docteur Bouchard > > 49400 Saumur > > tel : +33 (0) 2.41.67.56.99 > > http://www.tranquil-it-systems.fr > > > > > > > > >____________________________________________________________________________________> Never miss an email again! > Yahoo! Toolbar alerts you the instant new Mail arrives. > http://tools.search.yahoo.com/toolbar/features/mail/ >____________________________________________________________________________________ Fussy? Opinionated? Impossible to please? Perfect. Join Yahoo!'s user panel and lay it on us. http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7