Henrik Dige Semark
2010-Jan-25 21:23 UTC
[Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
I have a serous problem. I have for some time now tried to get an SAMBA based Domain Controller working. I have tried with OpenLDAP and tdbsam as backend, but I get the same error every time. I wood prefer to use LDAP as my backend. I have read tons of how-to SAMBA + LDAP, but non of the seams to work for my, is there someone that maybe can see what I have done rung in my config.? I have attached my samba conf and LDAP conf. Samba is connected to OpenLDAP, and LDAP is running fine. But when I try to join my Windows XP Pro SP3 I takes about one Min and it tells my that Username and/or Password maybe rung, ore not existing. There is no doubt that Samba and Ldap is talking together (samba have updated the SID and RID's), cause when I try to join the domain LDAP is activated, but the return value is somehow disappearing on the way back to my client I have some wireshark dump that I can provide if its necessary. I can provide LOGS, DUMPS, and everything needed if its necessary. System info: Clean installed Debian Lenny (5.0.3) Clean installed Samba 3.2.5 + Winbind 3.2.5 Clean installed OpenLDAP 2.4.11 (slapd) Debian default smbldap-tools (smbldap-populate is working and have populated LDAP without problems) if there is something I have forgotten please just ask for it, I'm close to be desperate.! --- Med Venlig Hilsen / Best regards Henrik Dige Semark -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: smb.conf URL: <http://lists.samba.org/pipermail/samba/attachments/20100125/78213e3e/attachment.ksh> -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: schema.conf URL: <http://lists.samba.org/pipermail/samba/attachments/20100125/78213e3e/attachment-0001.ksh> -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: slapd.conf URL: <http://lists.samba.org/pipermail/samba/attachments/20100125/78213e3e/attachment-0002.ksh>
Gaiseric Vandal
2010-Jan-26 17:41 UTC
[Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
On 01/25/10 16:23, Henrik Dige Semark wrote:> I have a serous problem. > > I have for some time now tried to get an SAMBA based Domain Controller > working. > I have tried with OpenLDAP and tdbsam as backend, but I get the same > error every time. > > I wood prefer to use LDAP as my backend. > I have read tons of how-to SAMBA + LDAP, but non of the seams to work > for my, is there someone that maybe can see what I have done rung in > my config.? > > I have attached my samba conf and LDAP conf. > > Samba is connected to OpenLDAP, and LDAP is running fine. > But when I try to join my Windows XP Pro SP3 I takes about one Min and > it tells my that Username and/or Password maybe rung, ore not existing. > > There is no doubt that Samba and Ldap is talking together (samba have > updated the SID and RID's), cause when I try to join the domain LDAP > is activated, but the return value is somehow disappearing on the way > back to my client > > I have some wireshark dump that I can provide if its necessary. > I can provide LOGS, DUMPS, and everything needed if its necessary. > > System info: > Clean installed Debian Lenny (5.0.3) > Clean installed Samba 3.2.5 + Winbind 3.2.5 > Clean installed OpenLDAP 2.4.11 (slapd)Did you > > > Debian default smbldap-tools (smbldap-populate is working and have > populated LDAP without problems) > if there is something I have forgotten please just ask for it, I'm > close to be desperate.! > > --- > Med Venlig Hilsen / Best regards > Henrik Dige Semark > >Did you join the PDC to the domain (not sure of the exact syntax from memory, but something along the lines of "net join" ..) With an LDAP backend you should see an ldap entry created for the DOMAIN. I also found under LDAP on solaris that syncing passwords between windows and unix was a little tricky, so you may want to also temp try disabling the unix password sync until you have at least got machines joining the domain.
Henrik Dige Semark
2010-Jan-27 19:23 UTC
[Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
Dos the PDC have to join the domain also? When I try to join my PDC to its domain with "net join" I get the following error. Enter root's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE The netbios name for my PDC is pdc.semarktest.dk I guess that way it tells my that is can't connect to server PDC I have checked that pdc is in the name server (nameserver is on 127.0.0.1) # host pdc pdc.semarktest.dk has address 192.168.1.182 Is there something I'm missing? Log dump from net join command: # tail -200 /var/log/syslog | grep slapd Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=2 do_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: >>> dnPrettyNormal: <sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk> Jan 27 20:21:53 hds-debian-virt slapd[1868]: <<< dnPrettyNormal: <sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk>, <sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk> Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH "sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk" 2 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: (&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=semarktest)) Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: Jan 27 20:21:53 hds-debian-virt slapd[1868]: Jan 27 20:21:53 hds-debian-virt slapd[1868]: => hdb_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_dn2entry("sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk") Jan 27 20:21:53 hds-debian-virt slapd[1868]: => hdb_dn2id("sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk") Jan 27 20:21:53 hds-debian-virt slapd[1868]: <= hdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30990) Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: conn=15 op=2 p=3 Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: err=10 matched="sambaDomainName=semarktest,dc=semark-testing,dc=dk" text="" Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_response: msgid=3 tag=101 err=32 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=3 do_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: >>> dnPrettyNormal: <dc=semark-testing,dc=dk> Jan 27 20:21:53 hds-debian-virt slapd[1868]: <<< dnPrettyNormal: <dc=semark-testing,dc=dk>, <dc=semark-testing,dc=dk> Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH "dc=semark-testing,dc=dk" 2 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: (&(uid=root)(objectClass=sambaSamAccount)) Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: Jan 27 20:21:53 hds-debian-virt slapd[1868]: uid Jan 27 20:21:53 hds-debian-virt slapd[1868]: uidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: gidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: homeDirectory Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: cn Jan 27 20:21:53 hds-debian-virt slapd[1868]: sn Jan 27 20:21:53 hds-debian-virt slapd[1868]: displayName Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 20:21:53 hds-debian-virt slapd[1868]: description Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaSID Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaDomainName Jan 27 20:21:53 hds-debian-virt slapd[1868]: objectClass Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaAcctFlags Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaMungedDial Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaBadPasswordCount Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaBadPasswordTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPasswordHistory Jan 27 20:21:53 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonHours Jan 27 20:21:53 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 20:21:53 hds-debian-virt slapd[1868]: uidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: Jan 27 20:21:53 hds-debian-virt slapd[1868]: => hdb_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_dn2entry("dc=semark-testing,dc=dk") Jan 27 20:21:53 hds-debian-virt slapd[1868]: search_candidates: base="dc=semark-testing,dc=dk" (0x00000001) scope=2 Jan 27 20:21:53 hds-debian-virt slapd[1868]: => hdb_dn2idl("dc=semark-testing,dc=dk") Jan 27 20:21:53 hds-debian-virt slapd[1868]: => bdb_equality_candidates (objectClass) Jan 27 20:21:53 hds-debian-virt slapd[1868]: => key_read Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: [b49d1940] Jan 27 20:21:53 hds-debian-virt slapd[1868]: <= bdb_index_read: failed (-30990) Jan 27 20:21:53 hds-debian-virt slapd[1868]: <= bdb_equality_candidates: id=0, first=0, last=0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: => bdb_equality_candidates (uid) Jan 27 20:21:53 hds-debian-virt slapd[1868]: => key_read Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: [15f2129b] Jan 27 20:21:53 hds-debian-virt slapd[1868]: <= bdb_index_read: failed (-30990) Jan 27 20:21:53 hds-debian-virt slapd[1868]: <= bdb_equality_candidates: id=0, first=0, last=0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_search_candidates: id=0 first=1 last=0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: hdb_search: no candidates Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: conn=15 op=3 p=3 Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: err=0 matched="" text="" Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_response: msgid=4 tag=101 err=0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: ber_get_next on fd 22 failed errno=0 (Success) Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_closing: readying conn=15 sd=22 for close Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_close: conn=15 sd=22 --- Med Venlig Hilsen / Best regards Henrik Dige Semark On 26-01-2010 22:42, Dale Schroeder wrote:> Henrik, > > I saw that another user wanted you to make sure that the PDC was added > to the domain, and he is correct. > If it is still not working after adding the PDC to the domain, > consider changing the add machine script to this: > > add machine script = /usr/sbin/smbldap-useradd -i -w '%u' > > I ran into this problem with Samba 3.4.3 on Debian Squeeze, and that > is what fixed the issue. > > Dale > > > On 01/25/2010 3:23 PM, Henrik Dige Semark wrote: >> I have a serous problem. >> >> I have for some time now tried to get an SAMBA based Domain Controller >> working. >> I have tried with OpenLDAP and tdbsam as backend, but I get the same >> error every time. >> >> I wood prefer to use LDAP as my backend. >> I have read tons of how-to SAMBA + LDAP, but non of the seams to work >> for my, is there someone that maybe can see what I have done rung in >> my config.? >> >> I have attached my samba conf and LDAP conf. >> >> Samba is connected to OpenLDAP, and LDAP is running fine. >> But when I try to join my Windows XP Pro SP3 I takes about one Min and >> it tells my that Username and/or Password maybe rung, ore not existing. >> >> There is no doubt that Samba and Ldap is talking together (samba have >> updated the SID and RID's), cause when I try to join the domain LDAP >> is activated, but the return value is somehow disappearing on the way >> back to my client >> >> I have some wireshark dump that I can provide if its necessary. >> I can provide LOGS, DUMPS, and everything needed if its necessary. >> >> System info: >> Clean installed Debian Lenny (5.0.3) >> Clean installed Samba 3.2.5 + Winbind 3.2.5 >> Clean installed OpenLDAP 2.4.11 (slapd) >> Debian default smbldap-tools (smbldap-populate is working and have >> populated LDAP without problems) >> if there is something I have forgotten please just ask for it, I'm >> close to be desperate.! >> >> --- >> Med Venlig Hilsen / Best regards >> Henrik Dige Semark >> >>
Henrik Dige Semark
2010-Jan-27 21:43 UTC
[Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
I have changes the order to: name resolve order = host lmhosts wins bcast # cat ldap.conf host 127.0.0.1 BASE dc=semark-testing,dc=dk URI ldap://localhost:389 rootbindn cn=admin,dc=semark-testing,dc=dk bind_policy soft # tail -f /var/log/samba/hds-virtbox1.log [ ... ] Yielding connection to IPC$ [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key B21000000100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xa10c910 [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key B21000000100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/01/27 22:40:36, 4] smbd/vfs.c:vfs_ChDir(733) vfs_ChDir to / [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 5] smbd/uid.c:change_to_root_user(287) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/01/27 22:40:36, 5] lib/util.c:show_msg(642) [2010/01/27 22:40:36, 5] lib/util.c:show_msg(652) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=2048 smt_wct=0 smb_bcc=0 [2010/01/27 22:40:36, 11] lib/events.c:run_events(257) run_events: Nothing to do [2010/01/27 22:40:36, 11] lib/events.c:run_events(257) run_events: Nothing to do [2010/01/27 22:40:36, 5] lib/util_sock.c:read_socket_with_timeout(928) read_socket_with_timeout: blocking read. EOF from client. [2010/01/27 22:40:36, 10] smbd/process.c:receive_smb_raw_talloc(276) receive_smb_raw: NT_STATUS_END_OF_FILE [2010/01/27 22:40:36, 3] smbd/process.c:smbd_process(2056) receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting [2010/01/27 22:40:36, 5] lib/gencache.c:gencache_shutdown(93) Closing cache file [2010/01/27 22:40:36, 5] libsmb/namecache.c:namecache_shutdown(81) namecache_shutdown: netbios namecache closed successfully. [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 5] smbd/uid.c:change_to_root_user(287) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/01/27 22:40:36, 3] smbd/connection.c:yield_connection(31) Yielding connection to [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key B2100000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xa10c910 [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key B2100000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/01/27 22:40:36, 3] smbd/server.c:exit_server_common(949) Server exit (normal exit) [2010/01/27 22:40:36, 6] param/loadparm.c:lp_file_list_changed(6729) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Tue Dec 29 20:59:38 2009 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 27 22:35:01 2010 [2010/01/27 22:40:36, 5] auth/auth_util.c:make_user_info_map(206) make_user_info_map: Mapping user [semarktest]\[Admin] from workstation [HDS-VIRTBOX1] [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 5] auth/auth_util.c:is_trusted_domain(2055) is_trusted_domain: Checking for domain trust with [semarktest] [2010/01/27 22:40:36, 10] passdb/pdb_ldap.c:ldapsam_get_trusteddom_pw(5823) ldapsam_get_trusteddom_pw called for domain semarktest [2010/01/27 22:40:36, 5] lib/smbldap.c:smbldap_search_ext(1207) smbldap_search_ext: base => [sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk], filter => [(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=semarktest))], scope => [2] [2010/01/27 22:40:36, 5] lib/smbldap.c:smbldap_close(1110) The connection to the LDAP server was closed [2010/01/27 22:40:36, 10] lib/smbldap.c:smb_ldap_setup_conn(616) smb_ldap_setup_connection: ldap://127.0.0.1 [2010/01/27 22:40:36, 2] lib/smbldap.c:smbldap_open_connection(796) smbldap_open_connection: connection opened [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_connect_system(961) ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as "cn=admin,dc=semark-testing,dc=dk" [2010/01/27 22:40:36, 3] lib/smbldap.c:smbldap_connect_system(1007) ldap_connect_system: successful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2010/01/27 22:40:36, 10] lib/events.c:event_add_timed(128) Added timed event "smbldap_idle_fn": a140580 [2010/01/27 22:40:36, 4] lib/smbldap.c:smbldap_open(1090) The LDAP server is successfully connected [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_search_ext(1271) Failed search for base: sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk, error: 32 (No such object) (unknown) [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 10] lib/gencache.c:gencache_get(194) Cache entry with key = TDOM/SEMARKTEST couldn't be found [2010/01/27 22:40:36, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(183) no entry for trusted domain semarktest found. [2010/01/27 22:40:36, 5] auth/auth_util.c:make_user_info(120) attempting to make a user_info for Admin (Admin) [2010/01/27 22:40:36, 5] auth/auth_util.c:make_user_info(130) making strings for Admin's user_info struct [2010/01/27 22:40:36, 5] auth/auth_util.c:make_user_info(162) making blobs for Admin's user_info struct [2010/01/27 22:40:36, 10] auth/auth_util.c:make_user_info(180) made an encrypted user_info for Admin (Admin) [2010/01/27 22:40:36, 3] auth/auth.c:check_ntlm_password(220) check_ntlm_password: Checking password for unmapped user [semarktest]\[Admin]@[HDS-VIRTBOX1] with the new password interface [2010/01/27 22:40:36, 3] auth/auth.c:check_ntlm_password(223) check_ntlm_password: mapped user is: [semarktest]\[Admin]@[HDS-VIRTBOX1] [2010/01/27 22:40:36, 10] auth/auth.c:check_ntlm_password(232) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2010/01/27 22:40:36, 10] auth/auth.c:check_ntlm_password(234) challenge is: [2010/01/27 22:40:36, 5] lib/util.c:dump_data(2223) [000] 80 1F 1E 9F 66 AF 90 5D ....f..] [2010/01/27 22:40:36, 10] auth/auth.c:check_ntlm_password(260) check_ntlm_password: guest had nothing to say [2010/01/27 22:40:36, 8] lib/util.c:is_myname(2098) is_myname("semarktest") returns 0 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 5] lib/smbldap.c:smbldap_search_ext(1207) smbldap_search_ext: base => [dc=semark-testing,dc=dk], filter => [(&(uid=Admin)(objectclass=sambaSamAccount))], scope => [2] [2010/01/27 22:40:36, 11] lib/smbldap.c:smbldap_open(1063) smbldap_open: already connected to the LDAP server [2010/01/27 22:40:36, 2] passdb/pdb_ldap.c:init_sam_from_ldap(571) init_sam_from_ldap: Entry found for user: Admin [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_username(580) pdb_set_username: setting username Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 12 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_domain(603) pdb_set_domain: setting domain SEMARKTEST, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(494) element 14 -> now DEFAULT [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_nt_username(626) pdb_set_nt_username: setting nt username Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 15 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(522) pdb_set_user_sid_from_string: setting user sid S-1-5-21-860714184-2299130787-2886737959-500 [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_user_sid(509) pdb_set_user_sid: setting user sid S-1-5-21-860714184-2299130787-2886737959-500 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 18 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_get_init_flags(263) element 18: SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 21 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 5 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 6 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 7 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 9 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 10 -> now SET [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute displayName does not exist [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_fullname(649) pdb_set_full_name: setting full name Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 13 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(718) pdb_set_dir_drive: setting dir drive H:, was NULL [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 3 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_homedir(742) pdb_set_homedir: setting home dir \\192.168.1.182\Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 1 -> now SET [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute sambaLogonScript does not exist [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_logon_script(672) pdb_set_logon_script: setting logon script scripts/logon.bat, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(494) element 4 -> now DEFAULT [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_profile_path(695) pdb_set_profile_path: setting profile path \\192.168.1.182\profiles\Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 2 -> now SET [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute description does not exist [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute sambaUserWorkstations does not exist [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute sambaMungedDial does not exist [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 32 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 33 -> now SET [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Wed Jan 27 22:41:36 2010 [2010/01/27 22:40:36, 11] passdb/pdb_ldap.c:ldapsam_get_account_policy(3914) ldapsam_get_account_policy: got valid value from cache [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 20 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 16 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 17 -> now SET [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute sambaBadPasswordCount does not exist [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute sambaBadPasswordTime does not exist [2010/01/27 22:40:36, 10] lib/smbldap.c:smbldap_talloc_single_attribute(309) attribute sambaLogonHours does not exist [2010/01/27 22:40:36, 5] passdb/login_cache.c:login_cache_init(40) Opening cache file at /var/cache/samba/login_cache.tdb [2010/01/27 22:40:36, 7] passdb/login_cache.c:login_cache_read(86) Looking up login cache for user Admin [2010/01/27 22:40:36, 7] passdb/login_cache.c:login_cache_read(100) No cache entry found [2010/01/27 22:40:36, 9] passdb/pdb_ldap.c:init_sam_from_ldap(1054) No cache entry, bad count = 0, bad time = 0 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(471) element 35 -> now CHANGED [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = ACCT_POL/maximum password age, value = 4294967295 , timeout = Wed Jan 27 22:41:36 2010 [2010/01/27 22:40:36, 11] passdb/pdb_ldap.c:ldapsam_get_account_policy(3914) ldapsam_get_account_policy: got valid value from cache [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 5] lib/username.c:Get_Pwnam_alloc(133) Finding user Admin [2010/01/27 22:40:36, 5] lib/username.c:Get_Pwnam_internals(77) Trying _Get_Pwnam(), username as lowercase is admin [2010/01/27 22:40:36, 5] lib/username.c:Get_Pwnam_internals(85) Trying _Get_Pwnam(), username as given is Admin [2010/01/27 22:40:36, 5] lib/username.c:Get_Pwnam_internals(95) Trying _Get_Pwnam(), username as uppercase is ADMIN [2010/01/27 22:40:36, 5] lib/username.c:Get_Pwnam_internals(104) Checking combinations of 0 uppercase letters in admin [2010/01/27 22:40:36, 5] lib/username.c:Get_Pwnam_internals(110) Get_Pwnam_internals didn't find user [Admin]! [2010/01/27 22:40:36, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) pdb_get_group_sid: Failed to find Unix account for Admin [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_get_init_flags(263) element 3: SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_get_init_flags(263) element 1: SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_get_init_flags(273) element 4: DEFAULT [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_get_init_flags(263) element 2: SET [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Wed Jan 27 22:41:36 2010 [2010/01/27 22:40:36, 11] passdb/pdb_ldap.c:ldapsam_get_account_policy(3914) ldapsam_get_account_policy: got valid value from cache [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 18] lib/util_tdb.c:tdb_pack_va(501) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 254 [2010/01/27 22:40:36, 18] lib/util_tdb.c:tdb_pack_va(501) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 254) -> 254 [2010/01/27 22:40:36, 18] lib/util_tdb.c:tdb_unpack(655) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 254) -> 254 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 5 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 6 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 7 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 8 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 9 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 10 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 21 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_username(580) pdb_set_username: setting username Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 12 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_domain(603) pdb_set_domain: setting domain SEMARKTEST, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 14 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_nt_username(626) pdb_set_nt_username: setting nt username Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 15 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_fullname(649) pdb_set_full_name: setting full name Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 13 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_homedir(742) pdb_set_homedir: setting home dir \\192.168.1.182\Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 1 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(718) pdb_set_dir_drive: setting dir drive H:, was NULL [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 3 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_logon_script(672) pdb_set_logon_script: setting logon script scripts/logon.bat, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(494) element 4 -> now DEFAULT [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_profile_path(695) pdb_set_profile_path: setting profile path \\192.168.1.182\profiles\Admin, was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 2 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 23 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_workstations(785) pdb_set_workstations: setting workstations , was [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 24 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 26 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 33 -> now SET [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Wed Jan 27 22:41:36 2010 [2010/01/27 22:40:36, 11] passdb/pdb_ldap.c:ldapsam_get_account_policy(3914) ldapsam_get_account_policy: got valid value from cache [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 34 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_get_set.c:pdb_set_user_sid(509) pdb_set_user_sid: setting user sid S-1-5-21-860714184-2299130787-2886737959-500 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 18 -> now SET [2010/01/27 22:40:36, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(72) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-860714184-2299130787-2886737959-500 from rid 500 [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 16 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 29 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 30 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 31 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 20 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 17 -> now SET [2010/01/27 22:40:36, 11] passdb/pdb_get_set.c:pdb_set_init_flags(482) element 27 -> now SET [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 9] passdb/passdb.c:pdb_update_autolock_flag(1417) pdb_update_autolock_flag: Account Admin not autolocked, no check needed [2010/01/27 22:40:36, 4] libsmb/ntlm_check.c:ntlm_password_check(328) ntlm_password_check: Checking NT MD4 password [2010/01/27 22:40:36, 4] auth/auth_sam.c:sam_account_ok(137) sam_account_ok: Checking SMB password for user Admin [2010/01/27 22:40:36, 5] auth/auth_sam.c:logon_hours_ok(119) logon_hours_ok: user Admin allowed to logon at this time (Wed Jan 27 21:40:36 2010 ) [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = ACCT_POL/maximum password age, value = 4294967295 , timeout = Wed Jan 27 22:41:36 2010 [2010/01/27 22:40:36, 11] passdb/pdb_ldap.c:ldapsam_get_account_policy(3914) ldapsam_get_account_policy: got valid value from cache [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:push_sec_ctx(224) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 3] smbd/uid.c:push_conn_ctx(357) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 1] auth/auth_util.c:make_server_info_sam(562) User Admin in passdb, but getpwnam() fails! [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:pop_sec_ctx(432) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 0] auth/auth_sam.c:check_sam_security(355) check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER' [2010/01/27 22:40:36, 5] auth/auth.c:check_ntlm_password(272) check_ntlm_password: sam authentication for user [Admin] FAILED with error NT_STATUS_NO_SUCH_USER [2010/01/27 22:40:36, 3] auth/auth_winbind.c:check_winbind_security(54) check_winbind_security: Not using winbind, requested domain [semarktest] was for this SAM. [2010/01/27 22:40:36, 10] auth/auth.c:check_ntlm_password(260) check_ntlm_password: winbind had nothing to say [2010/01/27 22:40:36, 2] auth/auth.c:check_ntlm_password(318) check_ntlm_password: Authentication for user [Admin] -> [Admin] FAILED with error NT_STATUS_NO_SUCH_USER [2010/01/27 22:40:36, 5] auth/auth_util.c:free_user_info(1985) attempting to free (and zero) a user_info structure [2010/01/27 22:40:36, 10] auth/auth_util.c:free_user_info(1989) structure was created for Admin [2010/01/27 22:40:36, 3] smbd/error.c:error_packet_set(61) error packet at smbd/sesssetup.c(127) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2010/01/27 22:40:36, 5] lib/util.c:show_msg(642) [2010/01/27 22:40:36, 5] lib/util.c:show_msg(652) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=128 smt_wct=0 smb_bcc=0 [2010/01/27 22:40:36, 11] lib/events.c:run_events(257) run_events: Nothing to do [2010/01/27 22:40:36, 11] lib/events.c:run_events(257) run_events: Nothing to do [2010/01/27 22:40:36, 5] lib/util_sock.c:read_socket_with_timeout(928) read_socket_with_timeout: blocking read. EOF from client. [2010/01/27 22:40:36, 10] smbd/process.c:receive_smb_raw_talloc(276) receive_smb_raw: NT_STATUS_END_OF_FILE [2010/01/27 22:40:36, 3] smbd/process.c:smbd_process(2056) receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting [2010/01/27 22:40:36, 5] lib/gencache.c:gencache_shutdown(93) Closing cache file [2010/01/27 22:40:36, 5] libsmb/namecache.c:namecache_shutdown(81) namecache_shutdown: netbios namecache closed successfully. [2010/01/27 22:40:36, 3] smbd/sec_ctx.c:set_sec_ctx(324) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/01/27 22:40:36, 5] auth/token_util.c:debug_nt_user_token(464) NT user token: (NULL) [2010/01/27 22:40:36, 5] auth/token_util.c:debug_unix_user_token(490) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/01/27 22:40:36, 5] smbd/uid.c:change_to_root_user(287) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/01/27 22:40:36, 3] smbd/connection.c:yield_connection(31) Yielding connection to [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key B3100000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0xa133d58 [2010/01/27 22:40:36, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key B3100000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/01/27 22:40:36, 3] smbd/server.c:exit_server_common(949) Server exit (normal exit) --- Med Venlig Hilsen / Best regards Henrik Dige Semark On 27-01-2010 22:31, Eliel Oliveira wrote:> name resolve order = host lmhosts bcast wins > change the order of bcast and wins > bcast is slower than wins, witch is the best option in this case > > check your ldap.conf too, if you have a slave ldap server in > localhost. It should improve the performance of ldap searchs > and use ldap slave on smbldap.conf too. > > if does not solve your problem, post the part of the machine log when > you are trying to join the domain. > log file = /var/log/samba/%m.log > that should help a lot. > > regards > > > On Wed, Jan 27, 2010 at 7:23 PM, Henrik Dige Semark <hds at semark.dk> wrote: > >> I have already posted those once but here the go again >> >> --- >> Med Venlig Hilsen / Best regards >> Henrik Dige Semark >> >> On 27-01-2010 22:21, Eliel Oliveira wrote: >> >> post your global section of smb.conf >> are you using smbldap-tools ?? >> post your smbldap-tools.conf too >> it will be easyer if we know what we are dealing with. >> >> regards >> >> On Wed, Jan 27, 2010 at 7:16 PM, Henrik Dige Semark <hds at semark.dk> wrote: >> >>> I have remembered to run smbpassd -W, and I still get the same error >>> when I try with -S pdc on net join command. >>> >>> I can see that LDAP is activated, and that samba is doing something, but >>> it seams like the answer is disappear on the way back. >>> >>> Samba have initialised my LDAP with its SID and RID's, when it can do >>> this way is it not possible to lookup users? >>> >>> Is it necessary to join my PDC to its own domain btw.? cause the new >>> server here is going to be PDC and replace my old Win2k DC (its not a >>> member it a separate test-domain) >>> >>> --- >>> Med Venlig Hilsen / Best regards >>> Henrik Dige Semark >>> >>> >>> >>> On 27-01-2010 21:56, Dale Schroeder wrote: >>> >>>> Did you remember to run "smbpasswd -W"? >>>> >>>> Sometimes you have to add the -S switch for the join to work. >>>> net rpc join -S pdc -U root >>>> >>>> Dale >>>> >>>> >>>> On 01/27/2010 2:33 PM, Henrik Dige Semark wrote: >>>> >>>>> I have just tried with "net join -U Admin" and I get the same error as >>>>> before. >>>>> >>>>> # net join -U Admin >>>>> Enter admin's password: >>>>> Could not connect to server PDC >>>>> The username or password was not correct. >>>>> Connection failed: NT_STATUS_LOGON_FAILURE >>>>> >>>>> Ldap search for Admin: >>>>> >>>>> # ldapsearch -x -h 127.0.0.1 -p 389 >>>>> >>>>> # Admin, Users, semark-testing.dk >>>>> dn: uid=Admin,ou=Users,dc=semark-testing,dc=dk >>>>> cn: Admin >>>>> sn: Admin >>>>> objectClass: top >>>>> objectClass: person >>>>> objectClass: organizationalPerson >>>>> objectClass: inetOrgPerson >>>>> objectClass: sambaSamAccount >>>>> objectClass: posixAccount >>>>> objectClass: shadowAccount >>>>> gidNumber: 0 >>>>> uid: Admin >>>>> uidNumber: 0 >>>>> homeDirectory: /home/Admin >>>>> sambaLogonTime: 0 >>>>> sambaLogoffTime: 2147483647 >>>>> sambaKickoffTime: 2147483647 >>>>> sambaPwdCanChange: 0 >>>>> sambaHomePath: \\192.168.1.182\Admin >>>>> sambaHomeDrive: H: >>>>> sambaProfilePath: \\192.168.1.182\profiles\Admin >>>>> sambaPrimaryGroupSID: S-1-5-21-860714184-2299130787-2886737959-512 >>>>> sambaSID: S-1-5-21-860714184-2299130787-2886737959-500 >>>>> loginShell: /bin/false >>>>> gecos: Netbios Domain Administrator >>>>> sambaLMPassword: my-pass >>>>> sambaAcctFlags: [U] >>>>> sambaNTPassword: my-pass >>>>> sambaPwdLastSet: 1264374249 >>>>> sambaPwdMustChange: 1268262249 >>>>> shadowMax: 45 >>>>> >>>>> Log dump from net join command: >>>>> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got >>>>> connid=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): >>>>> checking for input on id=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=3 do_search >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:>>> >>>>> dnPrettyNormal:<dc=semark-testing,dc=dk> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<<< >>>>> dnPrettyNormal:<dc=semark-testing,dc=dk>,<dc=semark-testing,dc=dk> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH >>>>> "dc=semark-testing,dc=dk" 2 0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: >>>>> (&(uid=admin)(objectClass=sambaSamAccount)) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: uid >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: gidNumber >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: homeDirectory >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdLastSet >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdCanChange >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdMustChange >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonTime >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogoffTime >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaKickoffTime >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: cn >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sn >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: displayName >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomeDrive >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomePath >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonScript >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaProfilePath >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: description >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaUserWorkstations >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaSID >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLMPassword >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaNTPassword >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaDomainName >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: objectClass >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaAcctFlags >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaMungedDial >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordCount >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordTime >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPasswordHistory >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonHours >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => hdb_search >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: >>>>> bdb_dn2entry("dc=semark-testing,dc=dk") >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: search_candidates: >>>>> base="dc=semark-testing,dc=dk" (0x00000001) scope=2 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => >>>>> hdb_dn2idl("dc=semark-testing,dc=dk") >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (objectClass) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [b49d1940] >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>> (-30990) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (uid) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [f67dad88] >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<= bdb_index_read 1 >>>>> candidates >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=1, first=6, last=6 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (objectClass) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [f937ce0f] >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<= bdb_index_read 3 >>>>> candidates >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=3, first=6, last=18 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_search_candidates: >>>>> id=1 first=6 last=6 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => send_search_entry: >>>>> conn 22 dn="uid=Admin,ou=Users,dc=semark-testing,dc=dk" >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<= send_search_entry: >>>>> conn 22 exit. >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_result: >>>>> conn=22 op=3 p=3 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_result: err=0 >>>>> matched="" text="" >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_response: >>>>> msgid=4 tag=101 err=0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got >>>>> connid=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): >>>>> checking for input on id=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=4 do_search >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:>>> >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<<< >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk>,<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH >>>>> "sambaDomainName=semarktest,dc=semark-testing,dc=dk" 0 0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: (objectClass=*) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaMaxPwdAge >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => hdb_search >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: >>>>> bdb_dn2entry("sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: base_candidates: base: >>>>> "sambaDomainName=semarktest,dc=semark-testing,dc=dk" (0x00000011) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => send_search_entry: >>>>> conn 22 dn="sambaDomainName=semarktest,dc=semark-testing,dc=dk" >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<= send_search_entry: >>>>> conn 22 exit. >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_result: >>>>> conn=22 op=4 p=3 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_result: err=0 >>>>> matched="" text="" >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_response: >>>>> msgid=5 tag=101 err=0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got >>>>> connid=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): >>>>> checking for input on id=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=5 do_search >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:>>> >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<<< >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk>,<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH >>>>> "sambaDomainName=semarktest,dc=semark-testing,dc=dk" 0 0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: (objectClass=*) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLockoutThreshold >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => hdb_search >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: >>>>> bdb_dn2entry("sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: base_candidates: base: >>>>> "sambaDomainName=semarktest,dc=semark-testing,dc=dk" (0x00000011) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: => send_search_entry: >>>>> conn 22 dn="sambaDomainName=semarktest,dc=semark-testing,dc=dk" >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]:<= send_search_entry: >>>>> conn 22 exit. >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_result: >>>>> conn=22 op=5 p=3 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_result: err=0 >>>>> matched="" text="" >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: send_ldap_response: >>>>> msgid=6 tag=101 err=0 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got >>>>> connid=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): >>>>> checking for input on id=22 >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: ber_get_next on fd 22 >>>>> failed errno=0 (Success) >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_closing: >>>>> readying conn=22 sd=22 for close >>>>> Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_close: >>>>> conn=22 sd=22 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: connection_get(14) >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: connection_get(14): got >>>>> connid=5 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: connection_read(14): >>>>> checking for input on id=5 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: conn=5 op=1145 do_search >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]:>>> >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]:<<< >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk>,<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: SRCH >>>>> "sambaDomainName=semarktest,dc=semark-testing,dc=dk" 2 0 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: 0 15 0 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: filter: >>>>> (objectClass=sambaTrustedDomainPassword) >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: attrs: >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: sambaDomainName >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: sambaSID >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: => hdb_search >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: >>>>> bdb_dn2entry("sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: search_candidates: >>>>> base="sambaDomainName=semarktest,dc=semark-testing,dc=dk" >>>>> (0x00000011) scope=2 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: => >>>>> hdb_dn2idl("sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (objectClass) >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [b49d1940] >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>> (-30990) >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (objectClass) >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [633a0e9d] >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>> (-30990) >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: bdb_search_candidates: >>>>> id=0 first=17 last=0 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: hdb_search: no candidates >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: send_ldap_result: conn=5 >>>>> op=1145 p=3 >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: send_ldap_result: err=0 >>>>> matched="" text="" >>>>> Jan 27 21:31:41 hds-debian-virt slapd[1868]: send_ldap_response: >>>>> msgid=1146 tag=101 err=0 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: connection_get(14) >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: connection_get(14): got >>>>> connid=5 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: connection_read(14): >>>>> checking for input on id=5 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: conn=5 op=1146 do_search >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]:>>> >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]:<<< >>>>> dnPrettyNormal:<sambaDomainName=semarktest,dc=semark-testing,dc=dk>,<sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>> >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: SRCH >>>>> "sambaDomainName=semarktest,dc=semark-testing,dc=dk" 2 0 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: 0 15 0 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: filter: >>>>> (objectClass=sambaTrustedDomainPassword) >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: attrs: >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: sambaDomainName >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: sambaSID >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: => hdb_search >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: >>>>> bdb_dn2entry("sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: search_candidates: >>>>> base="sambaDomainName=semarktest,dc=semark-testing,dc=dk" >>>>> (0x00000011) scope=2 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: => >>>>> hdb_dn2idl("sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (objectClass) >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [b49d1940] >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>> (-30990) >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: => >>>>> bdb_equality_candidates (objectClass) >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: => key_read >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>> [633a0e9d] >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>> (-30990) >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]:<>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: bdb_search_candidates: >>>>> id=0 first=17 last=0 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: hdb_search: no candidates >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: send_ldap_result: conn=5 >>>>> op=1146 p=3 >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: send_ldap_result: err=0 >>>>> matched="" text="" >>>>> Jan 27 21:32:11 hds-debian-virt slapd[1868]: send_ldap_response: >>>>> msgid=1147 tag=101 err=0 >>>>> >>>>> --- >>>>> Med Venlig Hilsen / Best regards >>>>> Henrik Dige Semark >>>>> >>>>> >>>>> On 27-01-2010 21:06, Gaiseric Vandal wrote: >>>>> >>>>> >>>>>> Try using "net ... -U Administrator" instead, since "root" is not >>>>>> by default a member of the domain admin group. This presumes you have >>>>>> created the Administrator account in samba, created the "domain >>>>>> admins" group and setup the approp group mapping for key groups >>>>>> (domain admins, domain users etc.) >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> On 01/27/10 14:23, Henrik Dige Semark wrote: >>>>>> >>>>>> >>>>>>> Dos the PDC have to join the domain also? >>>>>>> >>>>>>> When I try to join my PDC to its domain with "net join" I get the >>>>>>> following error. >>>>>>> >>>>>>> Enter root's password: >>>>>>> Could not connect to server PDC >>>>>>> The username or password was not correct. >>>>>>> Connection failed: NT_STATUS_LOGON_FAILURE >>>>>>> >>>>>>> >>>>>>> The netbios name for my PDC is pdc.semarktest.dk I guess that way it >>>>>>> tells my that is can't connect to server PDC >>>>>>> I have checked that pdc is in the name server (nameserver is on >>>>>>> 127.0.0.1) >>>>>>> >>>>>>> # host pdc >>>>>>> pdc.semarktest.dk has address 192.168.1.182 >>>>>>> >>>>>>> Is there something I'm missing? >>>>>>> >>>>>>> Log dump from net join command: >>>>>>> >>>>>>> # tail -200 /var/log/syslog | grep slapd >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got >>>>>>> connid=15 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): >>>>>>> checking for input on id=15 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=2 do_search >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:>>> >>>>>>> dnPrettyNormal:<sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>>>> >>>>>>> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<<< >>>>>>> dnPrettyNormal:<sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk>,<sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk> >>>>>>> >>>>>>> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH >>>>>>> "sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk" >>>>>>> >>>>>>> 2 0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: >>>>>>> (&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=semarktest)) >>>>>>> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => hdb_search >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: >>>>>>> bdb_dn2entry("sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>>>> >>>>>>> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => >>>>>>> hdb_dn2id("sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk") >>>>>>> >>>>>>> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<= hdb_dn2id: get failed: >>>>>>> DB_NOTFOUND: No matching key/data pair found (-30990) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: >>>>>>> conn=15 op=2 p=3 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: err=10 >>>>>>> matched="sambaDomainName=semarktest,dc=semark-testing,dc=dk" text="" >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_response: >>>>>>> msgid=3 tag=101 err=32 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got >>>>>>> connid=15 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): >>>>>>> checking for input on id=15 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=3 do_search >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:>>> >>>>>>> dnPrettyNormal:<dc=semark-testing,dc=dk> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<<< >>>>>>> dnPrettyNormal:<dc=semark-testing,dc=dk>,<dc=semark-testing,dc=dk> >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH >>>>>>> "dc=semark-testing,dc=dk" 2 0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: >>>>>>> (&(uid=root)(objectClass=sambaSamAccount)) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: uid >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: uidNumber >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: gidNumber >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: homeDirectory >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdLastSet >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdCanChange >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdMustChange >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonTime >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogoffTime >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaKickoffTime >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: cn >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sn >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: displayName >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomeDrive >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomePath >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonScript >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaProfilePath >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: description >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaUserWorkstations >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaSID >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLMPassword >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaNTPassword >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaDomainName >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: objectClass >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaAcctFlags >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaMungedDial >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaBadPasswordCount >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaBadPasswordTime >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPasswordHistory >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: modifyTimestamp >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonHours >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: modifyTimestamp >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: uidNumber >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => hdb_search >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: >>>>>>> bdb_dn2entry("dc=semark-testing,dc=dk") >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: search_candidates: >>>>>>> base="dc=semark-testing,dc=dk" (0x00000001) scope=2 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => >>>>>>> hdb_dn2idl("dc=semark-testing,dc=dk") >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => >>>>>>> bdb_equality_candidates (objectClass) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => key_read >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>>>> [b49d1940] >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>>>> (-30990) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<>>>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => >>>>>>> bdb_equality_candidates (uid) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: => key_read >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: >>>>>>> [15f2129b] >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<= bdb_index_read: failed >>>>>>> (-30990) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]:<>>>>>>> bdb_equality_candidates: id=0, first=0, last=0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_search_candidates: >>>>>>> id=0 first=1 last=0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: hdb_search: no candidates >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: >>>>>>> conn=15 op=3 p=3 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: err=0 >>>>>>> matched="" text="" >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_response: >>>>>>> msgid=4 tag=101 err=0 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got >>>>>>> connid=15 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): >>>>>>> checking for input on id=15 >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: ber_get_next on fd 22 >>>>>>> failed errno=0 (Success) >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_closing: >>>>>>> readying conn=15 sd=22 for close >>>>>>> Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_close: >>>>>>> conn=15 sd=22 >>>>>>> >>>>>>> --- >>>>>>> Med Venlig Hilsen / Best regards >>>>>>> Henrik Dige Semark >>>>>>> >>>>>>> >>>>>>> On 26-01-2010 22:42, Dale Schroeder wrote: >>>>>>> >>>>>>> >>>>>>> >>>>>>>> Henrik, >>>>>>>> >>>>>>>> I saw that another user wanted you to make sure that the PDC was >>>>>>>> added >>>>>>>> to the domain, and he is correct. >>>>>>>> If it is still not working after adding the PDC to the domain, >>>>>>>> consider changing the add machine script to this: >>>>>>>> >>>>>>>> add machine script = /usr/sbin/smbldap-useradd -i -w '%u' >>>>>>>> >>>>>>>> I ran into this problem with Samba 3.4.3 on Debian Squeeze, and that >>>>>>>> is what fixed the issue. >>>>>>>> >>>>>>>> Dale >>>>>>>> >>>>>>>> >>>>>>>> On 01/25/2010 3:23 PM, Henrik Dige Semark wrote: >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> I have a serous problem. >>>>>>>>> >>>>>>>>> I have for some time now tried to get an SAMBA based Domain >>>>>>>>> Controller >>>>>>>>> working. >>>>>>>>> I have tried with OpenLDAP and tdbsam as backend, but I get the same >>>>>>>>> error every time. >>>>>>>>> >>>>>>>>> I wood prefer to use LDAP as my backend. >>>>>>>>> I have read tons of how-to SAMBA + LDAP, but non of the seams to >>>>>>>>> work >>>>>>>>> for my, is there someone that maybe can see what I have done rung in >>>>>>>>> my config.? >>>>>>>>> >>>>>>>>> I have attached my samba conf and LDAP conf. >>>>>>>>> >>>>>>>>> Samba is connected to OpenLDAP, and LDAP is running fine. >>>>>>>>> But when I try to join my Windows XP Pro SP3 I takes about one >>>>>>>>> Min and >>>>>>>>> it tells my that Username and/or Password maybe rung, ore not >>>>>>>>> existing. >>>>>>>>> >>>>>>>>> There is no doubt that Samba and Ldap is talking together (samba >>>>>>>>> have >>>>>>>>> updated the SID and RID's), cause when I try to join the domain LDAP >>>>>>>>> is activated, but the return value is somehow disappearing on the >>>>>>>>> way >>>>>>>>> back to my client >>>>>>>>> >>>>>>>>> I have some wireshark dump that I can provide if its necessary. >>>>>>>>> I can provide LOGS, DUMPS, and everything needed if its necessary. >>>>>>>>> >>>>>>>>> System info: >>>>>>>>> Clean installed Debian Lenny (5.0.3) >>>>>>>>> Clean installed Samba 3.2.5 + Winbind 3.2.5 >>>>>>>>> Clean installed OpenLDAP 2.4.11 (slapd) >>>>>>>>> Debian default smbldap-tools (smbldap-populate is working and have >>>>>>>>> populated LDAP without problems) >>>>>>>>> if there is something I have forgotten please just ask for it, I'm >>>>>>>>> close to be desperate.! >>>>>>>>> >>>>>>>>> --- >>>>>>>>> Med Venlig Hilsen / Best regards >>>>>>>>> Henrik Dige Semark >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>> >>>>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >>