I can't find /etc/openldap/ldap.conf Le mar. 6 ao?t 2019 ? 10:16, Rowland penny via samba <samba at lists.samba.org> a ?crit :> On 06/08/2019 08:41, Guillaume Couvreur wrote: > > Distro : Debian 9 > > > > log samba and smb as attachments > > The log just tells me that samba_dnsupdate needs looking at. ;-) > > Try this: > > Add to the [global] section of smb.conf: > > ldap server require strong auth = allow_sasl_over_tls > > Now modify/create /etc/openldap/ldap.conf > > Add/change: > > HOST <YOUR_DCs_FQDN> > TLS_CACERT /var/lib/samba/private/tls/cert.pem > TLS_REQCERT never > > Restart Samba and try again. > > If it still doesn't work, can we see 'log.winbindd' > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- *Guillaume COUVREUR* *Chef de projet technique* guillaume.couvreur at ntico-operation.com 03.66.72.80.79 1A, avenue de l'Harmonie 59650 VILLENEUVE D'ASCQ
On 06/08/2019 09:22, Guillaume Couvreur wrote:> I can't find /etc/openldap/ldap.confI did say 'modify/create', it sounds like you will need to 'create' it. Rowland
On 06/08/2019 09:36, Guillaume Couvreur wrote:> it doesn't work, here is the log fileNothing there, can you try raising the log level ? start by adding: ? log level = 4 to smb.conf and restart Samba and try again. Is there any way you can post the actual query, it could be bypassing Samba and going direct to ldap, in which case it probably will not show up in the Samba logs Rowland
Okay, it's done. Here is the file Le mar. 6 ao?t 2019 ? 10:55, Rowland penny via samba <samba at lists.samba.org> a ?crit :> On 06/08/2019 09:36, Guillaume Couvreur wrote: > > it doesn't work, here is the log file > > Nothing there, can you try raising the log level ? > > start by adding: > > log level = 4 > > to smb.conf and restart Samba and try again. > > Is there any way you can post the actual query, it could be bypassing > Samba and going direct to ldap, in which case it probably will not show > up in the Samba logs > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- *Guillaume COUVREUR* *Chef de projet technique* guillaume.couvreur at ntico-operation.com 03.66.72.80.79 1A, avenue de l'Harmonie 59650 VILLENEUVE D'ASCQ