samba - Jul 2002 - Samba+PDC+LDAP+add user script - problem

Hi!

I've a problem, I'm using samba 2.2.5-1 (debian unstable source), which
I
compiled as the idealx howto explains, and all seems to work fine. Adding
Computer Accounts with "smbldap-useradd.pl -w <name>" works
fine, but when i
specify
add user script = /usr/local/sbin/smbldap-useradd.pl -w %
in the smb.conf, it works fine for the first computer I add automatically. But
when I add another computer, all is broken. I can't connect to the domain
from
the first and from the second computer.
What happens, when I add the second computer is, that the password-entries in
the ldap FOR the second computer are stored in the ldap-entries from the first
computer (also the cn and displayNames are overwritten), and the
password-entries in the ldap-entrie from the second computer are also filled,
but I've no idea where these hashes come from - they simply don't work,
because
the working entries are changed in the wrong computer-entry in the ldap.

But when I run the smbldap-useradd.pl-script as root/administrator (tried both)
from the shell all works fine.

Any ideas where the problem is?

greetz

----- Original Message -----
From: "Markus Schabel" <markus.schabel@tgm.ac.at>
To: <samba@lists.samba.org>
Sent: Wednesday, July 03, 2002 1:57 PM
Subject: [Samba] Samba+PDC+LDAP+add user script - problem

> Hi!
>
> I've a problem, I'm using samba 2.2.5-1 (debian unstable source),
which I
> compiled as the idealx howto explains, and all seems to work fine. Adding
> Computer Accounts with "smbldap-useradd.pl -w <name>" works
fine, but when i
> specify
> add user script = /usr/local/sbin/smbldap-useradd.pl -w %
> in the smb.conf, it works fine for the first computer I add automatically.
But
> when I add another computer, all is broken. I can't connect to the
domain from
> the first and from the second computer.
> What happens, when I add the second computer is, that the password-entries
in
> the ldap FOR the second computer are stored in the ldap-entries from the
first
> computer (also the cn and displayNames are overwritten), and the
> password-entries in the ldap-entrie from the second computer are also
filled,
> but I've no idea where these hashes come from - they simply don't
work,
because
> the working entries are changed in the wrong computer-entry in the ldap.
>
> But when I run the smbldap-useradd.pl-script as root/administrator (tried
both)
> from the shell all works fine.
>
> Any ideas where the problem is?
>
> greetz
What exactly happens is, that the smbldap-useradd.pl script creates the
machine-trust-accounts correctly, but when the client generates the
password-hashes for the PDC, samba inserts these hashes in the wrong LDAP-entry
(based on a wrong rid). Any idea how I can solve this?

greetz