samba - Jan 2003 - LDAP PDC, net rpc vampire

still digging at this:

[2003/01/20 14:26:38, 2] passdb/pdb_ldap.c:ldapsam_connect_system(421)
  ldap_connect_system: succesful connection to the LDAP server
[2003/01/20 14:26:38, 4] passdb/pdb_ldap.c:ldapsam_open(472)
  The LDAP server is succesful connected
[2003/01/20 14:26:38, 4] passdb/pdb_ldap.c:ldapsam_getsampwnam(1573)
  We don't find this user [Administrator] count=0
[2003/01/20 14:26:38, 3] utils/net_rpc_samsync.c:fetch_account_info(333)
  Could not create account Administrator
[2003/01/20 14:26:38, 0] passdb/passdb.c:pdb_free_sam(355)
  pdb_free_sam: SAM_ACCOUNT was NULL

At this point I am suspecting that it's expecting an LDAP account to
exist already because I'm using sam backend = ldap. I'll try ldap_nua
to see if it improves things, but if anyone can interrupt me and tell
me what I'm missing I'd appreciate it.

Cheers,
Waider.
-- 
waider@waider.ie / Yes, it /is/ very personal of me.
"yeah, you're in no position to be talking. telling dirty limericks to
 a cat lady on the other side of the planet at half past two in the
 morning? really, now." - Meredith.

On January 20, waider+samba@waider.ie said:
> At this point I am suspecting that it's expecting an LDAP account to
> exist already because I'm using sam backend = ldap. I'll try
ldap_nua
> to see if it improves things, but if anyone can interrupt me and tell
> me what I'm missing I'd appreciate it.
Right, I think I've figured this out:

this is in utils/net_rpc_samsync.c

		if (*add_script) {
			int add_ret;
			all_string_sub(add_script, "%u", account,
				       sizeof(account));
			add_ret = smbrun(add_script,NULL);
			DEBUG(1,("fetch_account: Running the command `%s' "
				 "gave %d\n", add_script, add_ret));
		}

So this is expecting an add user/machine script.

The next line:

		pw = getpwnam_alloc(account);

checks to see if the account was created. And finally:

		if (pw) {
		     /* stuff... */
		} else {
			DEBUG(3, ("Could not create account %s\n", account));
			pdb_free_sam(&sam_account);
			return NT_STATUS_NO_SUCH_USER;
		}

prints an error message if the account /wasn't/ created.

So at this point, the only place a LDAP account will be created is if
getpwnam_alloc() does it. And, well, it doesn't. So for net rpc
vampire to work, you need a working ldap-oriented add user script.

Which goes back to my original question; the previously used script
has been put in the Attic. I'm guessing longterm the intention is to
use LDAP directly, rather than an intermediary script. But IMHO it'd
be better to leave the existing LDAP script in place until the new
LDAP stuff works?

Cheers,
Waider.
-- 
waider@waider.ie / Yes, it /is/ very personal of me.

"Your broker is a half-naked blue-and-orange crypto-anarchist?"
                              - Neal Stephenson / The Great Simoleon Caper