samba - Sep 2003 - smbpasswd -a ldapsam problem

Hello,

I noticed the following issue:

when I add the default configuration for ldapsearches from the Howto
collection ?10.4.4.6, example 10.2

ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))

to smb.conf I cannot run 

smbpasswd -a [username]

anymore. It works fine without the ldap filter statement.

I noticed that the ldap queries are different with ldap filter activated
( from the ldap logfile ):


Sep 18 14:02:33 fermat slapd[1952]: conn=107 op=29 SRCH base="ou=Riege
Software,dc=riege,dc=com" scope=2
filter="(&(&(uid=jaeger)(objectClass=sambaSamAccount))(obje
ctClass=sambaSamAccount))"


Is the default wrong or does the filter not work at all?

regards, Gunther

-- 
Gunther Schlegel                    Riege Software International GmbH
Manager System Administration                            Mollsfeld 10
                                             40670 Meerbusch, Germany
Email: schlegel@riege.de                      Phone: +49-2159-9148-0
                                              Fax:   +49-2159-9148-11
---------------------------------------------------------------------

Disclaimer:
You may grab my GPG key from http://www.keyserver.net .
A nonproportional font is recommended for reading.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20030918/673c107e/attachment.bin

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gunther Schlegel wrote:

| when I add the default configuration for ldapsearches from the Howto
| collection ?10.4.4.6, example 10.2
|
| ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
|
| to smb.conf I cannot run
|
| smbpasswd -a [username]
|
| anymore. It works fine without the ldap filter statement.
|
| I noticed that the ldap queries are different with ldap filter activated
| ( from the ldap logfile ):

smbd appends objectclass filters as necessary,  It is better to run with
the default ldap filter if at all possible.  I'll take the blame but
having a single tweakable ldap filter doesn't really make sense anymore
since there are so many different types of searches that smbd might use.




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/bIM3IR7qMdg1EfYRAo6aAKC7C6STArItysVREWVLEJ+ZE2RcUACfXsZR
r9/eH3V4RDACmxPc8g+RlCc=R3ho
-----END PGP SIGNATURE-----