thr3ads.net - samba - [Samba] samba3/ldap/net groupmap fails [Dec 2003]

If this information is useful, please help other people find it:
Share via:

John Campbell

2003-Dec-11 18:59 UTC

[Samba] samba3/ldap/net groupmap fails

hi,

we recently upgraded from samba 2.2.8a w/ldap to samba3 w/ldap and
having troubles with domain group mappings.

first symptom is that net groupmap list returns nothing.

[root@lola root]# net groupmap list
[root@lola root]#

if we try to add a groupmapping, the command fails:

net groupmap add sid=<sid-gid> ntgroup="Domain Admins"
unixgroup=domadm
type=domain --debuglevel=4

gives the following output (please excuse voluminous output):

-----------
[2003/12/11 13:47:26, 4] param/loadparm.c:lp_load(3946)
  pm_process() returned Yes
[2003/12/11 13:47:26, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0
[2003/12/11 13:47:26, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.4.1 bcast=192.168.4.255 nmask=255.255.255.0
[2003/12/11 13:47:26, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.2.1 bcast=192.168.2.255 nmask=255.255.255.0
[2003/12/11 13:47:26, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.5.1 bcast=192.168.5.255 nmask=255.255.255.0
[2003/12/11 13:47:26, 2] lib/smbldap.c:smbldap_search_domain_info(1296)
  Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=MAXT))]
[2003/12/11 13:47:26, 2] lib/smbldap.c:smbldap_search_suffix(1067)
  smbldap_search_suffix: searching
for:[(&(objectClass=sambaDomain)(sambaDomainName=MAXT))]
[2003/12/11 13:47:26, 2] lib/smbldap.c:smbldap_open_connection(624)
  smbldap_open_connection: connection opened
[2003/12/11 13:47:26, 3] lib/smbldap.c:smbldap_connect_system(786)
  ldap_connect_system: succesful connection to the LDAP server
[2003/12/11 13:47:26, 4] lib/smbldap.c:smbldap_open(837)
  The LDAP server is succesful connected
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=4294967295))]
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=sambaGroupMapping)(gidNumber=600))]
[2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769)
  ldapsam_getgroup: Did not find group
[2003/12/11 13:47:26, 2]
passdb/pdb_ldap.c:ldapsam_search_one_group(1624)
  ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=600))]
adding entry for group Domain Admins failed!
[2003/12/11 13:47:26, 2] utils/net.c:main(758)
  return code = -1
-------------

any ideas as to what could be causing this? thanks!

--john campbell

Fabien Chevalier

2003-Dec-11 19:15 UTC

head link

[Samba] samba3/ldap/net groupmap fails

Le Thursday 11 December 2003 19:58, John Campbell a ?crit
:> hi,
>
> we recently upgraded from samba 2.2.8a w/ldap to samba3 w/ldap
> and having troubles with domain group mappings.
>
> first symptom is that net groupmap list returns nothing.
>
> [root@lola root]# net groupmap list
> [root@lola root]#
hmmm...i'm sorry i cannot help you with this issue, but i can give some more
precisions about this
strange effect.

I suppose you're using ldapsam_compat as ldap backend?

I used to use in my smb.conf the following:
passwd backend = tdbsam ldapsam_compat:ldap://127.0.0.1
and had no issue with it.

As soon as i inverted sam backends:
passwd backend = ldapsam_compat:ldap://127.0.0.1 tdbsam

net groupmap list didn't list any default or non default mapping.

Anybody has an explanation about this fact?

regards,

Fabien Chevalier

赵永明

2003-Dec-12 08:10 UTC

head link

[Samba] samba3/ldap/net groupmap fails

sambaHi:
	I have just get this a little. Mandrake cooker:samba 3.0.1rc1:openldap
2.1.23----just for test.
	hear is my smb.conf:


	log level = 1 passdb:10 auth:10 winbind:0

	ldap suffix = o=xxx
	ldap admin dn = cn=root,o=xxx
	#ldap server = 127.0.0.1
	#ldap port = 389
	ldap machine suffix = ou=Computer
	ldap user suffix = ou=People
	ldap group suffix = ou=Group
	#ldap idmap suffix = ou=People

	you also need to do a little ldap log analysis. SLAPDSYSLOGLEVEL=256 in
/etc/sysconfig/ldap

	After i look deep into those log of ldap, i think there MUST exist an
nobody(guest) UID GID. In you DEBUG log ,there is a UID of 4G-1, which I think
it can't map to a real UID.

	as for me, user nobody: uidNumber=65534 gidNumber=65534,group nobody:
gidNumber=65534

	http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html
	good for refrence

Apparently Analagous Threads

Search for more apparently analagous threads

samba - Dec 2003 - samba3/ldap/net groupmap fails

[Samba] samba3/ldap/net groupmap fails

[Samba] samba3/ldap/net groupmap fails

[Samba] samba3/ldap/net groupmap fails

Apparently Analagous Threads