Kent L. Nasveschuk
2003-Dec-17 12:50 UTC
[Samba] Samba BDC doesn't talk to LDAP slave on same machine
Hello,
I can't get my BDC to talk to the LDAP slave running on the same
machine. Replication between slave and master works but samba on the BDC
doesn't appear to be communicating with the slave LDAP server.
Everything off the PDC works fine.
--
smb.conf on BDC
--
[global]
workgroup = WarehamPS
encrypt passwords = Yes
time offset = 60
time server = Yes
socket options = TCP_NODELAY
security = user
logon script = netlogon.bat
writable = Yes
dns proxy = no
directory mask = 02770
preferred master = yes
netbios name = Decas2
server string = RedHat 8.0 Samba LDAP
passdb backend = ldapsam:"ldap://172.16.0.3 ldap://127.0.0.1"
ldap passwd sync = Yes
machine password timeout = 604800
passwd program = /usr/local/samba/bin/smbpasswd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUnix\spassword:* %n\n
log file = /var/log/samba.%m
debug level = 2
max log size = 50
add user script = /usr/local/sbin/smbldap-useradd.pl %u
delete user script = /usr/local/sbin/smbldap-useradd.pl %u
add group script = /usr/local/sbin/smbldap-groupadd.pl
delete group script = /usr/local/sbin/smbldap-groupdel.pl
add machine script = /usr/local/samba/bin/smbpasswd -a -m %u
logon script = netlogon.bat
logon path logon drive = H:
logon home domain logons = Yes
os level = 64
domain master = No
dns proxy = Yes
admin users = @domain_admins
wins support = no
wins server = 172.16.0.3
wins proxy = no
name resolve order = wins hosts bcast
ldap suffix = dc=tow,dc=net
ldap machine suffix = ou=Computers
ldap user suffix = ou=Users
ldap group suffix = ou=Groups
ldap admin dn = cn=admin,dc=tow,dc=net
ldap ssl = no
[homes]
comment = Home Directories
read only = no
browseable = no
writable = yes
path = %H
# valid users = %S
hide files = /.*/
[netlogon]
comment = Netlogon share
path = /usr/local/samba/netlogon
locking = no
browseable = no
read only = yes
write list = @domain_admins
[programs]
comment = Programs
path = /accounts/programs
[printers]
comment = All Printers
path = /var/spool/samba
read only = Yes
printable = Yes
browseable = No
--
slapd.conf ond BDC
--
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.4 2000/08/26
17:06:18 kurt Exp $
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/samba.schema
database ldbm
suffix "dc=tow,dc=net"
rootdn "cn=admin,dc=tow,dc=net"
rootpw {SSHA}bbcOI00dfOOJdNCsuFfWf8forJC/Q2P8
directory /usr/local/var/openldap-slurp/wareham
updatedn "cn=admin,dc=tow,dc=net"
updateref "ldap://172.16.0.3"
schemacheck on
lastmod on
# Indices to maintain
#index objectClass eq
index objectClass,uid,uidNumber,gidNumber eq
#index cn,mail,surname,givenname eq,subinitial
index cn,sn pres,eq,sub
access to dn=".*dc=tow,dc=net"
by self write
by * read
access to attrs=userPassword,sambaNTPassword,sambaLMPassword
by dn="cn=root,ou=Users,dc=tow,dc=net" write
by self write
# by anonymous auth
by * none
--
LDAP.conf on BDC
--
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04
19:57:01 kurt Exp $
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
BASE dc=tow,dc=net
URI ldap://172.16.151.254
host 172.16.151.254 172.16.0.20
ldap_version 3
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
--
Kent L. Nasveschuk <kent@wareham.k12.ma.us>
Andrew Bartlett
2003-Dec-25 07:15 UTC
[Samba] Samba BDC doesn't talk to LDAP slave on same machine
On Wed, 2003-12-17 at 23:50, Kent L. Nasveschuk wrote:> Hello, > I can't get my BDC to talk to the LDAP slave running on the same > machine. Replication between slave and master works but samba on the BDC > doesn't appear to be communicating with the slave LDAP server. > > Everything off the PDC works fine.> passdb backend = ldapsam:"ldap://172.16.0.3 ldap://127.0.0.1"Swap the order of ldap servers - then we will read the slave, and only talk to the master if for some reason the local ldap server is down. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20031225/2d45f323/attachment.bin