samba - Jan 2004 - Adding Samba Domain SIDs...

Our school district is moving to an LDAP database for mail and domain 
authentication.  We are seeing some errors in our logs we don't know how 
to resolve and need your help.  First, let me give a run down of what we 
have and what we are using:
RedHat 9.0
Samba 3.02 Pre 1
OpenLdap 2.1.22-3
Smbldaptools v. 0.83

We have a main campus where our Master LDAP database is located.  The 
Samba domain at this location is called BRYANT.  We have four wing 
locations which have Samba and LDAP installed (versions above).  The 
LDAP database from our main campus is being replicated to these wing 
locations over our IPSec VPN.  When we get Samba authenticating against 
the LDAP database at these locations - everything works fine except we 
see this error message in our logs:

Jan 23 08:39:05 desproxy smbd[15472]: [2004/01/23 08:39:05.863097, 1, 
pid=15472, effective(0, 0), real(0, 0)] 
lib/smbldap.c:add_new_domain_info(1301)
Jan 23 08:39:05 desproxy smbd[15472]:   failed to add domain dn= 
sambaDomainName=DES,dc=bryantschools,dc=org with: Internal 
(implementation specific) error
Jan 23 08:39:05 desproxy smbd[15472]:   ^Ino structuralObjectClass 
operational attribute
Jan 23 08:39:05 desproxy smbd[15472]: [2004/01/23 08:39:05.863392, 0, 
pid=15472, effective(0, 0), real(0, 0)] 
lib/smbldap.c:smbldap_search_domain_info(1350)
Jan 23 08:39:05 desproxy smbd[15472]:   Adding domain info for DES 
failed with NT_STATUS_UNSUCCESSFUL

On the second line above you see the domain name DES is trying to be 
entered into the LDAP database.  I assume it is trying to insert the 
servers SID and other important information into LDAP.  There are three 
other wing locations that have this same error in the logs.  What steps 
do we take to fix this?  Do we need to alter the way we are setting this 
up to make all this work.  I've noticed that adding Windows XP machines 
at these wing locations doesn't work and I assume it is because of this 
error.  Any assistance you can provide would be helpful!

Tait Shrum
Bryant Public Schools

On Sat, 2004-01-24 at 02:07, Tait Shrum wrote:
> Our school district is moving to an LDAP database for mail and domain 
> authentication.  We are seeing some errors in our logs we don't know
how
> to resolve and need your help.  First, let me give a run down of what we 
> have and what we are using:
> RedHat 9.0
> Samba 3.02 Pre 1
> OpenLdap 2.1.22-3
> Smbldaptools v. 0.83
> 
> We have a main campus where our Master LDAP database is located.  The 
> Samba domain at this location is called BRYANT.  We have four wing 
> locations which have Samba and LDAP installed (versions above).  The 
> LDAP database from our main campus is being replicated to these wing 
> locations over our IPSec VPN.  When we get Samba authenticating against 
> the LDAP database at these locations - everything works fine except we 
> see this error message in our logs:
> 
> Jan 23 08:39:05 desproxy smbd[15472]: [2004/01/23 08:39:05.863097, 1, 
> pid=15472, effective(0, 0), real(0, 0)] 
> lib/smbldap.c:add_new_domain_info(1301)
> Jan 23 08:39:05 desproxy smbd[15472]:   failed to add domain dn= 
> sambaDomainName=DES,dc=bryantschools,dc=org with: Internal 
> (implementation specific) error
> Jan 23 08:39:05 desproxy smbd[15472]:   ^Ino structuralObjectClass 
> operational attribute
> Jan 23 08:39:05 desproxy smbd[15472]: [2004/01/23 08:39:05.863392, 0, 
> pid=15472, effective(0, 0), real(0, 0)] 
> lib/smbldap.c:smbldap_search_domain_info(1350)
> Jan 23 08:39:05 desproxy smbd[15472]:   Adding domain info for DES 
> failed with NT_STATUS_UNSUCCESSFUL
Perhaps you have not setup referrals correctly on the slave servers, so
they do not tell Samba where it can perform the write.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20040125/79e57abb/attachment.bin