samba - Jul 2004 - LDAP and Domain

Hi to all,

I'm configuring a samba server to act as Windows Domain Server through 
ldap,
I've created the users for the domain, and seems to work fine when I'm 
not trying
to log against the domain, (I tried with smbclient and mac os x).

The problem is when I'm trying to add a windows machine to the domain, 
it ask me
the login/password, I give one of "administrator" (smbportia), but 
reading the ldap debug
(slapd -d 255) I think it's not matching the administrator group type 
or somehing, my data:

dn: uid=smbportia,ou=People,dc=deimos,dc=danguer,dc=com
uid: smbportia
cn: smbportia
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
objectClass: sambaSamAccount
userPassword::
e2NyeXB0fSQxJDhuQlozZVhRJENxR0VCdG1uZXdxbms3U2hjWTFMMS4shadowLastChange: 12612
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1002
homeDirectory: /home/smbportia
gecos: ,,,
structuralObjectClass: account
entryUUID: bddf3fa4-6938-1028-91b2-88a002fe7a63
creatorsName: cn=admin,dc=deimos,dc=danguer,dc=com
createTimestamp: 20040713165216Z
sambaSID: S-1-0-0-3004
displayName: ,,,
sambaPwdCanChange: 1089737666
sambaPwdMustChange: 2147483647
sambaLMPassword: 837FF6FF6B2CD9BBAAD3B435B51404EE
sambaNTPassword: BF375DCCA5C6EC78C4E0DE1C2728DEEB
sambaPwdLastSet: 1089737666
sambaDomainName: DANGUERTONIA
gidNumber: 1002
sambaPrimaryGroupSID: S-1-5-21-0-512
sambaAcctFlags: [UX         ]
entryCSN: 2004071317:29:49Z#0x0001#0#0000
modifiersName: cn=admin,dc=deimos,dc=danguer,dc=com
modifyTimestamp: 20040713172949Z

dn: cn=smbadmins,ou=Group,dc=deimos,dc=danguer,dc=com
objectClass: posixGroup
objectClass: top
objectClass: sambaGroupMapping
cn: smbadmins
userPassword:: e2NyeXB0fXgstructuralObjectClass: posixGroup
entryUUID: d7a87806-6938-1028-91b3-88a002fe7a63
creatorsName: cn=admin,dc=deimos,dc=danguer,dc=com
createTimestamp: 20040713165300Z
description: Local Unix group
gidNumber: 1002
displayName: Domain Admins
sambaSID: S-1-5-21-0-512
sambaGroupType: 2
memberUid: S-1-0-0
entryCSN: 2004071317:44:51Z#0x0001#0#0000
modifiersName: cn=admin,dc=deimos,dc=danguer,dc=com
modifyTimestamp: 20040713174451Z

------------
I added the memberUID trying to get the domain:
------------

dn: sambaDomainName=DANGUERTONIA,dc=deimos,dc=danguer,dc=com
objectClass: sambaDomain
sambaDomainName: DANGUERTONIA
sambaSID: S-1-0-0
structuralObjectClass: sambaDomain
entryUUID: e2832e72-68ef-1028-9b3e-b3f540fb5850
creatorsName: cn=admin,dc=deimos,dc=danguer,dc=com
createTimestamp: 20040713081045Z
entryCSN: 2004071308:10:45Z#0x0001#0#0000
modifiersName: cn=admin,dc=deimos,dc=danguer,dc=com
modifyTimestamp: 20040713081045Z


any suggestions? (I'm using samba 3.0a in a Debian testing box)

Thanks in advance

+-+-+-+-+-+-+-+-+-+-+-+-+-+
No te pido que hagas una b?squeda en Google por mi.
Eso ya lo hice!!!

On 14 Jul 2004, at 03:39, Daniel Guerrero wrote:
> dn: uid=smbportia,ou=People,dc=deimos,dc=danguer,dc=com
> sambaSID: S-1-0-0-3004
That doesn't seem right to me - for the Windows Administrator, the 
sambaSID and sambaPrimaryGroupSID should look something like

sambaSID: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-YYYY
sambaPrimaryGroupSID: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-512

Where the XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX is the same string of 
numbers from your domain's sambaSID (the domain's sambaSID is stored in 
an object with objectClass=sambaDomain):

   [me@here]$ ldapsearch -h ldapserver -b "dc=x,dc=com,dc=au" -D \
     "cn=admin,dc=x,dc=com,dc=au" -x -W
sambaDomainName="DOMAIN"

   dn: sambaDomainName=DOMAIN,o=smb,dc=x,dccom,dc=au
   sambaDomainName: DOMAIN
   sambaAlgorithmicRidBase: 1000
   objectClass: sambaDomain
   sambaSID: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX

Hope this helps
Alex