samba - May 2005 - Samba-3 by Example Ch 6

I am following Chapter 6 of Samba-3 By Example to set up Samba on
a Fedora 3 box. It seems to go Ok until page 144 step 5.

# net getlocalsid
[2005/05/02 00:22:04, 0] lib/smbldap.c:smbldap_search_suffix(1155)
   smbldap_search_suffix: Problem during the LDAP search:  (No such object)
SID for domain SIROCCO is: S-1-5-21- etc


Running the same command with some debugging:

# net -d 2 getlocalsid
[2005/05/02 00:27:43, 2] lib/interface.c:add_interface(79)
   added interface ip=172.16.0.4 bcast=172.16.255.255 nmask=255.255.0.0
[2005/05/02 00:27:43, 2] lib/interface.c:add_interface(79)
   added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
[2005/05/02 00:27:43, 2] lib/smbldap.c:smbldap_search_domain_info(1373)
   Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=ESANDS))]
[2005/05/02 00:27:43, 2] lib/smbldap.c:smbldap_open_connection(692)
   smbldap_open_connection: connection opened
[2005/05/02 00:27:43, 0] lib/smbldap.c:smbldap_search_suffix(1155)
   smbldap_search_suffix: Problem during the LDAP search:  (No such object)
[2005/05/02 00:27:43, 2] lib/smbldap.c:smbldap_search_domain_info(1381)
   Problem during LDAPsearch: No such object
[2005/05/02 00:27:43, 2] lib/smbldap.c:smbldap_search_domain_info(1382)
   Query was: dc=esands,dc=com,
(&(objectClass=sambaDomain)(sambaDomainName=ESANDS))
[2005/05/02 00:27:43, 2] passdb/pdb_ldap.c:pdb_init_ldapsam(2959)
   pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the
domain
   pdb_init_ldapsam: Continuing on regardless, will be unable to allocate new
users/groups, and will risk BDCs having inconsistant SIDs
SID for domain SIROCCO is: S-1-5-21- etc
[2005/05/02 00:27:43, 2] utils/net.c:main(859)
   return code = 0


It seems that a SID is being created for the host (SIROCCO) but not for the
domain (ESANDS).
Is it smbd that is responsible for creating the domain SID?
Can anyone offer some insight as to what might be going wrong?

s?n, 01.05.2005 kl. 16.39 skrev taso:
> I am following Chapter 6 of Samba-3 By Example to set up Samba on
> a Fedora 3 box. It seems to go Ok until page 144 step 5.
> 
> # net getlocalsid
> [2005/05/02 00:22:04, 0] lib/smbldap.c:smbldap_search_suffix(1155)
>    smbldap_search_suffix: Problem during the LDAP search:  (No such object)
> SID for domain SIROCCO is: S-1-5-21- etc
[...]

Before you go any further, "no such object" from LDAP usually means
that
you have your LDAP base (suffix) seriously screwed up. I suggest that
you sort that out first, since it keeps on occurring.

You can test with OpenLDAP's (if that's what you're using)
ldapsearch
(read the man page, for goodness sake) and do try to figure out how LDAP
works, from the ground off. It's worth the trouble, since LDAP is a pot
of gold for Unix admins.

Best,

--Tonni

-- 
Nothing sucksseeds like a pigeon without a beak ...

mail: tonye@billy.demon.nl
http://www.billy.demon.nl
 
They'll love us, won't they? They feed us, don't they? ...

taso wrote:
> I am following Chapter 6 of Samba-3 By Example to set up Samba on
> a Fedora 3 box. It seems to go Ok until page 144 step 5.
> 
> # net getlocalsid
> [2005/05/02 00:22:04, 0] lib/smbldap.c:smbldap_search_suffix(1155)
>   smbldap_search_suffix: Problem during the LDAP search:  (No such object)
> SID for domain SIROCCO is: S-1-5-21- etc
> 
> 
The smbldap_search_suffix: error went away when I added the following entries
to LDAP directory.

dn: dc=esands,dc=com
objectclass: dcObject
objectclass: organization
o: ESS
dc: esands

dn: cn=Manager,dc=esands,dc=com
objectclass: organizationalRole
cn: Manager

http://www.openldap.org/doc/admin22/quickstart.html shows how to do the above.

Now "net getlocalsid sirocco" produces the same SID as "net
getlocalsid esands",
ie the same SID for both the host (PDC) and the domain. Can anybody confirm that
it's
supposed to be like that?