Steven Truong
2005-Sep-10 00:37 UTC
[Samba] Samba + OpenLDAP: LDAP server is running but could not respond to a search request
Hi, all. I am trying to set up SAMBA PDC with OpenLDAP using smbldap-tools from IDEALX. This is on a SLES 9 and I had run the latest online update as well as SP1 and SP2 for it. At this point smb is off and ldap is running. I have gotten up to where I needed to test for: ldapsearch -x -b "dc=sample,dc=com" "(ObjectClass=*)" # extended LDIF # # LDAPv3 # base <dc=sample,dc=com> with scope sub # filter: (objectClass=*) # requesting: ALL # # search result search: 2 result: 0 Success # numResponses: 1 ---------------------------------------------------------------- Here is the log for this request from /var/log/ldaplogs Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 fd=18 ACCEPT from IP127.0.0.1:1510 <http://127.0.0.1:1510> (IP=0.0.0.0:389 <http://0.0.0.0:389>) Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=0 BIND dn="" method=128 Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=0 RESULT tag=97 err=0 textSep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=1 SRCH base="dc=nanostellar,dc=com" scope=2 deref=0 filter="(objectClass=*)" Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=1 SEARCH RESULT tag=101 err=0 nentries=0 textSep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=2 UNBIND Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 fd=18 closed If you looked at the log, the second line where BIND dn="", I don't know if this is correct or an indication that something is missing. slapcat getent password getent group smbldap-useradd -m -a testuser smbldap-passwd testuser id testuser pdbedit -Lv testuser all of these tests work fine. However, net groupmap list [2005/09/09 04:39:30, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2763) ldapsam_setsamgrent: LDAP search failed: No such object [2005/09/09 04:39:30, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(2828) ldapsam_enum_group_mapping: Unable to open passdb Here is the log for this command: Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 fd=18 ACCEPT from IP127.0.0.1:1519 <http://127.0.0.1:1519> (IP=0.0.0.0:389 <http://0.0.0.0:389>) Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=0 BIND dn="cn=Admin,dc=sample,dc=com" method=128 Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=0 BIND dn="cn=Admin,dc=sample,dc=com" mech=SIMPLE ssf=0 Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=0 RESULT tag=97 err=0 textSep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=1 SRCH attr=supportedControl Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=1 SEARCH RESULT tag=101 err=0 nentries=1 textSep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=2 SRCH base="dc=sample,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaDomain)(sambaDomainName=sample))" Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=2 SRCH attr=sambaDomainName sambaNextRid sambaNextUserRid sambaNextGroupRid sambaSID sambaAlgorithmicRidBase objectClass Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=2 SEARCH RESULT tag=101 err=0 nentries=1 textSep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=3 SRCH base="ou=Goups,dc=sample,dc=com" scope=2 deref=0 filter="(objectClass=sambaGroupMapping)" Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=3 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=3 SEARCH RESULT tag=101 err=32 nentries=0 textSep 9 04:39:52 Ns02 slapd[10449]: conn=61 fd=18 close Please help me as I am struggling with this for more than a week already and still do not advance any further. Thank you very much for your help.
Beast
2005-Sep-10 04:23 UTC
[Samba] Samba + OpenLDAP: LDAP server is running but could not respond to a search request
Steven Truong wrote:> > If you looked at the log, the second line where BIND dn="", I don't know if > this is correct or an indication that something is missing.It means bind anonymously, make sure you give suficient raed access for anon user. What ldap * suffix in smb.conf? try searching from there, ie. ldapsearch -xLLL -b "dc=sample,dc=com" uid=testuser> However, > net groupmap list > [2005/09/09 04:39:30, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2763) > ldapsam_setsamgrent: LDAP search failed: No such object > [2005/09/09 04:39:30, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(2828) > ldapsam_enum_group_mapping: Unable to open passdbDid you already run net groupmap add? http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html -- --beast
paul kölle
2005-Sep-10 09:52 UTC
[Samba] Re: Samba + OpenLDAP: LDAP server is running but could not respond to a search request
Steven Truong wrote:> ldapsearch -x -b "dc=sample,dc=com" "(ObjectClass=*)" > # extended LDIF > # > # LDAPv3 > # base <dc=sample,dc=com> with scope sub > # filter: (objectClass=*) > # requesting: ALL > # > > # search result > search: 2 > result: 0 Success > > # numResponses: 1 > ---------------------------------------------------------------- > Here is the log for this request from /var/log/ldaplogs > Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 fd=18 ACCEPT from IP> 127.0.0.1:1510 <http://127.0.0.1:1510> (IP=0.0.0.0:389 <http://0.0.0.0:389>) > Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=0 BIND dn="" method=128 > Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=0 RESULT tag=97 err=0 text> Sep 9 04:32:51 Ns02 slapd[10449]: conn=52 op=1 SRCH > base="dc=nanostellar,dc=com" scope=2 deref=0 filter="(objectClass=*)"^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ that's not dc=sample,dc=com [snip]> However, > net groupmap list > [2005/09/09 04:39:30, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2763) > ldapsam_setsamgrent: LDAP search failed: No such object > [2005/09/09 04:39:30, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(2828) > ldapsam_enum_group_mapping: Unable to open passdb[snip]> filter="(&(objectClass=sambaDomain)(sambaDomainName=sample))" > Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=2 SRCH attr=sambaDomainName > sambaNextRid sambaNextUserRid sambaNextGroupRid sambaSID > sambaAlgorithmicRidBase objectClass > Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=2 SEARCH RESULT tag=101 err=0 > nentries=1 text> Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=3 SRCH > base="ou=Goups,dc=sample,dc=com" scope=2 deref=0^^^^^^typo? cheers Paul
Apparently Analagous Threads
- Samba PDC + Openldap (no database connection established after reboot)
- LDAP issue, access denied adding machine to domain, and LDAP user can't make unix-login on the box.
- Fwd: Migrating server
- Samba 3.0.22-11 as PDC with openLDAP 2.3.19 => Problem with Shares
- Cannot join to domain: Username could not be found.