thr3ads.net - samba - [Samba] Samba+LDAP Groups resolving problem [Oct 2005]

If this information is useful, please help other people find it:
Share via:

robert.walland@r-kb.si

2005-Oct-20 13:27 UTC

[Samba] Samba+LDAP Groups resolving problem

Hi, 

I have managed to configure Samba+LDAP+smbldap-tools. Everything works 
fine, except one strange problem is appearing. 
When I connect with Windows tool UserManagerForDomains or I want to create 
a share on a Wndows box I can see the users but no groups. 

With UserManagerForDomains is see following: 

Users:        All the users 
Groups: none, just description of Replicators Group and the description 
Domain Unix Group 

When I try to add a group on share via selecting it I see nothing. 

The strange thing is that everything works fine and when I add a group 
like DOMAIN\group it works normally.

The only error I found was the LDAP error  bdb_equality_candidates: 
(sambaGroupType) index_param failed (18) but I can't find any clues. 

In the slapd.conf file I use access control policy like in the idealx 
manual. 


The LDAP log file : 

Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH 
base="ou=Users,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(uid=*)(objectClass=sambaSamAccount))"  
Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH attr=uid sambaSid 
displayName description sambaAcctFlags 
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=28 SEARCH RESULT tag=101 err=0 

nentries=511 text= 
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=4))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH attr=cn sambaSid 
displayName description sambaGroupType 
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
(sambaGroupType) index_param failed (18)  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SEARCH RESULT tag=101 err=0
nentries=0 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=5))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH attr=cn sambaSid 
displayName description sambaGroupType 
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
(sambaGroupType) index_param failed (18)  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SEARCH RESULT tag=101 err=0
nentries=5 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-544))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-548))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-550))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-551))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-552))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=2))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH attr=cn sambaSid 
displayName description sambaGroupType 
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
(sambaGroupType) index_param failed (18)  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SEARCH RESULT tag=101 err=0
nentries=6 text= 


Thanks

Oliver Schulze L.

2005-Oct-20 15:38 UTC

head link

[Samba] Samba+LDAP Groups resolving problem

Does:
net groupmap list
works?

Oliver

robert.walland@r-kb.si wrote:
>Hi, 
>
>I have managed to configure Samba+LDAP+smbldap-tools. Everything works 
>fine, except one strange problem is appearing. 
>When I connect with Windows tool UserManagerForDomains or I want to create 
>a share on a Wndows box I can see the users but no groups. 
>
>With UserManagerForDomains is see following: 
>
>Users:        All the users 
>Groups: none, just description of Replicators Group and the description 
>Domain Unix Group 
>
>When I try to add a group on share via selecting it I see nothing. 
>
>The strange thing is that everything works fine and when I add a group 
>like DOMAIN\group it works normally.
>
>The only error I found was the LDAP error  bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18) but I can't find any clues. 
>
>In the slapd.conf file I use access control policy like in the idealx 
>manual. 
>
>
>The LDAP log file : 
>
>Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH 
>base="ou=Users,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(uid=*)(objectClass=sambaSamAccount))"  
>Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH attr=uid sambaSid 
>displayName description sambaAcctFlags 
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=28 SEARCH RESULT tag=101 err=0 
>
>nentries=511 text= 
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=4))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH attr=cn sambaSid 
>displayName description sambaGroupType 
>Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18)  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SEARCH RESULT tag=101 err=0
>nentries=0 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=5))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH attr=cn sambaSid 
>displayName description sambaGroupType 
>Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18)  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SEARCH RESULT tag=101 err=0
>nentries=5 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-544))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-548))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-550))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-551))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-552))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=2))"
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH attr=cn sambaSid 
>displayName description sambaGroupType 
>Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18)  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SEARCH RESULT tag=101 err=0
>nentries=6 text= 
>
>
>Thanks
> 
>  
>
-- 
Oliver Schulze L.
<oliver@samera.com.py>

Apparently Analagous Threads

Search for more maybe matching threads

samba - Oct 2005 - Samba+LDAP Groups resolving problem

[Samba] Samba+LDAP Groups resolving problem

[Samba] Samba+LDAP Groups resolving problem

Apparently Analagous Threads