This is what I have:
add machine script = /etc/samba/smbldap/smbldap-useradd -w '%u'
Which has been working for several months now.
Larry
-----Original Message-----
From: samba-bounces+larry=ptcoupling.com@lists.samba.org
[mailto:samba-bounces+larry=ptcoupling.com@lists.samba.org]On Behalf Of
Tony Austin
Sent: Wednesday, November 23, 2005 5:29 AM
To: samba@lists.samba.org
Subject: [Samba] smbldap-useradd.pl -a -w '%m' questions
I am still trying to troubleshoot my problem of not being able to join
computers to the domain.
I have found this comment by John Terpstra:-
>Newsgroups: linux.samba
>From: John H Terpstra <j...@samba.org> - Find messages by this author
>Date: Wed, 14 Jan 2004 00:00:17 +0100
>Curtis,
>Do not set the UID of Administrator to 0, it will break winbind use.
>Instead, use the account root in LDAP, set UID=0, GID=0, RID=500
>With these setting winbind should be happy.
>Also, add the '-a' option where appropriate, so you create in LDAP
both
>Posix and SambaSamAccounts. You must create both entries in one operation.
>- John T.
Two questions:-
1. Am I right to have the following line in smb.conf?
add machine script = /var/lib/samba/sbin/smbldap-useradd.pl -a -w '%m'
Samba by Example omits the -a and has '%u'. (Example 6.4)
2. Samba by Example 6.3.5.10 recommends setting uid=0 for the
Administrator account:-
./smbldap-usermod.pl -u 0 Adminstrator
which contradicts John's advice above.
Could uid=0 be causing my problem? What uid should Administrator have?
Back to the problem of not being able to join the domain ...
John says that -a and -w must be used together so that both entries are
created in one operation, however, even having done this, I see the
following in slapd.log:-
Nov 23 10:46:22 linux-server slapd[20034]: conn=3686 op=1 ADD
dn="UID=GARYB-1000$,OU=PEOPLE,DC=COMMTECHGROUP,DC=CO.UK"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3686 op=1 RESULT tag=105
err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3686 op=2 UNBIND
Nov 23 10:46:23 linux-server slapd[20034]: conn=-1 fd=43 closed
Nov 23 10:46:23 linux-server slapd[20034]: conn=-1 fd=42 closed
Nov 23 10:46:23 linux-server slapd[20034]: conn=-1 fd=41 closed
Nov 23 10:46:23 linux-server slapd[20034]: conn=3682 op=5 SRCH
base="ou=People,dc=commtechgroup,dc=co.uk" scope=1
filter="(&(objectClass=posixAccount)(uid=garyb-1000$))"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3682 op=5 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=12
SRCH
base="ou=Groups,dc=commtechgroup,dc=co.uk" scope=2
filter="(&(objectClass=sambaGroupMapping)(gidNumber=553))"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=12 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=13
SRCH
base="dc=commtechgroup,dc=co.uk" scope=2
filter="(&(&(uid=garyb-1000$)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=13 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=14
SRCH
base="dc=commtechgroup,dc=co.uk" scope=2
filter="(&(sambaSID=S-1-5-21-1504740027-1884281049-541626052-3100)(objectClass=sambaSamAccount))"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=14 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=15
SRCH
base="dc=commtechgroup,dc=co.uk" scope=2
filter="(&(uid=garyb-1000$)(objectClass=sambaSamAccount))"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=15 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=16
SRCH
base="dc=commtechgroup,dc=co.uk" scope=2
filter="(&(sambaSID=S-1-5-21-1504740027-1884281049-541626052-3100)(|(objectClass=sambaIdmapEntry)(objectClass=sambaSidEntry)))"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=16 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=17 ADD
dn="UID=GARYB-1000$,OU=PEOPLE,DC=COMMTECHGROUP,DC=CO.UK"
Nov 23 10:46:23 linux-server slapd[20034]: conn=3681 op=17 RESULT tag=105
err=68 textNov 23 10:46:23 linux-server slapd[20034]: conn=-1 fd=39 closed
Nov 23 10:46:23 linux-server slapd[20034]: conn=-1 fd=40 closed
Nov 23 10:46:27 linux-server slapd[20034]: conn=3659 op=86 SRCH
base="ou=People,dc=commtechgroup,dc=co.uk" scope=1
filter="(&(objectClass=posixAccount)(uidNumber=1034))"
Nov 23 10:46:27 linux-server slapd[20034]: conn=3659 op=86 SEARCH RESULT
tag=101 err=0 textNov 23 10:46:27 linux-server slapd[20034]: conn=3659 op=87
SRCH
base="ou=People,dc=commtechgroup,dc=co.uk" scope=1
filter="(&(objectClass=posixAccount)(uidNumber=1034))"
which looks like it's doing 2 ADDs for UID=GARYB-1000$ and the second one
fails with tag=105 err=68, which I have found from another source to mean
"attempt to add duplicate object".
Can anyone throw any light on what's going on here and how I should
proceed, please? Some help would be greatly appreciated.
Tony
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba