Hi, all.
Now my ldap-directory used for storing unix users accounts.
I want use it for samba auth too.
My samba config and ldap records attached.
When I try start smbd I get error in logfile:
[2005/11/25 16:30:21, 3]passdb/pdb_ldap.c:ldapsam_enum_group_memberships(2513)
primary group of [nobody] not found
Any ideas?
WBR
--
Dmitriy Kirhlarov
OILspace, 26 Leninskaya sloboda, bld. 2, 2nd floor, 115280 Moscow, Russia
P:+7 095 105 7247 ext.203 F:+7 095 105 7246 E:DmitriyKirhlarov@oilspace.com
OILspace - The resource enriched - www.oilspace.com
-------------- next part --------------
dn: uid=root,ou=users,o=oiltest
cn: root
sn: root
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
gidNumber: 0
uid: root
uidNumber: 0
homeDirectory: /home/root
sambaPwdLastSet: 0
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaPwdMustChange: 2147483647
sambaPrimaryGroupSID: S-1-5-21-3177952046-2209943301-2637743033-512
sambaLMPassword: XXX
sambaNTPassword: XXX
sambaAcctFlags: [U ]
sambaSID: S-1-5-21-3177952046-2209943301-2637743033-500
loginShell: /bin/false
gecos: Netbios Domain Administrator
dn: uid=nobody,ou=users,o=oiltest
cn: nobody
sn: nobody
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
gidNumber: 514
uid: nobody
uidNumber: 999
homeDirectory: /dev/null
sambaPwdLastSet: 0
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaPwdMustChange: 2147483647
sambaPrimaryGroupSID: S-1-5-21-3177952046-2209943301-2637743033-514
sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaAcctFlags: [NU ]
loginShell: /bin/false
sambaSID: S-1-5-21-3177952046-2209943301-2637743033-501
dn: cn=Domain Admins,ou=groups,o=oiltest
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 512
cn: Domain Admins
memberUid: root
description: Netbios Domain Administrators
sambaSID: S-1-5-21-3177952046-2209943301-2637743033-512
sambaGroupType: 2
displayName: Domain Admins
dn: cn=Domain Guests,ou=groups,o=oiltest
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 514
cn: Domain Guests
description: Netbios Domain Guests Users
sambaSID: S-1-5-21-3177952046-2209943301-2637743033-514
sambaGroupType: 2
displayName: Domain Guests
memberUid: nobody
dn: cn=Domain Users,ou=groups,o=oiltest
sambaGroupType: 2
displayName: Domain Users
description: Netbios Domain Users
objectClass: posixGroup
objectClass: sambaGroupMapping
memberUid: nobody
gidNumber: 513
sambaSID: S-1-5-21-3177952046-2209943301-2637743033-513
cn: Domain Users
-------------- next part --------------
[global]
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u"
"%g"
admin users = root Administrator
available = yes
bind interfaces only = yes
client ntlmv2 auth = yes
deadtime = 30
delete user from group script = /usr/local/sbin/smbldap-groupmod -x
"%u" "%g"
delete user script = /usr/local/sbin/smbldap-userdel "%u"
display charset = KOI8-R
dont descend = /proc,/dev,/usr/compat/linux/proc
dos charset = CP866
dos filetimes = yes
interfaces = fxp0 lo0
lanman auth = no
ldap admin dn = uid=fbsd-samba-admin,ou=virtusers,o=oiltest
ldap group suffix = ou=groups
ldap machine suffix = ou=machines
ldap passwd sync = Only
ldap replication sleep = 2000
ldapsam:trusted = yes
ldap ssl = start_tls
ldap suffix = o=oiltest
ldap user suffix = ou=users
log file = /var/log/samba/log
log level = 3 passdb:5 auth:10 winbind:2
map to guest = Bad User
netbios name = FBSD
os level = 65
passdb backend = ldapsam:ldap://fbsd
passwd program = /usr/local/sbin/smbldap-passwd %u
preload = Guest pub cdrom printers
security = USER
server signing = auto
server string = Samba Server on fbsd.mow.oilspace.com
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g"
"%u"
time server = yes
workgroup = OILSPACE
[Guest]
# This share need for "map to guest" if "security" not
"share"
comment = FTP public share
path = /var/ftp/pub
read only = yes
[pub]
hide dot files = no
hide special files = yes
inherit acls = yes
inherit permissions = yes
locking = yes
map acl inherit = yes
available = no
comment = FTP public share
path = /var/ftp/pub
browseable = yes
[homes]
comment = Home Directory
path = /home/%U
read only = no
browseable = yes