samba - Jan 2006 - what with privileges

Hello samba,

I try add machine into domain. If i run smbldap-useradd manually, all
ok. But from samba i get errors:

Jan 29 22:47:04 sstand net:   smbldap_open: cannot access LDAP when not root..
Jan 29 22:47:04 sstand net: [2006/01/29 22:47:04, 0]
lib/smbldap.c:smbldap_search_suffix(1246)
Jan 29 22:47:04 sstand net:   smbldap_search_suffix: Problem during the LDAP
search: (unknown) (Time limit exceeded)
Jan 29 22:47:04 sstand net: [2006/01/29 22:47:04, 0]
passdb/secrets.c:secrets_init(64)
Jan 29 22:47:04 sstand net:   Failed to open /usr/local/private/secrets.tdb
Jan 29 22:47:04 sstand net: [2006/01/29 22:47:04, 0]
passdb/machine_sid.c:pdb_generate_sam_sid(163)
Jan 29 22:47:04 sstand net:   pdb_generate_sam_sid: Failed to store generated
machine SID.
Jan 29 22:47:05 sstand net: [2006/01/29 22:47:05, 0] lib/util.c:smb_panic2(1548)
Jan 29 22:47:05 sstand net:   PANIC: Could not generate a machine SID
Jan 29 22:47:05 sstand net:
Jan 29 22:47:05 sstand net:
Jan 29 22:47:11 sstand kernel: pid 2648 (net), uid 65534: exited on signal 6
(core dumped)
Jan 29 22:47:11 sstand smbd[2643]: [2006/01/29 22:47:11, 0]
rpc_server/srv_samr_nt.c:_samr_create_user(2028)
Jan 29 22:47:11 sstand smbd[2643]:   _samr_create_user: Running the command
`/usr/local/sbin/smbldap-useradd -t 240 -w "sstand$"' gave
134
Jan 29 22:47:15 sstand smbd[2643]: [2006/01/29 22:47:15, 0]
lib/util_sock.c:read_data(526)
Jan 29 22:47:15 sstand smbd[2643]:   read_data: read failure for 4 bytes to
client 192.168.26.10. Error = Connection reset by peer
  

-- 
Best regards,
Playnet                          mailto:playnet@mail333.com

On 1/29/06, Playnet <playnet@mail333.com> wrote:
> Hello samba,
>
> I try add machine into domain. If i run smbldap-useradd manually, all
> ok. But from samba i get errors:
>
> Jan 29 22:47:04 sstand net:   smbldap_open: cannot access LDAP when not
root..
I think that this indicates that Samba isn't running smbldap-useradd
as root because the account you're using doesn't have permission to
add computers to the domain.  If you don't have privileges enabled
("enable privileges = no"), then I think you need to use the root
account to join the machine.  If you do have privileges enabled
("enable privileges = yes"), then make sure that the account
you're
using has the SeMachineAccountPrivilege.  See chapter 14 in the Samba
HOWTO for details on privileges.

Josh Kelley