samba - Feb 2006 - Samba 3 by Example - chapter 5 & 6 ( Manager -> sambaadmin)

Dear Samba & Users.

I have spent some time going over the documentation, however I still no not
fully understand what the cause is.

I am focusing on Samba 3 by Example chapter 5 & 6 specifically

Chapter 5 smbpasswd -w 123456

[root@node1 data]# smbpasswd -w 123456
Setting stored password for "cn=Manager,dc=ddesign,dc=com" in
secrets.tdb

Chapter 6 indicates in the smb.conf to use sambaadmin instead of manager.
If i change this to manager in the smb.conf & also this entry in the
slapd.conf


access to attrs=sambaLMPassword,sambaNTPassword
                              by dn="cn=sambaadmin,dc=ddesign,dc=com"
write
                              by * none

to

access to attrs=sambaLMPassword,sambaNTPassword
                              by dn="cn=Manager,dc=ddesign,dc=com"
write
                              by * none

Alll works fine.

Chapter 6 smbpasswd -w 123456

[root@node1 ~]# smbpasswd -w 123456
Setting stored password for "cn=sambadmin,dc=ddesign,dc=com" in
secrets.tdb

[root@node1 samba]# cat smbd
[2006/01/30 15:23:15, 0] lib/smbldap.c:smbldap_connect_system(890)
failed to bind to server ldap://127.0.0.1 with
dn="cn=sambadmin,dc=ddesign,dc=com" Error: Invalid credentials

[2006/01/30 15:23:15, 1] lib/smbldap.c:another_ldap_try(1051)
  Connection to LDAP server failed for the 1 try!

I have added this ldif entry from chapter 6 ;

dn: cn=updateuser,dc=ddesign,dc=com
objectClass: person
cn: updateuser
sn: updateuser
userPassword: 123456

dn: cn=sambaadmin,dc=ddesign,dc=com
objectClass: person
cn: sambaadmin
sn: sambaadmin
userPassword: 123456

When using sambaadmin instead of manager samba hangs unable to connect to 
the ldap database, however if i change this entry in the slapd.conf all 
works find also.

rootdn      "cn=Manager,dc=ddesign,dc=com"

TO>>>

rootdn      "cn=sambaadmin,dc=ddesign,dc=com"

I have been through this configuration several times and keep getting the 
same issue.

Is it possible that I am missing a crutial step between chapter 5 and the 
single master ldap chapter 6 master/slave configuration.

This is only for testing purposes so I can blow away the database without 
any worries.

I am thinking that the problem may be an entry in ldap is not there, 
although it shows the sambaadmin user. For the moment I am using Manager in 
replace of sambaadmin.


Thanks.
Adrian Sender.

adrian sender wrote:
> 
> dn: cn=sambaadmin,dc=ddesign,dc=com
> objectClass: person
> cn: sambaadmin
> sn: sambaadmin
> userPassword: 123456
> 
> When using sambaadmin instead of manager samba hangs unable to connect 
> to the ldap database, however if i change this entry in the slapd.conf 
> all works find also.
> 
> rootdn      "cn=Manager,dc=ddesign,dc=com"
> 
> TO>>>
> 
> rootdn      "cn=sambaadmin,dc=ddesign,dc=com"
Given that, I'd guess that your directory server doesn't support plain 
text userPassword fields.  Try crypt()ing them.

# perl -e 'print crypt("123456", "AB") .
"\n"'
ABiELdbxGY2fY

So, then, your LDIF should have:

dn: cn=sambaadmin,dc=ddesign,dc=com
objectClass: person
cn: sambaadmin
sn: sambaadmin
userPassword: {crypt}ABiELdbxGY2fY

Well... you have to create the containers using slapdadd.  After the 
containers are present, then you can populate them with users, etc, 
using ldapadd or other tools.  If you haven't created the containers, 
nothing is going to work.



adrian sender wrote:
> The database has not been populated, and cannot be populated using 
> "sambaadmin"
> 
> 
> 
>> From: Gordon Messmer <yinyang@eburg.com>
>> To: adrian sender <adrian_au1@hotmail.com>
>> CC: samba@lists.samba.org
>> Subject: Re: [Samba] Samba 3 by Example - chapter 5 & 6 ( Manager
->
>> sambaadmin)
>> Date: Tue, 28 Feb 2006 22:01:24 -0800
>>
>> adrian sender wrote:
>>>
>>> [root@node1 scripts]# slapadd -v -l admin-accts.ldif
>>> added: "cn=updateuser,dc=tinistuff,dc=com" (00000002)
>>> added: "cn=sambaadmin,dc=tinistuff,dc=com" (00000003)
>>> Error, entries missing!
>>>  entry 1: dc=tinistuff,dc=com
>>
>> If you dump the database, does "dc=tinistuff,dc=com" show up
in there?
>> It looks like the entry for the base DN is missing, which might 
>> explain the problems that you're having.
>>
> 
>