OK, I had this working a few days ago, but have evidently changed
something that I cannot locate. Someone hit me with their 2x4.
Samba 3.0.22, Fedora Core 4, ldapsam (OpenLDAP 2.3.24).
smbd will not start, with the "ERROR: failed to setup guest info"
error (I
have "guest account = guest", which is a valid user with correct info
in
LDAP):
ldap_connect_system: Binding to ldap server ldaps://ldapmaster.example.com
as "cn=smbadmin,dc=example,dc=com"
ldap_connect_system: succesful connection to the LDAP server
ldap_connect_system: LDAP server does support paged results
The LDAP server is succesfully connected
pdb backend ldapsam:ldaps://ldapmaster.example.com has a valid init
Attempting to find an passdb backend to match guest (guest)
Found pdb backend guest
pdb backend guest has a valid init
smbldap_search_ext: base => [dc=example,dc=com], filter =>
[(&(sambaSID=S-1-5-21-2712377552-1848198742-724899569-501)(objectclass=sambaSamAccount))],
scope => [2]
ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-2712377552-1848198742-724899569-501] count=0
pdb_set_username: setting username guest, was
pdb_set_full_name: setting full name guest, was
pdb_set_domain: setting domain UNIXTEST, was
pdb_set_user_sid: setting user sid
S-1-5-21-2712377552-1848198742-724899569-501
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2712377552-1848198742-724899569-501 from
rid 501
pdb_set_group_sid: setting group sid
S-1-5-21-2712377552-1848198742-724899569-514
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2712377552-1848198742-724899569-514
from rid 514
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
NT user token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [ou=Group,dc=example,dc=com], filter =>
[(&(objectClass=posixGroup)(|(memberUid=guest)(gidNumber=2179)))], scope
=> [2]
smbldap_get_single_attribute: [sambaSID] = [<does not exist>]
primary group of [guest] not found
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
get_user_groups_from_local_sam failed
attempting to free (and zero) a server_info structure
attempting to free (and zero) a server_info structure
ERROR: failed to setup guest info.
talloc report on 'null_context' (total 1255 bytes in 81 blocks)
pdb_context internal allocation context contains 716 bytes in 9
blocks
lp_talloc contains 539 bytes in 71 blocks
I can successfully bind to the directory as the smbadmin user and retrieve
the guest group info:
# ldapsearch -x -D cn=smbadmin,dc=example,dc=com -W -b
ou=Group,dc=example,dc=com
'(&(objectClass=posixGroup)(|(memberUid=guest)(gidNumber=2179)))' -s
sub
dn: cn=unixuser,ou=Group,dc=example,dc=com
objectClass: posixGroup
objectClass: top
cn: unixuser
userPassword:: XXXXXXXXXX
gidNumber: 2179
memberUid: guest
and I know that secrets.tdb is correct. I can also do a "pdbedit -Lv
guest" and get the correct output. I can ldapsearch uid=guest and get the
correct output.
Steve
----------------------------------------------------------------------------
Steve Thompson E-mail: smt@vgersoft.com
Voyager Software LLC Web: http://www.vgersoft.com
39 Smugglers Path VSW Support: support@vgersoft.com
Ithaca, NY 14850
"186,300 miles per second: it's not just a good idea, it's the
law"
----------------------------------------------------------------------------
OK, I had this working a few days ago, but have evidently changed
something that I cannot locate. Someone hit me with their 2x4.
Samba 3.0.22, Fedora Core 4, ldapsam (OpenLDAP 2.3.24).
smbd will not start, with the "ERROR: failed to setup guest info"
error (I
have "guest account = guest", which is a valid user with correct info
in
LDAP):
ldap_connect_system: Binding to ldap server ldaps://ldapmaster.example.com
as "cn=smbadmin,dc=example,dc=com"
ldap_connect_system: succesful connection to the LDAP server
ldap_connect_system: LDAP server does support paged results
The LDAP server is succesfully connected
pdb backend ldapsam:ldaps://ldapmaster.example.com has a valid init
Attempting to find an passdb backend to match guest (guest)
Found pdb backend guest
pdb backend guest has a valid init
smbldap_search_ext: base => [dc=example,dc=com], filter =>
[(&(sambaSID=S-1-5-21-2712377552-1848198742-724899569-501)(objectclass=sambaSamAccount))],
scope => [2]
ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-2712377552-1848198742-724899569-501] count=0
pdb_set_username: setting username guest, was
pdb_set_full_name: setting full name guest, was
pdb_set_domain: setting domain UNIXTEST, was
pdb_set_user_sid: setting user sid
S-1-5-21-2712377552-1848198742-724899569-501
pdb_set_user_sid_from_rid:
setting user sid S-1-5-21-2712377552-1848198742-724899569-501 from
rid 501
pdb_set_group_sid: setting group sid
S-1-5-21-2712377552-1848198742-724899569-514
pdb_set_group_sid_from_rid:
setting group sid S-1-5-21-2712377552-1848198742-724899569-514
from rid 514
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
NT user token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search_ext: base => [ou=Group,dc=example,dc=com], filter =>
[(&(objectClass=posixGroup)(|(memberUid=guest)(gidNumber=2179)))], scope
=> [2]
smbldap_get_single_attribute: [sambaSID] = [<does not exist>]
primary group of [guest] not found
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
get_user_groups_from_local_sam failed
attempting to free (and zero) a server_info structure
attempting to free (and zero) a server_info structure
ERROR: failed to setup guest info.
talloc report on 'null_context' (total 1255 bytes in 81 blocks)
pdb_context internal allocation context contains 716 bytes in 9
blocks
lp_talloc contains 539 bytes in 71 blocks
I can successfully bind to the directory as the smbadmin user and retrieve
the guest group info:
# ldapsearch -x -D cn=smbadmin,dc=example,dc=com -W -b
ou=Group,dc=example,dc=com
'(&(objectClass=posixGroup)(|(memberUid=guest)(gidNumber=2179)))' -s
sub
dn: cn=unixuser,ou=Group,dc=example,dc=com
objectClass: posixGroup
objectClass: top
cn: unixuser
userPassword:: XXXXXXXXXX
gidNumber: 2179
memberUid: guest
and I know that secrets.tdb is correct. I can also do a "pdbedit -Lv
guest" and get the correct output. I can ldapsearch uid=guest and get the
correct output.
Steve
----------------------------------------------------------------------------
Steve Thompson E-mail: smt@vgersoft.com
Voyager Software LLC Web: http://www.vgersoft.com
39 Smugglers Path VSW Support: support@vgersoft.com
Ithaca, NY 14850
"186,300 miles per second: it's not just a good idea, it's the
law"
----------------------------------------------------------------------------