Bert Burgemeister
2007-Mar-15 11:19 UTC
[Samba] Groups unknown (but users ok) on members of Samba domain
Originally, I set up a PDC with Debian and Samba 3.0.14a. Users and groups (both unix and Samba) are in Openldap. There are a couple of Samba domain members which get users and groups via winbind from my PDC. In order to have consistent user/group ids an Ldap Idmap is used by all Samba computers but nothing else comes from Ldap directly to any domain member. Everything worked fine with only a few minor hitches. wbinfo -u showed users, wbinfo -g showed groups on any domain member. Now, after upgrading the domain members to Samba 3.0.24 things are still ok but when I upgrade to Samba 3.0.24 on the PDC none of the domain members (neither Samba nor Windows) is able to list any groups. wbinfo -g says "Error looking up domain groups". wbinfo -u still shows users. After downgrading Samba on the PDC back to 3.0.14a the problem goes away. Thanks for any help Bert
Bert Burgemeister
2007-Mar-16 15:51 UTC
[Samba] Re: Groups unknown (but users ok) on members of Samba domain
Solved: I had an old version of /etc/ldap/schema/samba.schema. In Debian this is shipped with package samba-doc and has then to be copied manually. Thanks to Dale for the hint. Bert