[Samba] add machine script not running

Rowland Penny
Wed, 15 Nov 2017 16:38:38 -0000

On Wed, 15 Nov 2017 16:25:11 +0100
Daniel Berteaud via samba <samba at lists.samba.org> wrote:

> Hi.
>
> I'm running samba 3.6.3 (on Ubuntu 12.04). This server is acting as
> an old style NT4 domain using samba as backend. Machine accounts are
> created using a script, called by samba (add machine script).
> Everything is working great.
>
> Now, I want to keep the same thing, but on Ubuntu 16.04, so with
> samba 4.3.11. Mostly everything is working as expected, except that
> smbd doesn't execute the add machine script. Instead, it tries to
> create the machine directly (but not with the correct objectClass, I
> want to have full control on this part, and just let samba add the
> sambaSamAccount objectClass and related stuff)
>
> In my logs, even with quite high debug level, I can see the param is
> correctly read:
>
> [...]
> doing parameter add machine script = /usr/local/bin/addworkstation.pl
> %u [...]

I suppose the obvious question is, is the script executable ?

>
> But the script is not executed. Instead, when samba sees the account
> doesn't already exist in LDAP, it tries to create it, which is
> failing (because my ACL in OpenLDAP does not allow it)
>

Can you post your smb.conf, there have been some changes between 3.6.3
and 4.3.11. Talking of which, is there any way that you can upgrade
Samba ? 4.3.11 is EOL as far as Samba is concerned.

Rowland