search for: ldapmast

Hi List, Last week i have upgrate my samba from 3.023d to 3.0.28 and now i have some trouble in my LOGs like this: Dec 31 08:59:23 ldapmaster smbd[10453]: pdb_increment_bad_password_count: pdb_get_account_policy failed. Dec 31 08:59:39 ldapmaster smbd[12758]: [2007/12/31 08:59:39, 0, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:pdb_get_group_sid(211) Dec 31 08:59:39 ldapmaster smbd[12758]: pdb_get_group_sid: Failed to find Unix...

...attached to them), but it's not actually happening. The schema is, obviously, in the LDAP server in question. Any thoughts? D # smbpasswd -D 99 -a testuser Netbios name list:- my_netbios_names[0]="TESTBOX" New SMB password: Retype new SMB password: Trying to load: ldapsam:ldap://ldapmaster.byramhealthcare.com Attempting to register passdb backend ldapsam Successfully added passdb backend 'ldapsam' Attempting to register passdb backend ldapsam_compat Successfully added passdb backend 'ldapsam_compat' Attempting to register passdb backend smbpasswd Successfully added...

...th their 2x4. Samba 3.0.22, Fedora Core 4, ldapsam (OpenLDAP 2.3.24). smbd will not start, with the "ERROR: failed to setup guest info" error (I have "guest account = guest", which is a valid user with correct info in LDAP): ldap_connect_system: Binding to ldap server ldaps://ldapmaster.example.com as "cn=smbadmin,dc=example,dc=com" ldap_connect_system: succesful connection to the LDAP server ldap_connect_system: LDAP server does support paged results The LDAP server is succesfully connected pdb backend ldapsam:ldaps://ldapmaster.example.com has a valid init Attempting...

...i try to configure external idmap. i would like it to use our existing ldap server: idmap config DOM : backend = rfc2307 idmap config DOM : range = 1110000-1119999 idmap config DOM : ldap_server = stand-alone idmap config DOM : ldap_url = ldap://ldap.domain.ru idmap config DOM : ldap_user_dn = uid=ldapmaster,cn=ldap.domain.ru idmap config DOM : bind_path_user = cn=dom.domain.ru idmap config DOM : bind_path_group = cn=dom.domain.ru idmap config DOM : cache time = 1800 winbind nss info = rfc2307 i created a user 'test2' in samba DC. in ldap.domain.ru there is the user uid=test2,cn=dom.domain....

Hi, I did upgrade from samba 3.0.28b to 3.4.9. Now the trust does not work anymore. When we try to reestablish the trust, we get an error: ldapmaster:/etc/openldap/schema # net rpc trustdom establish BIO Enter EVAN$'s password: Could not connect to server HEINBLOED Storing password for trusted domain failed. Google does not really help and logfiles (loglevl 10) do not tell me what is wrong. I also installed the new schema. Any ideas? T...

...er, with secondary master LDAP server. i think this is fine but i'm thinking about migrating to: PDC -> LDAP master, with secondary slave LDAP server. BDC -> LDAP master, with secondary slave LDAP server. what's zour opinion about switching the BDC to point its first ldap server to ldapmaster? both are in the same subnet. i'm just afraid of LDAP master failing and time outs on BDC side because it tries to connect to LDAP master....well if BDC LDAP fails then i have timeout, too...right...so what's zour opinion? thx as usual :)

...logon drive = G: logon home = \\cannibal\%U bind interfaces only = yes interfaces = eth0, lo hosts allow = 10.10.10. 127. wins support = yes dns proxy = yes passdb backend = ldapsam:ldaps://cannibal.example.com/ ldap admin dn = cn=ldapmaster/admin@EXAMPLE.COM,ou=KerberosPrincipals,dc=example,dc=com ldap suffix = dc=hogwarth,dc=edu ldap group suffix = ou=groups ldap user suffix = ou=KerberosPrincipals ldap machine suffix = ou=computers ldap idmap suffix = sambaDomainName=EXAMPLE ldap ssl...

...P configured as a passdb type in my smb.conf, but samba appears to be completely ignoring that and creating an /etc/samba/smbpass file (full output of that at the bottom) my smb.conf has: ldap admin dn = "cn=Admin,dc=byramhealthcare,dc=com" ldap ssl = off passdb backend ldapsam:ldap://ldapmaster.byramhealthcare.com ldap delete dn = no ldap user suffix = ou=People,dc=byramhealthcare,dc=com ldap machine suffix = ou=Systems,dc=byramhealthcare,dc=com ldap suffix = "ou=People,dc=byramhealthcare,dc=com" ... and here's what I get when I try to add a user, presumably to the LDAP...

...= /usr/sbin/useradd -d /dev/null -g 132 -s /bin/false - M %u logon script = %G_%U.bat %G %U logon path = logon home = domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap server = ldapmaster.mydomain.it ldap port = 389 ldap suffix = "ou=people,o=mydomain,c=it" ldap admin dn = "cn=Directory Manager" ldap ssl = no admin users = root @sistemi wide links = No

...23 (re: 3.0.23d UNIX vs. AD group permissions) and we found we have the same issue with the Redhat built rpm of version 3.0.23c. The following is the ldap and winbind portion of our smb.conf, the same as used on our current Solaris production servers: # ldap settings ldap admin dn = cn=ldapmaster,dc=mel,dc=nist,dc=gov idmap backend = ldap:ldap://ldap1.mel.nist.gov ldap idmap suffix = ou=Idmap ldap suffix = dc=mel,dc=nist,dc=gov idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/false winbind use default domain = no winbind tr...