similar to: Samba + LDAP + SuSE eMail Server questions/problems

Hello, I have two ldapservers with Samba PDC and BDC. I started with the PDC i use Suse 9.0 with ldap "out of the box" and Samba 3.0.2a. Everything is working fine with only the PDC running. Now i configured replication. In my slapd.conf file on the master server i added the following lines #permission access to * by dn="cn=repl,dc=felix,dc=local" write # database definition

I have a samba PDC with a master openldap server and a samba BDC with a slave openldap server. Replication is done with slurpd with a TLS connection and the slave ldap server has an updateref pointing to the master (I don't use ldaps). On each domain controller my smb.conf contains: passdb backend = ldapsam:ldap://localhost Now I'd like my ldap servers to reject non TLS connections

Hello, I can't get my BDC to talk to the LDAP slave running on the same machine. Replication between slave and master works but samba on the BDC doesn't appear to be communicating with the slave LDAP server. Everything off the PDC works fine. -- smb.conf on BDC -- [global] workgroup = WarehamPS encrypt passwords = Yes time offset = 60 time server = Yes

Hi, I have a setup with two CentOS 5 machines running OpenLDAP 2.3.x, right now the primary uses slurpd to send the updates to the second server, and the second server is using "updatedn" to allow updates (from what I understand! I'm no OpenLDAP guru here.) Clients are using pam_ldap and nss_ldap to get the users and authenticate them in LDAP. Right now hosts query only the primary

OS / Software: PDC / Master LDAP store: - Redhat 9 - OpenLDAP 2.1.25 - Samba 3.0.0 BDC / Slave LDAP store: - Redat 9 - OpenLDAP 2.0.27-8 - Samba 3.0.2 >From the Samba HOWTO Collection on www.samba.org: (Backup Domain Control) "Can I Do This All with LDAP? The simple answer is yes. Samba's pdb_ldap code supports binding to a replica LDAP server, and will also follow

Hi to all! I've set up Zimbra LDAP (2.4) as master, and I want to use RHEL v5 LDAP (2.3) as a slave. This is relevant part of my slapd.conf on LDAP 2.3: # syncrepl directives syncrepl rid=101 provider=ldap://192.168.1.86 bindmethod=simple binddn="uid=zimbra,cn=admins,cn=zimbra" credentials=PASSword searchbase="dc=company,dc=com" schemachecking=on

Hello all, I have setup an HA cluster running under Debian GNU/Linux with samba 3.0.7, openldap 2.0.23 with two machines. Each machine runs winbindd and slapd. One additionally runs slurpd to replicate to the other. Replication works but winbind seems to add entries on the secondary ldap server and not follow the updateref given from the server. This is a problem since the ldap database run

Hello OK, in my case, there is only one samba server acting as PDC. On the PDC, it has a openldap server as backend. I have configured another server as the slave ldap server. slave ldap server will pool data by syncrepl. There are some spaces in samba/smbldap-tool that we can configure multiple ldap servers (or load balance by use of DNS) What happen if the PDC write data to the slave ldap

Hi all, I have a network that are composed at this way: - Samba 2.2.8a PDC - Samba 2.2.8a BDC - Some Samba 2.2.8a as MS - OpenLDAP 2.1 as backend (w/ Samba2 schema) We are planning some changes, including change the domain name. For this, we planning to setup the new Samba 3 domain on the same environment as the Samba 2, and sharing the same backend using the ldapsam_compat feature. After the

Dear List, I've a ldap setup with one master and one slave server replication via slurpd and with an "updateref" entry on the slave server, so all modifies on the slave server get an referral to the master server. For some kind of loadbalancing we have a dns roundrobin entry which points as well to the master as to the slave. Unfortunately it seems that the smbldap-tools are not

Hi, ? my problem is related to samba3 with openldap backend. i use syncrepl to replicate our openldap db to the slapd running on the samba server. slapd is configured to set a referrer for write requests via "updateref". ? if i use smbpasswd to change the samba/ldap password from the console everything works fine. i can see the referrer offered by the local slapd and also a rebind to

Have you set in the slapd.conf on the slaves something like updateref ldap://master.ldap The slave / consumers need to redirect the request to the master ldap database. It may also be a good idea to have samba use fail over for the ldap backend. You would need to set this in your ldap.conf as too. for pdc / ldap master passdb backend =ldapsam:"ldap://master.ldap ldap://slave.ldap"

I have the PDC/BDC with a master slave LDAP directory set up and operating. One problem is that I've only been able to get the LDAP Master/Slave replication working if I use Manager as the binddn for the replication. I'm using the IDEALX smbldap tools. If I use another user I get a ERROR: Insufficient access: no write access to entry error and a .rej file is created. Each entry shows

hi, i see the same error message with samba 3.0.14a and OpenLDAP 2.2.23 (Debian Packages) with Master/Slave setup. i did not set up a referral to the master, so why does samba get a referral when attempting to write to a slave? is this an in-build samba feature? do i have to enable referrals to get this to work properly? any advise is appreciated! thx! micha Zwonarz Ivo wrote: > We use

Hello everyone! I'm having problem with the parameter ldap passwd sync = yes. If my ldapsam points to a master ldap server, it works perfectly. If it points to a slave ldap server, the samba attributes are update but not the userpassword. I'm using samba 3.4.3 with Fedora Directory 1.2. Viewing the log files I saw same strange messages when I trying to change my password: [2009/12/08

Hi, there! When my XP users try to change passwords, they get a message saying that password has been changed. That's not true! NT and LM passwords are changed but unixPassword isn't. Look at this openldap.log lines: Feb 12 07:50:28 apolo slapd[22826]: conn=698021 op=40 MOD dn="uid=teste,ou=Users,dc=domain" Feb 12 07:50:28 apolo slapd[22826]: conn=698021 op=40 MOD

Hi, We're trying to set up a Red Hat 9 box as a BDC for a domain, the PDC for that domain is another RH9 machine. To do it we're using samba 2.2.7a and openLDAP 2.0.7 in both machines. We've followed the instructions from the Samba-PDC-Howto and Samba-BDC-Howto from the samba.org. The PDC works fine but when I try to list the shares of the BDC using my user I get a NT_LOGON_FAILURE

Gentleman, While using Openldap 2.2.x, password syncronization was working fine. It means that when a user changed his password through MS Windows XP, unixPassword, sambaNTPassword and sambaLMPassword were updated at the same time. Since I migrated Openldap to version 2.3.38 (same compilation options / conf files untouched) it stopped working. Now only sambaXXPassword are updated and

Check your slapd.conf ACL options. ____________________________________________________________________ --Forwarded Message Attachment-- From: fcd.listas@gmail.com Subject: [Samba] Samba + Ldap: password sync Date: Thu, 4 Oct 2007 15:19:42 -0300 To: samba@lists.samba.org Gentleman, While using Openldap 2.2.x, password syncronization was working fine. It means that when a user changed his

Hi all, I am newbie on this and I couldn't figure out what I have configured wrong. I have setup three Linux Debian Sarge servers with openldap2 + samba3. PDC and master ldap on one machine and BDC slave ldap on the other two. I followed instructions on http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html to set them up. I am using utilities smbldap-passwd.pl from idealx for