similar to: Cannot Access LDAP when not root...

Hi ! I was just wondering if that piece of code was important (for security and such), because I had to comment it in smbldap.c before compiling samba-3.0; otherwise, I would have errors like: "(Insufficient access)smbldap_open: cannot access LDAP when not root" #ifndef NO_LDAP_SECURITY if (geteuid() != 0) { DEBUG(0, ("smbldap_open: cannot access LDAP

Hi, I found strange errors in my samba logs : [2003/07/28 16:32:16, 0] lib/smbldap.c:smbldap_open(799) smbldap_open: cannot access LDAP when not root.. [2003/07/28 16:32:16, 1] lib/smbldap.c:smbldap_retry_open(888) Connection to LDAP Server failed for the 1 try! [2003/07/28 16:32:16, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1634) ldapsam_search_one_group: Problem during the LDAP

I was wondering if anyone has come across an error in their winbindd log: could not lookup membership for group rid S-1-5-21-3506869558-4124343851-970148941-2025 in domain BOGUS (error: NT_STATUS_NO_SUCH_GROUP) I have all the mappings done correctly: domainadmin (S-1-5-21-3506869558-4124343851-970148941-512) -> domainadmin domainusers (S-1-5-21-3506869558-4124343851-970148941-513) ->

Hi. I'm dealing with this "lib/smbldap.c:smbldap_open(1009)" message in the log file. I tried to find some hint in the net but I couldn't find anything that pointed to a solution. Below are the surrounding messages in a excerpt of the log file: [2007/04/02 17:31:10, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(918) fetch sid from uid cache 1088 ->

Hi, we have Samba 2.2.8a+LDAP 2.0.27 domain controllers running on our Debian servers and I'm preparing the update to Samba 3.0.0. Everything seems to work fine so far, except that I get some error messages that I don't understand. Could someone please explain them to me? Should I wait for the next Samba release before switching to 3.x? The error messages: When a user logs into the

I'm using Samba 3.0.14a as a PDC with an LDAP backend. I am having trouble using the Windows "User Manager for Domains" tool. As an example, I shall be looking at the "Domain Users" group. Whenever I try modifying anybody's group membership, I get the error message: "The following error occurred changing the properties of the global group Domain Users: The

Hi, I'm using samba 3b3 (+ldapsam) and have created a user belonging to two groups : - his primary group is mapped to the "Domain Users" Windows group, - his secondary one is mapped to the "Domain Admins" Windows group. Unfortunately, only the first group seems to be known by Samba, since the user doesn't become a "Domain Admin" at all (but he is a

I have a problem on WinXP Pro. When I try to launch "Network Identification Panel" or "My Computer" Properties I receive an error from svchost.exe like "Memory Could not be read ... pres Cancel to Debug" and in smbd log file I have: [2003/11/26 09:37:39, 2] lib/smbldap.c:smbldap_search_domain_info(1296) Searching

I was wondering if any one else is having issues with supplementary groups not being recognized. It seems as if Samba is ignoring the sup.groups. I'm using RH9.0 on Intel with samba-3.0.0-2_rh9 and OpenLDAP 2.0.27. When I do a "id -a username" the user is in all the necessary groups but when accessing shares the users' primary GID is used only. For example, uid=1001(jgray)

I upgrade to samba3.0.0Rc3, I can get user from other domain faster, list trust faster ;-) (But I still can't get idmap to my ldap) But when I view my log some error ,or may be somthing wrong with my config ??? (I saw some one post this (BUG) in previous version, but I see at bugzilla.samba.org this bug is "FIXED" ) [2003/09/09 16:09:33, 0] lib/smbldap.c:smbldap_open(801)

,--------------- Weitergeleitete Nachricht (Anfang) Betreff: Re: [Samba] smbpasswd fails to add machine account with ldapsam Absender: Christoph Rudorff Datum: Mon, 17 Nov 2003 19:58:19 +0100 Newsgruppe: linux.samba Pirkka Luukkonen wrote: > Hi! > > I am seeing other users with the same problem as I have. confirmed. > My samba also fails to add machine accounts.

Hi All, Need your expert advice regarding Samba3 + OpenLDAP. I have configure openldap and Samba3 on my FreeBSD5.2.1. I have make Samba3 as a PDC on and Authenticate using LDAP. Everythings works fine.... I can login using sambauser1 to my Samba3-PDC and do profile roaming. However I come accross bellow error message on my /var/log/message and it's really annoying me. Can some body advice

net groupmap modify ntgroup="Domain Admins" unixgroup=504 net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. I was told this may be specific to ldap setup with samba 3.0.0, but is fixed in later versions of samba. however, in 3.0.1, there is a far worse bug that makes machines only available some of the time(i was told

Hi, My Samba-3.0.0 is configured as PDC. I've joined a W2k wks on this domain and everything works perfectly. However, when I try to add ACL on a file or directory located on the server, the display of the 1700 users and 570 groups take a while (20-30 sec), the slapd process use about 90% of CPU. In the slapd.conf index objectClass pres,eq index uidNumber eq index gidNumber eq index cn

Using ldap as my sam backend and Samba 3.0.0-2, I'm showing that samba stops parsing a RID when it encounters a letter. For example, I have an accounting group with gid 2771 and therefore rid ad3. When I list the groups in the samba domain, however, I get this listing: Domain Admins (DOMAINSID-512) -> Domain Admins Domain Users (DOMAINSID-513) -> Domain Users Domain Guests

Hi, I'm trying to use the sambaUserWorkstations option to allow users to log on certain computers only. This option looks great... In fact it looks now a lot better than the 'ldap filter' one than was deprecated with samba 3.0.20... The fact is, if the sambaUserWorkstations option works well with machine names, it doesn't seem to work when specifying groups of machines.

I'm using samba 3.0.4 with ldapsam as a pdc. When I try to create a group, samba correctly runs the add group script, which creates an LDAP entry with objectClass set to posixGroup and gidNumber set to the gid I want to use and cn set to the group name. The next thing samba does is look for the posix group with the following filters: [(&(objectClass=sambaGroupMapping)(gidNumber=0))]

Hi all, I've been working on shell scripts that allow to manage ldap accounts (users, groups, machines). They are similar to the smbldap-tools but do not need PERL to work (and so on...) and are *very* simple to configure - they may be a good alternative. The only tools you need are standard ldap client commands (ldapadd, ldapdelete, ldapmodify, ldapsearch). The scripts can be used as

Hi. I'm having a big trouble. We migrate a NT PDC to a Samba PDC. No problems in migration. Everything works fine. The problem is: I can't add a NT machine to Domain. Simply does not work. XP and W2K works great. I started using Debian Sarge Package 3.0.14. In this version I could not manage groups using the Domain User Manager from NT. So I updated to 3.0.23cpackages from samba.org.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am it has two weeks trying to twirl the PDC with samba + LDAP and ties the moment only migraines. It would like to know which is the problem, now, below described in mine log's? [2005/02/27 12:14:47, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 8 try! [2005/02/27 12:14:48, 0]