similar to: Samba and slapd.conf's TLSVerifyClient

Hi all! I'm very close to have a fully functional samba and openldap. Thanks to idealx.org. I just need to understand how it works. Everything works accept one thing. When I change TLSVerifyClient allow to TLSVerifyClient demand in slapd.conf and do: ldapsearch -x -ZZ -b 'dc=yourdomain,dc=com' '(objectclass=*)' -d 127 in the end I get: ldap_chkResponseList for msgid=2, all=1

Dear Samba friends, I have setup a samba server 3.5 on FreeBSD 8.1-RELEASE-p2 with openldap-sasl-server-2.4. I have specified ``TLSVerifyClient demand'' in slapd.conf and want to enforce the clients to connect and show a valid certificate to the ldap server. As far as I have understood, Samba will act as a client as well and in order to access the ldap server it will need a client

After, oh, six months of attempts here and there to read everyone's experiences with Samba/LDAP and inability for a windows 2000/XP machine to join the domain, I finally discovered what was not working properly. In my smb.conf I put: add machine script = /usr/local/sbin/smbldap-useradd -w "%u" As instructed by many How-to's and Idealx. However, I thought to myself, %m

Hi, I have been trying to work this out on my own now for about a week and feel like I am so close..haha. I have samba setup as a PDC and in theory authenticating users through openLDAP with the use of smbldap-tools by IDEALX. I have checked the windows registry fix, but still no luck. When I try to join the domain as root, I get the error: "Username could not be found" Any help would

I'm using Samba 3.0.3 on Fedora Core 2 with OpenLDAP 2.1.29 for a backend. I'm getting to typical "The user name could not be found." error upon trying to join a Windows box. I've gone through every digest on lists.samba.org and other sites and nothing has worked yet. Any suggestions: Here's what I've done so far: 1. Installed everything via RPMS: [root@smbtest

Hello, I'm trying to set up Samba + OpenLDAP as a PDC. I followed the instructions from chapter 6 in Samba-3 by Example, my system is SuSE 9.1. ldap, winbind, nmb and smb are running. testparm says my smb.conf file is OK. I set LDAP password using smbpasswd -w. There was a similar post a few days ago (smbldap-tools don't create machine account properly), but it didn't help me.

Hi, I?ve been trying to populate an LDAP directory with IDMAP information from Winbind using NSS_LDAP without much success over the last week. Can anybody tell me if I?ve done anything obviously wrong? I?ve followed the example shown in the Samba ?By Example? doc and am at the stage where the LDAP directory has been created and configured, NSS_LDAP config is amended, smb.conf contains entries to

Follow up to original post. If I created local groups and users in /etc/passwd & /etc/groups I get farther along. For instance, if I have a Samba PDC with LDAP basically like I listed in my post. If I browse from a w2k pro box to the samba server without the workstation having joined the domain, I can authenticate to the samba server with a user who is not in /etc/passwd but is in LDAP. So

1. yes, I tried these lines and in the logs, there was a failure in response 3 "match no". When I manually ran smbldaa-passwd.pl in xterm, I saw that there's never a "successfully" meesage when the password is changed with success, I looked the code (luckily it's Perl ;o)), and I didn't see any "print "succes"" or "print "password

I'm following the "The Linux Samba-OpenLDAP Howto" at http://samba.idealx.org/smbldap-howto.en.html and seem to have run into a problem... I'm to the point where I want to do the initial database population using smbldap-populate.pl, but when I run it, I'm getting: Using builtin directory structure adding new entry: dc=pirategames,dc=net failed to add entry:

Hi. I've used Samba for years, but just this week I decided to try to figure out how to use it with LDAP. I've got everything working to the point that I can now log in on a W98 machine, but not on a W2k .. problem with the machine account. I understand that there is a bug which has been fixed in 3.0.11, but Debian/unstable still uses 3.0.10. Is there a work-around, as in manually

Hi, I am trying to set up a SAMBA PDC using LDAP for authentication. I am using this document as a guide: http://download.gna.org/smbldap-tools/docs/samba-ldap-howto/ SAMBA and openldap are running on the same machine for R&D purposes and I am using the following software: OpenSuSE 10.3 samba-3.0.26a-3 openldap2-2.3.37-6 smbldap-tools-0.9.2 I have configured slapd.conf:

Hi all! I'm using Debian Sarge with openldap, samba and TLS. I can't figure out if TLS works or not so please help me out here. The certificate verification is OK. I installed the server looking at the howtos on idealx.org I can add users, groups and computers to ldap. I've tried with sucess to add computer to the domain. Now to the point. When I do a test like: ldapsearch -x -ZZ -D

Anyone could please help me to set up a samba authing on a ldap server ??? i mean.. someone can point me out a tutorial/howto/notes/tips/anything that can help me set up this together ?? (or at least some part of the adminstration of ldap for samba) well anything will be welcome since i need to set up pretty soon. thanks in advance,

Hello, I am kind of confused with this situation. I am attempting to build a PDC using TLS/SSL with the following version of software. Samba 3.0.23 OpenLDAP 2.3.19 Fedora Core 5 When I startup the Samba server via the "service" command (service smb start) I get the following errors in my logs. Using SSL: Jul 13 09:52:34 prism smbd[23161]: smbldap_search_suffix: Problem during

Good afternoon everyone. I'm testing out the new samba 3 (3.0.1 to be exact) with openldap 2.1.22. ( have setup a samba 2.2.8a with openldap 2.0.27 as a PDC in the past) I've read up on a few pages about some of the reqs that are needed: http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html I've followed the Samba How-To as well. I edited my slapd.conf file and added the correct

Hello people! I'd like to know about a practical guide which helps to migrate users from a perfect working Samba PDC running with tdbsam backend to a new backend to LDAP. Does "pdbedit -i xxx -e xxx" make all the job? My network is growing and I need a directory service to help find people so I'd like to see a LDAP server running well with Samba without rebuild my user

Hello everyone. Well, I have been working very hard lately, trying to get a server up to act as our Samba PDC with LDAP. So far, everything seems to be working well. I've been able to get samba 2.2.8 and openldap 2.0.27 installed with no problems. I've setup my config files (ldap.conf, slapd.conf, smb.conf) as well as added some initial entries to the LDAP directory. I've been

Hi, I have been running Samba with OpenLDAP for a few years. We recently upgrade the OpenLDAP server from 2.2.13 to 2.4.11. When users change their passwords now, only the Windows password is changed the UNIX password is not changed anymore. Samba server does not log any errors The samba configuration file did not change when the LDAP server was upgraded. I do have "ldap passwd

Is there anything like "nss_updatedb" [1] for ldapsam account information backend? nss_updatedb caches unix account information, so it is available even when the LDAP directory isn't available But ldapsam stores additional account information. How can I cache this additional account information, so it is also available even when the LDAP directory isn't available? [1]