[Samba] smbpasswd problem with LDAP

[Marcel Beltz]

ok,

is the user william applied to the "/etc/passwd", if not you have to 
add the

objectclass posixAccount

to your ldap entry. your smbpasswd is searching for a "uid", i will 
give you a examble from my ldap server. the output from my ldapsearch 
is:

dn: uid=mbeltz,ou=Mitarbeiter,dc=xxx,dc=de
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: sambaAccount
uidNumber: 26172
homeDirectory: /home/mbeltz
sn: beltz
mail: mbeltz at xxx.de
userPassword:: Z2lzbW8=
uid: mbeltz
pwdLastSet: 1036402528
logonTime: 0
logoffTime: 2147483647
kickoffTime: 2147483647
pwdCanChange: 0
pwdMustChange: 2147483647
displayName: Marcel Beltz
cn: Marcel Beltz
rid: 53344
primaryGroupID: 55001
lmPassword: 60E4312735FB6D6BAAD3B435B51404EE
ntPassword: 9469BF5B461AB31C0AEA878B7AAD4DE1
acctFlags: [UX         ]
gidNumber: 27000

i hope i can help


Am Dienstag, 26.11.02, um 09:03 Uhr (Europe/Berlin) schrieb Tom 
Palmaers:

> On Mon, Nov 25, 2002 at 05:58:14PM +0100, Marcel Beltz wrote:
>
>> i have a running samba with ldap for user-managment. i guess i had the
>> same problem. can you pipe the output of the following
>
>> ldapsearch -LLL "uid=william"
>
> Here is the output of the command:
>
> nas:~# ldapsearch -x -LLL "uid=william"
> dn: cn=william,ou=domain.be,o=domain,c=be
> sn: William Stevens
> objectClass: top
> objectClass: person
> objectClass: inetOrgPerson
> objectClass: qmailUser
> objectClass: sambaAccount
> mail: william.steevenss at domain.be
> mailAlternateAddress: william at domain.be
> mailHost: nas.domain.be
> mailMessageStore: /var/qmail/maildirs/william
> cn: william
> uid: william
> pwdLastSet: 1
> logonTime: 0
> logoffTime: 0
> kickoffTime: 0
> pwdCanChange: 0
> pwdMustChange: 0
> displayName: William Steevenss
> rid: 500
> primaryGroupID: 512
> lmPassword: 1
> ntPassword: 1
> acctFlags: [U          ]
>
> nas:~#
>
> Also , as many other people told me, I shouldn't do 'smbpasswd -U
> william' , but i should do 'smbpasswd william' instead. I did this, but
> it gave the same errors...
>
> The ldap stuff in my /etc/samba.conf looks like this:
>
> ldap port = 389
> ldap suffix = "ou=domain.be,o=domain,c=be"
> ldap filter = (&(cn=%u)(objectclass=sambaAccount))
> ldap admin dn = "cn=root,ou=domain.be,o=domain,c=be"
> ldap ssl = no
>
> Hope you can help me out with this, cause i had it working before, but
> then i changed the uid= tags into cn= (to make it work with a 
> qmail-ldap
> webinterface thing). And since then it stopped working. I also tried to
> switch back to uid=, but it then gives the same errors... :-(
>
> Greetz,
>
> ---
>
> Tom Palmaers
>
>
---

marcel beltz

beltz.info					email: marcel at beltz.info
am mittleren moos 48		fon: +49 177 736 787 1
86167 augsburg

++