Re [Samba] LDAP adding workstation accounts fails (but not really???)

Adam Williams awilliam at mdah.state.ms.us
Fri Feb 29 20:33:10 GMT 2008


well didn't you say you could su -l to users that weren't machine 
accounts?  if your /etc/ldap.conf is set right then I'm at a loss too.  
but you did run authconfig-tui and set to use ldap authentication 
right?  that edits some values in /etc/pam.d/system_auth

Pat Riehecky wrote:
> Blast.
>
> My workstation account looks like the following after my failure to join
> the domain.
>
> dn: uid=testing$,ou=Computers,dc=iwu,dc=edu
> objectClass: top
> objectClass: account
> objectClass: posixAccount
> cn: testing$
> uid: testing$
> uidNumber: 1006
> gidNumber: 515
> homeDirectory: /dev/null
> loginShell: /bin/false
> description: Computer
> gecos: Computer
>
> I built up a Fedora 8 box and pointed it at my LDAP server and I still
> cannot su down to that user.  I figured using the graphical tool for
> setting up pam_ldap would eliminate whatever mistake I have made that I
> just cannot seem to find.  But it too cannot su down to testing$.  
>
> I just removed and reinstalled samba, now more stuff is not working.  I
> am going to assume my test box is just too hosed up and leave it at
> that.  When I get around to rebuilding it I will almost certainly have
> this problem again since I don't know what caused it I am doomed to
> repeat it....
>
> Thanks for all the help
> Pat
>
> On Thu, 2008-02-28 at 13:08 -0600, Adam Williams wrote:
>   
>> see, I can su -l to my account:
>>
>> [root at gomer ~]# su -l domain2\$
>> su: warning: cannot change directory to /dev/null: Not a directory
>> -sh: /dev/null/.profile: Not a directory
>> -sh-3.2$
>>
>> and its info is:
>>
>> dn: uid=domain2$,ou=People,dc=gomer,dc=mdah,dc=state,dc=ms,dc=us
>> objectClass: posixAccount
>> objectClass: account
>> objectClass: top
>> objectClass: sambaSamAccount
>> uid: domain2$
>> uidNumber: 2003
>> gidNumber: 514
>> homeDirectory: /dev/null
>> cn: domain2$
>> sambaSID: S-1-5-21-2139886109-2393431639-217723040-1017
>> displayName: domain2$
>> sambaAcctFlags: [W          ]
>> sambaNTPassword: 890AE051A9ADB4707CD86824CF76F9B4
>>
>>
>>
>>
>>     



More information about the samba mailing list