[Samba] Configuration of idmap_ldap "No backend defined"

[Jon Theil Nielsen]

Hi list,

I can't make idmap talk to my LDAP server. And I haven't found an updated
howto.

Some entries from log.windbindd-imap:
[2012/04/13 20:05:40.500475,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'ldap'
[2012/04/13 20:05:40.501112,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'tdb'
[2012/04/13 20:05:40.501318,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'passdb'
[2012/04/13 20:05:40.501516,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'nss'
[2012/04/13 20:05:40.540035,  2] lib/smbldap.c:1018(smbldap_open_connection)
  smbldap_open_connection: connection opened
[2012/04/13 20:05:40.550305,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 515
[2012/04/13 20:05:40.592075,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:23.606655,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 548
[2012/04/13 20:06:23.629123,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 1006
[2012/04/13 20:06:23.632141,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:23.637118,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 1005
[2012/04/13 20:06:23.640003,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:23.653837,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:33.287504,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:33.287723,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config BUILTIN
[2012/04/13 20:06:38.048645,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN

Part of my smb.conf:
[global]
    ldap admin dn = cn=Manager,dc=example,dc=com
    ldap delete dn = Yes
    ldap group suffix = ou=Groups
    ldap idmap suffix = ou=Idmap
    ldap machine suffix = ou=Computers
    ldap passwd sync = yes
    ldap suffix = dc=example,dc=com
    ldap user suffix = ou=People
    ldap debug level = 1
    idmap config *:backend = ldap
    idmap config *:readonly = no
    idmap config *:range = 1000-1999999
    idmap config *:ldap_url=ldap://localhost
    idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com
    idmap config MYDOMAIN:backend = ldap
    idmap config MYDOMAIN:readonly = no
    idmap config MYDOMAIN:range = 1000-1999999
    idmap config MYDOMAIN:ldap_url=ldap://localhost
    idmap config MYDOMAIN:ldap_base_dn = cn=Manager,dc=example,dc=com
    idmap config MYDOMAIN:ldap_user_dn = cn=admin,ou=Idmap,dc=example,dc=com

I'm running samba 3.6.3 on FreeBSD 9.0-RELEASE and my LDAP server seems to
work otherwise. At least, I can do user authentication this way.

Of course, I can provide much more information from the logs and the
configuration files. I just don't know where to start. And any help would
be much appreciated.

Best regards,
Jon Theil Nielsen