[Samba] cannot access LDAP when not root

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 7 Aug 2003, Ganael LAPLANCHE wrote:

> Hi all,
> 
> While playing with group mapping, I'm regularly getting this error :
> 
> [2003/08/07 08:10:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1619)
>   ldapsam_search_one_group: searching for:
> [(&(objectClass=sambaGroupMapping)(gidNumber=1001))]
> [2003/08/07 08:10:39, 0] lib/smbldap.c:smbldap_open(799)
>   smbldap_open: cannot access LDAP when not root..
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

> [2003/08/07 08:10:39, 1] lib/smbldap.c:smbldap_retry_open(888)
>   Connection to LDAP Server failed for the 1 try!
> [2003/08/07 08:10:39, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1634)
>   ldapsam_search_one_group: Problem during the LDAP search: LDAP error:
> (Insufficient access)ldapsam_search_one_group: searching for:
> [(&(objectClass=sambaGroupMappin
> g)(gidNumber=1002))]
> 
> I know I can access the LDAP server because every user in my domain can
> authenticate. Moreover, Group mapping works... What's the matter ? Who must
> be root...  Smbd/Nmbd belong to root...

It's our bug.  On the todo list to be cleaned up for 3.0.
Entered as Bug #281 in https://bugzilla.samba.org/




cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
                            --John Cusack - "Grosse Point Blank" (1997)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/Mz7yIR7qMdg1EfYRAgfbAKDt0ySXMTgc1B1nggE3AmY0eSbrSACgrGVr
87t/1eDtqrBKdHNa6k4gI8I=
=Dfel
-----END PGP SIGNATURE-----