[Samba] samba 3.0 beta3 ldapsam bug ?!?!

[Beast]

Friday, August 8, 2003, 1:09:38 PM, Gerald wrote:

>> failed to add user dn= uid=testr$,ou=Computers,o=sctg,dc=schuler,dc=de with: Object
>> class violation
>>         object class 'sambaSamAccount' requires attribute 'sambaSID'

backend ldapsam

With pdbedit, it will try to add "sambaSamAccount" objectclass,
however it did not try to add "sambaSID" attribute also, which is
*required* by samba 3 schema.

Removing "sambaSID" from required attribute on schema works (even not
recommended) , but it will yield another error (i'm not remember what
the err msg is).

With smbpasswd -a -m, will give funny err.
If posix account is not already there, it will refused to run, however
if possix account is already there, it will *ADD* the existing DN (not
MODIFY), just like chicken and egg problem...

Possible bug also:
When enabling start_tls or ssl, this syntax wouldn't work :

   passdb backend = ldapsam, guest
   ldap server = ldap.jkt.irs.co.id
   ldap port = 389
   ldap admin dn = "cn=ldapmanager,dc=indorama,dc=com"
   ldap ssl = start_tls

[root at potato samba]# pdbedit -L
Failed to issue the StartTLS instruction: Can't contact LDAP server
Connection to LDAP Server failed for the 1 try!
Failed to issue the StartTLS instruction: Can't contact LDAP server
Connection to LDAP Server failed for the 2 try!
....
------------

But working when using this syntax :
  passdb backend = ldapsam:ldap://ldap.jkt.irs.co.id, guest

Tks.


--beast