error in 3.24 with ldap

[Alex Murphy]

В сообщении от 20 Май 2003 15:32 вы написали:
> Alex Murphy wrote:
> > Please help me
> >
> > im install samba 3.24 with ldap support:
>
> All ldap stuff has been changed.
>
> For 2.x ldap schema (compat mode), the passwd backend should be like:
> 	passdb backend = ldapsam_compat:ldap://bilbo.cti.unav.es/

im user new schema ldap:
# root, sgtp, ru

dn: uid=root,o=sgtp,dc=ru
uid: root
rid: 1000
primarygroupid: 1001
displayname: root
pwdcanchange: 1053346442
pwdmustchange: 1055160842
lmpassword: skip
ntpassword: skip
pwdlastset: 1053346442
acctflags: [U          ]
objectclass: sambaAccount
objectclass: account
objectclass: sambaSamAccount
sambasid: S-1-5-21-2702699897-4102814794-1601498507-1000
sambaprimarygroupsid: S-1-5-21-2702699897-4102814794-1601498507-1001
sambapwdcanchange: 1053418095
sambapwdmustchange: 1055232495
sambalmpassword: skip
sambantpassword: skip
sambapwdlastset: 1053418095
sambaacctflags: [U          ]


im starting smbclient:
[root at bene bin]# ./smbclient -L localhost -U root
doing parameter ldap ssl = no
doing parameter workgroup = murphy
doing parameter netbios name = mmm
handle_netbios_name: set global_myname to: MMM
doing parameter comment = Linux RedHat Samba Server
doing parameter security = user
doing parameter null passwords = Yes
doing parameter encrypt passwords = yes
doing parameter logon drive = U:
doing parameter logon path = \\%N\profiles$\%u
doing parameter domain master = yes
doing parameter domain logons = yes
doing parameter preferred master = yes
doing parameter os level = 255
doing parameter wins support = yes
doing parameter log file = /usr/local/samba/var/log.%m
doing parameter public = Yes
doing parameter browseable = yes
doing parameter writable = No
pm_process() returned Yes
added interface ip=192.168.1.4 bcast=192.168.1.255 nmask=255.255.255.0
Client started (version 3.0alpha24).
Connecting to 127.0.0.1 at port 445
 session request ok
protocol negotiation failed
^^^^^^^^^^^^^^^^^^^^^^^^ - not connecting to server, and find this error 

>
> For new schema (that also allows idmap et al), the should be:
> passdb backend = ldapsam:ldap://bilbo.cti.unav.es/
> For idmap (non unix accounts and so) you need provide some extra
> parameters (uid, gid sets, etc.), documented in the smb.conf man page
> (in the HEAD?).
>
> For me, the alpha24 and ldap (old and new schema, with ldapsam_compat
> and ldapsam) runs well with NT ws; I have a trouble with XP logons
> "odities" but the shares works from XP ws.
>
> Please, read the samba howto colection... the HEAD may be a bit more
> updated.
> I'm fixing http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html
>
> Your question about:
> > idmap only = yes
> > idmap uid = 10000-20000
> > idmap gid = 10000-20000
>
> I think the Samba Howto collection is being fixed.
>
>
> Ignacio