Samba-LDAP problem

[uf at zkm.de]

Hi,
i think the problem is this
passdb backend = ldapsam:ldap://ldapserver
either try a FQDN or an ip-Address for testing


Regards


>
> Hi,
> this is my condition. I'm already using Fedora Directory Server (FDS) on
> fedora and samba on centos and NOW I want to change my samba server to
> ubuntu 10.04. these are my config files:
>
> smb.conf
> [CODE]
> [global]
>
> # hosi_config
> 	load printers = yes
> 	printing = cups
> 	printcap name = cups
> 	browseable = yes
> 	security = user
> 	client lanman auth = yes
> 	public = yes
> 	guest ok = yes
>
> #1
> 	server string = ITCENTER2
> 	workgroup = ITCENTER2
> 	netbios name = ITCENTER_NET12
>
> #2
> 	log level = 1
> 	syslog = 0
> 	log file = /var/log/samba/%m
> 	os level = 69
> 	max log size = 50
> 	name resolve order =  lmhosts hosts wins bcast
> 	time server = Yes
> 	wins support = Yes
> 	socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=9216 SO_RCVBUF=8192
>
> #3
> 	logon script = logon.bat
> 	logon path =""
> 	logon drive =
>
> #4
> 	domain logons = Yes
> 	preferred master = Yes
> 	domain master = Yes
> 	username map = /etc/samba/smbusers
> 	interfaces = 127.0.0.1 eth*
> 	bind interfaces only = yes
> 	hosts allow = 172.16. 192.168.
>
> #5
> 	passdb backend = ldapsam:ldap://ldapserver
> #	passdb backend = ldapsam:ldaps://ldapserver:636
> 	ldap admin dn = cn=Directory Manager
> 	ldap suffix = dc=me,dc=you,dc=they
> 	ldap group suffix = ou=Groups
> 	ldap user suffix = ou=Users
> 	ldap machine suffix = ou=Computers
> 	ldap ssl =  no
> #	ldap ssl =  start_tls
> #	ldpasam:trusted = yes
> 	add machine script = /usr/sbin/smbldap-useradd -w "%u"
> 	add user script = /usr/sbin/smbldap-useradd -m "%u"
> 	ldap delete dn = Yes
> 	add group script = /usr/sbin/smbldap-groupadd -p "%g"
> 	add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
> 	delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
> 	set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
> 	ldap passwd sync = Yes
>
> [homes]
> 	comment = Home Directories
> 	path = /student/%U
> 	valid users = %U
> 	writeable = yes
> 	root preexec = /etc/samba/mkhomedir.sh %U %G
>
> [netlogon]
> 	comment = Network Logon Service
> 	path = /home/netlogon
> 	guest ok = Yes
> 	locking = No
> 	browseable = no
>
> [printers]
> 	comment = All Printers
> 	path = /var/spool/samba
> 	browseable = no
> 	public = yes
> 	guest ok = yes
> 	writable = yesdrwxr-xr-x
> 	printable = yes
> 	printer admin = root
>
> [print$]
> 	comment = Printer Drivers
> 	path = /etc/samba/drivers
> 	browseable = yes
> 	write list = @domadmins root administrator lpadmin lp linlab
>
> [/CODE]
>
> ldap.conf
> [CODE]
> base dc=me,dc=you,dc=they
> binddn cn=Directory Manager
> bindpw 12345678
>
> port 389
> timelimit 120
>
> bind_timelimit 120
> idle_timelimit 3600
>
> nss_base_passwd		ou=Departments,ou=users,dc=me,dc=you,dc=they?sub
>
> nss_base_hosts		ou=Departments,ou=users,dc=me,dc=you,dc=they?sub
>
> nss_base_shadow		ou=users,dc=me,dc=you,dc=they?one
> nss_base_group		ou=Groups,dc=me,dc=you,dc=they?one
>
> nss_initgroups_ignoreusers
> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman
>
> uri ldap://ldapserver/
> #ssl start_tls
> #tls_cacertdthey /etc/openldap/cacerts
> #pam_password md5
>
> ldap_version 3
> [/CODE]
>
> I tried to join a windows xp and succeeded, and login with "root" user
> succeeded too. But when I restart samba service, this error appears:
> [CODE]
> [2010/07/12 19:12:59,  0] lib/smbldap.c:1086(smbldap_connect_system)
>   failed to bind to server ldap://ldapserver with dn="cn=Directory
> Manager"
> Error: Can't contact LDAP server
>   	(unknown)
> [2010/07/12 19:12:59,  1] lib/smbldap.c:1265(another_ldap_try)
>   Connection to LDAP server failed for the 1 try!
> [/CODE]
> and LDAP users can't login and this is given in error log (of windows
> machine):
>
> [CODE]
> [2010/07/12 19:32:05,  1] auth/auth_util.c:577(make_server_info_sam)
>   User 8510453 in passdb, but getpwnam() fails!
> [2010/07/12 19:32:05,  0] auth/auth_sam.c:355(check_sam_security)
>   check_sam_security: make_server_info_sam() failed with
> 'NT_STATUS_NO_SUCH_USER'
> [2010/07/12 19:32:07,  0] passdb/pdb_get_set.c:211(pdb_get_group_sid)
>   pdb_get_group_sid: Failed to find Unix account for MYUSER
> [/CODE]
>
> tho follwing commands work fine(!):
> [CODE]
> smbldap-useradd MYUSER
> smbldap-passwd MYUSER
> smbldap-usershow MYUSER
> [/CODE]
>
> I'm confused and I can't understand the problem :(
> Any miss in config files? any bug?
> samba version is 3.4.7
> --
> View this message in context:
> http://old.nabble.com/Samba-LDAP-problem-tp29149833p29149833.html
> Sent from the Samba - samba-technical mailing list archive at Nabble.com.
>
>