[Samba] Help: Samba 3.0alpha23 using ldapsam cause "The tag is invalid."

[John H Terpstra]

On Thu, 10 Apr 2003, Tang wrote:

> Hi, please help in the scenario of using Samba 3.0alhpa23 + OpenLDAP as PDC.
> After joining an NT workstation to the samba domain, using the Windows User
> Manager for Domain to browse the domain causes "The tag is invalid." error
> message.
>
> Part of smb.conf is as the following:
>
> [global]
>          passdb backend = ldapsam
>          time server = Yes
>          logon path =
>          logon home =
>          domain logons = Yes
>          os level = 64
>          preferred master = Yes
>          domain master = Yes
>          dns proxy = No
>          wins support = Yes
>
> If the "passdb backed" is changed to tdbsam, it is ok! But do not see any
> user groups list on the User Manager, even the groups are mapped using
> smbgroupedit. Why?

It is now working in the current CVS brancch for 3.0.0. Please understand
tha this area is still being worked on. Suggest you download the latest
CVS code.

Also, to get groups to appear in NT4/2K you need to use smbgroupedit to
connect every SAM group to a unique Unix group.

For now, recommend you use:
	passdb backend = ldapsam guest

It also works with:
	passdb backend = tdbsam_nua guest

>
> Samba is running on Debian/Linux Woody with kernel 2.2.20.
>
> Anyone experience similar problems? Helps and comments are appreciated!

Yes, I had the same problem.

- John T.
-- 
John H Terpstra
Email: jht at samba.org