[Samba] Samba BDC doesn't talk to LDAP slave on same machine

Wed Dec 17 12:50:17 GMT 2003

Hello,
I can't get my BDC to talk to the LDAP slave running on the same
machine. Replication between slave and master works but samba on the BDC
doesn't appear to be communicating with the slave LDAP server.

Everything off the PDC works fine.

--
smb.conf on BDC
--
[global]
        workgroup = WarehamPS
        encrypt passwords = Yes
        time offset = 60
        time server = Yes
        socket options = TCP_NODELAY
        security = user
        logon script = netlogon.bat
        writable = Yes
        dns proxy = no
        directory mask = 02770
        preferred master = yes
        netbios name = Decas2
        server string = RedHat 8.0 Samba LDAP
        passdb backend = ldapsam:"ldap://172.16.0.3 ldap://127.0.0.1"
        ldap passwd sync = Yes
        machine password timeout = 604800
        passwd program = /usr/local/samba/bin/smbpasswd %u
       passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUnix\spassword:* %n\n
        log file = /var/log/samba.%m
        debug level = 2
        max log size = 50
        add user script = /usr/local/sbin/smbldap-useradd.pl %u
        delete user script = /usr/local/sbin/smbldap-useradd.pl %u
        add group script = /usr/local/sbin/smbldap-groupadd.pl
        delete group script = /usr/local/sbin/smbldap-groupdel.pl
        add machine script = /usr/local/samba/bin/smbpasswd -a -m %u
        logon script = netlogon.bat
        logon path =
        logon drive = H:
        logon home =
        domain logons = Yes
        os level = 64
        domain master = No
        dns proxy = Yes
        admin users = @domain_admins
        wins support = no
        wins server = 172.16.0.3
        wins proxy = no
        name resolve order = wins hosts bcast
        ldap suffix = dc=tow,dc=net
        ldap machine suffix = ou=Computers
        ldap user suffix = ou=Users
        ldap group suffix = ou=Groups
        ldap admin dn = cn=admin,dc=tow,dc=net
        ldap ssl = no

[homes]
        comment = Home Directories
        read only = no
        browseable = no
        writable = yes
        path = %H
#       valid users = %S
        hide files = /.*/

[netlogon]
        comment = Netlogon share
        path = /usr/local/samba/netlogon
        locking = no
        browseable = no
        read only = yes
        write list = @domain_admins

[programs]
        comment = Programs
        path = /accounts/programs

[printers]
        comment = All Printers
        path = /var/spool/samba
        read only = Yes
        printable = Yes
        browseable = No

--
slapd.conf ond BDC
--
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.4 2000/08/26
17:06:18 kurt Exp $
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/samba.schema
database        ldbm
suffix          "dc=tow,dc=net"
rootdn          "cn=admin,dc=tow,dc=net"
rootpw          {SSHA}bbcOI00dfOOJdNCsuFfWf8forJC/Q2P8
directory       /usr/local/var/openldap-slurp/wareham
updatedn        "cn=admin,dc=tow,dc=net"
updateref       "ldap://172.16.0.3"
schemacheck     on
lastmod         on
# Indices to maintain
#index  objectClass                             eq
index   objectClass,uid,uidNumber,gidNumber     eq
#index  cn,mail,surname,givenname               eq,subinitial
index   cn,sn                                pres,eq,sub
access to dn=".*dc=tow,dc=net"
        by self write
        by * read
access to attrs=userPassword,sambaNTPassword,sambaLMPassword
        by dn="cn=root,ou=Users,dc=tow,dc=net" write
        by self write
#       by anonymous    auth
        by * none

--
LDAP.conf on BDC
--
# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04
19:57:01 kurt Exp $
#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE    dc=tow,dc=net
URI     ldap://172.16.151.254
host    172.16.151.254 172.16.0.20
ldap_version 3
#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never

-- 
Kent L. Nasveschuk <kent at wareham.k12.ma.us>