[Samba] Re: Fwd: Re: smbpasswd fails to add machine account with ldapsam

[Curtis Grote]

Chris,
I am experiencing the same behaviour using samba 3.0.1. I have had to
uncomment the lines in smbldap-useradd.pl in order for the machine
accounts to be added with a sambaSAMAccount objectclass. Samba is not
adding the objectclass when joining the domain as the comment in the
section states it should, but the change then allows the subsequent lookup
for People (which I agree with you should really be Computers) to work. Is
this the way you have your PDC under LDAP working? Did you file a bug
report? I would be very interested to hear how you are doing with your
project as I have been struggling with this for a couple of months now and
have finally gotten the machine accounts to be added thanks to your post.
I'm running under SuSE 8.2
Curtis Grote
Memorial Hospital

On Tue, 18 Nov 2003 13:51:43 +0100, Christoph Rudorff wrote:


> ,--------------- Weitergeleitete Nachricht (Anfang)
> 
>  Betreff: Re: [Samba] smbpasswd fails to add machine account with
>  ldapsam Absender: Christoph Rudorff
>  Datum: Mon, 17 Nov 2003 19:58:19 +0100 Newsgruppe: linux.samba
> 
>  Pirkka Luukkonen wrote:
>  
>  > Hi!
>  > 
>  > I am seeing other users with the same problem as I have.
>  
>  confirmed.
>  
>  > My samba also fails to add machine accounts.
>  
>  Here it works (samba 3.0.0 Mandrake 9.2). I can create machine accounts
>  on the fly. But if I switch to ldap backend, joining a domain fails.
>  Windows finally says: "account not found" (english to german to english
>  translation).
>  
>  But samba called the smbldap-useradd.pl and it made the correct entry
>  to ldap - posixAccount, no sambaSamAccount. The related lines are
>  commented out in the Perl script: "# Objectclass sambaSAMAccount is now
>  added directly by samba when joigning the domain (for samba3)" -
>  obviously not.
>  
>  
>  Ok, samba adds at the correct place but how about lookup? Even if I
>  enter some nonsense values to all suffixes, samba always ask
>  "ou=People".
>  
>  I guess its time for a bug report.
>  
>  
>  chris
> 
> `--------------- Weitergeleitete Nachricht (Ende)