[Samba] Adding a machine; I think I am onto something
Jim
jcllings at tsunamicomm.net
Sat Jan 18 22:57:00 GMT 2003
Parameters are:
Samba 2.2.7a PDC setup with LDAP includeing posix authentication for Linux.
OK, the tutorial I've based my setup on is the Mandrake tutorial found
at http://www.mandrakesecure.net/en/docs/ldap-auth.php
Works great for autenticateing Linux from LDAP but it is really sparse
on the Samba side of things. Esepcially when it comes to adding machine
trust accounts.
So anyway I have some theories I would like verified.
I've found that I can add a posix based machine name and that works fine
BUT it only works in ou=People. The system cannot find a machine
account in ou=Computers.
Seems to me that several things have occured:
> Jan 18 14:08:42 enigma smbd[12254]: [2003/01/18 14:08:42, 0] passdb/pdb_ldap.c:pdb_getsampwnam(859)
> Jan 18 14:08:42 enigma smbd[12254]: LDAP search "(&(uid=spartack_)(objectclass=sambaAccount))" returned 0 entries.
1. Search for a uid=spartack$ which also has objectclass=sambaAccount.
> Jan 18 14:08:42 enigma smbd[12254]: [2003/01/18 14:08:42, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
2. Get the password.
> Jan 18 14:08:42 enigma smbd[12254]: get_md4pw: Workstation spartack$: no account in domain
3. Can't find the account.(of course because the user has not been added
by the 'add user script' setting in smb.conf yet.)
> Jan 18 14:08:49 enigma smbd[12255]: [2003/01/18 14:08:49, 0] passdb/pdb_ldap.c:pdb_getsampwnam(859)
> Jan 18 14:08:49 enigma smbd[12255]: LDAP search "(&(uid=spartack_)(objectclass=sambaAccount))" returned 0 entries.
> Jan 18 14:08:50 enigma smbd[12255]: [2003/01/18 14:08:50, 0] rpc_server/srv_samr_nt.c:_api_samr_create_user(1929)
> Jan 18 14:08:50 enigma smbd[12255]: User spartack$ does not exist in system password file (usually /etc/passwd). Cannot add account without
> a valid local system user.
4. Try again only execute the 'add user script' first.
Theoretically, it did not find one because there is no objectClass
sambaAccount in the entry HOWEVER, I know from previous attempts it does
find the posix only Computer account when it is placed in ou=People. Is
there perhaps a different search performed the fist time around despite
the log entry or is my understanding of
"(&(uid=spartack_)(objectclass=sambaAccount))" flawed?
So am I on target here? I can solve the problem if I can understand it. :-)
More information about the samba
mailing list