[Samba] step 2 - samba-3 PDC & BDC fail-over with 2 LDAP servers fails

Rauno Tuul rauno.tuul at haigekassa.ee
Fri Oct 10 10:48:59 GMT 2003


> -----Original Message-----
> From: Andrew Bartlett [mailto:abartlet at samba.org]
>
> passdb backend = ldapsam:"ldaps://ldap1 ldaps://ldap2"
> is what you want.

This helped me a little bit forward. I suggest to add this line also to
samba-pdc help.

But still I ran into problems.
I fixed the passdb lines on PDC and BDC. If the second server (on PDC
slave-ldap and on BDC master-ldap) goes down, everything works fine further.
The first (closest) server authenticates the client and all is fine. So I
got a bit further.

But it gets tricky when I shut the first LDAP server in line down (on PDC
master-ldap and on BDC slave-ldap).

master ldap down: 
PDC:
smbclient -> session setup failed: NT_STATUS_LOGON_FAILURE
[2003/10/10 13:17:15, 1] auth/auth_util.c:make_server_info_sam(818)
  User myusername in passdb, but getpwnam() fails!
[2003/10/10 13:17:15, 0] auth/auth_sam.c:check_sam_security(459)
  check_sam_security: make_server_info_sam() failed with
'NT_STATUS_NO_SUCH_USER'
BDC: ok

slave ldap down:
PDC: ok
BDC:
session setup failed: NT_STATUS_LOGON_FAILURE
[2003/10/10 13:15:12, 0] auth/auth_sam.c:check_sam_security(459)
  check_sam_security: make_server_info_sam() failed with
'NT_STATUS_NO_SUCH_USER'


Basically it finds the user in LDAP, but somehow it fails. I don't get.
I also have log level 10 log files, but I can't figure much more out of
them. Andrew if you want them, I can send them (gzipped logs).

regards,

Rauno Tuul.



More information about the samba mailing list