[Samba] Can't add Win2k machine to Samba domain (PDC+LDAP)

[Hardy Beltran Monasterios]

Hi

When I am try to add Win2k to domain, I get a error message:

"Error when attempting to join the domain MyDOMAIN"
"No mapping between account names and security IDs was done"

(such messages were in spanish. My Win2k is spanish version)

I have the following setup

- Linux Red Hat 9 (kernel-2.4.20-8)
- Samba 2.2.7a
- Samba as PDC using LDAP

Already I have done all the instructions in "SMB-LDAP PDC HOWTO" from IDEALX (http://www.idealx.org/prj/samba/index.en.html)
But I have the same trouble.

I thin'k this is the relevant logs entries

[2004/04/21 21:12:32, 3] rpc_server/srv_pipe.c:api_rpcTNP(1180)
  api_rpcTNP: pipe 29832 rpc command: SAMR_CREATE_USER
[2004/04/21 21:12:32, 3] smbd/sec_ctx.c:push_sec_ctx(282)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/04/21 21:12:32, 3] smbd/uid.c:push_conn_ctx(286)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2004/04/21 21:12:32, 3] smbd/sec_ctx.c:set_sec_ctx(314)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:ldap_open_connection(216)
  ldap_open_connection: connection opened
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:ldap_connect_system(250)
  ldap_connect_system: succesful connection to the LDAP server
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:ldap_search_one_user(262)
  ldap_search_one_user: searching
for:[(&(uid=revillam$)(objectclass=sambaAccount))]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [uid] = [revillam$]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:init_sam_from_ldap(495)
  Entry found for user: revillam$
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [pwdLastSet] = [1082585220]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [logonTime] = [0]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [logoffTime] = [2147483647]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [kickoffTime] = [2147483647]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [pwdCanChange] = [1]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [pwdMustChange] = [2147483647]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [cn] = [revillam$]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(354)
  get_single_attribute: [homeDrive] = [<does not exist>]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(354)
  get_single_attribute: [smbHome] = [<does not exist>]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(354)
  get_single_attribute: [scriptPath] = [<does not exist>]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(354)
  get_single_attribute: [profilePath] = [<does not exist>]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [description] = [Computer]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(354)
  get_single_attribute: [userWorkstations] = [<does not exist>]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [rid] = [3424]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [primaryGroupID] = [1201]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:init_sam_from_ldap(593)
  init_sam_from_ldap: User [revillam$] does not ave a uid!

I can't understand this last line, because in the previous lines I can read:

for:[(&(uid=revillam$)(objectclass=sambaAccount))]
[2004/04/21 21:12:32, 2] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [uid] = [revillam$]

It seems like the uid exits, Or maybe I'm doing something really wrong.

Does anyone idea how to solve this ??

By the moment we are not planing a migration to Samba 3.0 stuff.

Best regards 

 
-- 
Hardy Beltran Monasterios
hardy at acm.org
Usuario Linux #50949 - http://counter.li.org
La Paz, Bolivia