[Samba] How do I get Winbind accounts in LDAP?

[ww m-pubsyssamba]

Hi John/List,

	I'm attemtpting this (idmap in LDAP) with samba3.0.1 and Sun DS 5.2 but without any success. I've tried what John T has suggested below but my idmap OU is still empty (adapted LDAP commnads for Sun DS). I cannot see any errors in either Samba or Sun DS logs, does anyone have any troubleshooting tips to help work out why this isn't working?

		many thanks Andy.

-----Original Message-----
From: samba-bounces+pubsyssamba=bbc.co.uk at lists.samba.org
[mailto:samba-bounces+pubsyssamba=bbc.co.uk at lists.samba.org]On Behalf Of
John H Terpstra
Posted At: 03 January 2004 23:54
Posted To: Samba
Conversation: [Samba] How do I get Winbind accounts in LDAP?
Subject: Re: [Samba] How do I get Winbind accounts in LDAP?


Kent,

Did you create the container for the ou=Idmap in your LDAP database?
The IDMAP entries are automatically added to LDAP - IF the container
exists, and so long as Samba can access that database.

Also, I suggest you store your machine accounts in the Users container
and not in the Computers container. Samba does not at this time search the
Computers container correctly.

Execute the following to find out if your LDAP database has an IDMAP
container:
	slapcat | grep -i IDMAP


If nothing is returned, execute this:

ldapadd -x -D "cn=admin,dc=tow,dc=net" -w 'password' << EOR
dn: ou=Idmap,dc=abmas,dc=biz
objectClass: organizationalunit
ou: idmap
structuralObjectClass: organizationalunit
EOR

Now you must stop samba, delete the winbind*tdb files, restart samba,
run:
	wbinfo -u
And that should automatically populate your LDAP IDMAP database.

Cheers,
John T.



BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.