[Samba] Duplicate/No users in LDAP?

[Stefan G. Weichinger]

Hello,

as I continued exploring Samba 3.0.4 as a PDC, I managed to get
roaming profiles up ...

Saving changes worked out fine.

I logged in as TheUserWithUID=0 ... and tried to add a user.

Access denied.

The logs for the XP-client contain:


> [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:init_group_from_ldap(1792)
>   init_group_from_ldap: Entry found for group: 513
> [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:init_ldap_from_sam(812)
>   init_ldap_from_sam: Setting entry for user: bryan
> [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:ldapsam_add_sam_account(1734)
>   ldapsam_add_sam_account: added: uid == bryan in the LDAP database
> [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(483)
>   init_sam_from_ldap: Entry found for user: bryan
> [2004/06/03 23:10:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(483)
>   init_sam_from_ldap: Entry found for user: bryan
> [2004/06/03 23:10:48, 0] lib/util_sock.c:read_socket_with_timeout(304)
>   read_socket_with_timeout: timeout read. read error = Input/output error.
> [2004/06/03 23:10:48, 2] smbd/chgpasswd.c:expect(281)
>   expect: Input/output error
> [2004/06/03 23:10:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(483)
>   init_sam_from_ldap: Entry found for user: bryan
> [2004/06/03 23:10:49, 0] passdb/pdb_ldap.c:ldapsam_delete_entry(271)
>   ldapsam_delete_entry: Entry must exist exactly once!

LDAP shows no such user, I have tried this with several usernames,
which definitely do not exist ...

The relevant smb.conf-entry:

add user script = /usr/local/sbin/smbldap-useradd -m "%u"

Latest smbldap-tools, BTW.

This line popped into my eyes:

> [2004/06/03 23:10:48, 0] lib/util_sock.c:read_socket_with_timeout(304)
>   read_socket_with_timeout: timeout read. read error = Input/output error.

As adding/removing users had worked already with the same
Samba/LDAP-setup I wondered what might have caused this.

Linux 2.6.7-rc1 ? booted 2.6.6. no change.

Normal Samba-shares work fine ...
logging in/out as Domain-Users works fine ...

--

Any hints on this?

-- 
best regards,
Stefan G. Weichinger
mailto:monitor at oops.co.at