[Samba] samba, nss and openldap

[Mario Ohnewald]

Hello list!

I would like to setup up a PDC based on openldap.
I am running Debian Testing with Samba 3.0.7-Debian and OpenLDAP 2.1.30-3.
But i got stuck with one problem: I cant join a Domain if i haven`t 
added a unix machine$.

If i use:
  add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s 
/bin/false -M %u && /usr/sbin/smbldap-useradd -w "%u"
then i can join a domain without problems!



slapd.conf:
suffix     "dc=IDEALX,dc=ORG"
rootdn     "cn=Manager,dc=IDEALX,dc=ORG"


samba.conf:
; SAMBA-LDAP declarations
passdb backend = ldapsam:ldap://127.0.0.1
#ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
ldap admin dn = cn=Manager,dc=IDEALX,dc=ORG
ldap suffix = dc=IDEALX,dc=ORG
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers

Error in log:
Nov 30 00:04:45 localhost smbd[955]: [2004/11/30 00:04:45, 0] 
auth/auth_sam.c:check_sam_security(306)
Nov 30 00:04:45 localhost smbd[955]:   check_sam_security: 
make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER'
Nov 30 00:04:45 localhost slapd[709]: bind: invalid dn 
("cn=Manager,dc=IDEALX,dc=ORG")
Nov 30 00:04:46 localhost slapd[709]: bind: invalid dn 
("cn=Manager,dc=IDEALX,dc=ORG")
Nov 30 00:04:46 localhost smbd[956]: [2004/11/30 00:04:46, 0] 
auth/auth_sam.c:check_sam_security(306)
Nov 30 00:04:46 localhost smbd[956]:   check_sam_security: 
make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER'
Nov 30 00:04:46 localhost slapd[715]: bind: invalid dn 
("cn=Manager,dc=IDEALX,dc=ORG")


# /etc/nsswitch.conf
passwd:         compat ldap
group:          compat ldap
shadow:         compat ldap
hosts:          files dns ldap
networks:       files ldap
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
netgroup:       nis



#/etc/libnss-ldap.conf
host 127.0.0.1
base dc=IDEALX,dc=ORG
ldap_version 3
bindpw mysecretpwd
rootbinddn "cn=Manager,dc=IDEALX,dc=ORG"
pam_password crypt



Does anybody know why my samba box does not find or add the machine$ to 
the openldap data base?



Please let me know if you need more infos/configs or logs.

Thanks a lot, Mario