RES: [Samba] Urgent: problem with SAMBA+LDAP

Luiz Alfredo Baggiotto luiz at pucrs.br
Sat Apr 23 13:05:08 GMT 2005



Hello and thanks for your attention
 
> Your ldap server is on the same server or on a other server ?
> Have you verify that you not have a network problem with your  server 
> which contain LDAP.

I'm sorry, I forgot to say it. My LDAP and Samba are in the same machine.
This is my ldap.conf:

BASE    dc=domain, dc=min
HOST    server.admin

And this is my slapd.conf:

==================================
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/solaris-nis.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/locking.schema
include         /usr/local/etc/openldap/schema/solaris.schema
include         /usr/local/etc/openldap/schema/DUAConfig.schema
include         /usr/local/etc/openldap/schema/courier.schema
include         /usr/local/etc/openldap/schema/qmail.schema
include         /usr/local/etc/openldap/schema/horde.schema
include         /usr/local/etc/openldap/schema/samba.schema

password-hash {MD5}
access to attrs=userPassword,sambaNTPassword,sambaLMPassword,sambaPwdLastSet,sambaPwdMustChange
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by self write
        by anonymous auth
        by * none

access to attrs=mail
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by anonymous auth
        by * read

access to attrs=objectClass,entry,gecos,homeDirectory,uid,uidNumber,gidNumber,cn,memberUid,loginShell,mai
l,mailAlternateAddress
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by * read

access to attrs=description,telephoneNumber
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by self write
        by * read

access to attrs=cn,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaLogonTime,sambaLogoffTime,sambaKi
ckoffTime,sambaPwdCanChange,sambaPwdMustChange,sambaAcctFlags,displayName,sambaHomePath,sambaHomeDrive,sa
mbaLogonScript,sambaProfilePath,description,sambaUserWorkstations,sambaPrimaryGroupSID,sambaDomainName,sa
mbaSID,sambaGroupType,sambaNextRid,sambaNextGroupRid,sambaNextUserRid,sambaAlgorithmicRidBase
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by dn="uid=horde,ou=Users,dc=domain,dc=mine" read
        by self read
        by * none

access to dn.base="dc=pucrs,dc=br"
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by * none

access to dn="ou=Users,dc=pucrs,dc=br"
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by * none

access to dn="ou=Groups,dc=pucrs,dc=br"
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by * none

access to dn="ou=Computers,dc=pucrs,dc=br"
        by dn="cn=Administrator,dc=domain,dc=mine" write
        by dn="uid=root,ou=Users,dc=domain,dc=mine" write
        by * none

access to *
        by self read
        by * read

allow           bind_v2
database        bdb
suffix          "dc=domain,dc=mine"
rootdn          "cn=Administrator,dc=domain,dc=mine"
rootpw          {MD5}MySecretPass==

directory       /var/openldap-data
index   cn,sn,uid,mail,mailAlternateAddress     pres,eq,approx,sub
index   displayName                             pres,eq,approx,sub
index   memberUid                               pres,eq
index   uidNumber,gidNumber                     eq
index   homeDirectory                           eq
index   sambaSID                                eq
index   sambaPrimaryGroupSID                    eq
index   sambaDomainName                         eq
index   sambaSIDList                            pres,eq
index   objectClass                             pres,eq
index   default                                 sub
==================================

Thanks again and best regards

Luiz



More information about the samba mailing list