[Samba] samba + ldap

[Dmitriy Kirhlarov]

Hi, all.

I carefuly read "[samba]ldapsam:trusted = yes kills smbd" thread, but
it not help me.
My samba want use domain-likes SID's.

I have 5 (possible, more) distributed over world samba servers.
This servers nothing know about neighbours. Today we are using rsync
for syncing smbpasswd files.

Also, I have several replicated ldap servers with my unix users
accounts. And I want use this servers for replacing smbpasswd files.

I have to use security = user, instead PDC-BDC, because my samba
servers can't interact.

I use samba-3.0.20b,1 on FreeBSD 6.0-STABLE

Problem is -- I can't authentificate on samba server. My smb.conf,
smb.ldif (my tree) and samba log (with log lovel = 10) accessible on
http://clh.higis.ru/~dimma/samba/

Plz, help me.

On Fri, Nov 25, 2005 at 04:43:43PM +0000, Daniel Wilson wrote:
> i had the same problem as this!! well if your using ldapsam:trusted=yes
> 
> look for the thread titled "[samba]ldapsam:trusted = yes kills smbd"
> 
> ..but pretty much it was this..
> "i have changed the sambaPrimaryGroupSid: S-1-1-0 on uid=nobody and 
> changed sambaSID: S-1-1-0 on group nobody and it now starts yeh!! :)"
> 
> 
> On Fri, 2005-11-25 at 14:37, Dmitriy Kirhlarov wrote:
> > Hi, all.
> > 
> > Now my ldap-directory used for storing unix users accounts.
> > I want use it for samba auth too.
> > My samba config and ldap records attached.
> > 
> > When I try start smbd I get error in logfile:
> > [2005/11/25 16:30:21, 3]passdb/pdb_ldap.c:ldapsam_enum_group_memberships(2513) primary group of [nobody] not found
> > 
> > Any ideas?
> > 
> > WBR
> > -- 
> > Dmitriy Kirhlarov
> > OILspace, 26 Leninskaya sloboda, bld. 2, 2nd floor, 115280 Moscow, Russia
> > P:+7 095 105 7247 ext.203 F:+7 095 105 7246 E:DmitriyKirhlarov at oilspace.com
> > OILspace - The resource enriched - www.oilspace.com
> > 
> > ______________________________________________________________________
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
>