[Samba] Troubles setting up winbind for nt4 style samba domain

Geoff Scott geoffs at guestshire.com
Fri Jul 8 03:05:13 GMT 2005


I'm getting these errors on starting up winbindd, and I am not sure if this
is normal in my situation, I have no trust accounts, I don't deal in AD
domains.  Can somone tell me if I need to worry about this?:

<snip>
[2005/07/08 11:23:24, 1] lib/smbldap.c:another_ldap_try(1011)
  Connection to LDAP server failed for the 15 try!
[2005/07/08 11:23:25, 0] lib/smbldap.c:smbldap_open_connection(599)
  ldap_initialize: Time limit exceeded
[2005/07/08 11:23:25, 0] sam/idmap.c:idmap_init(138)
  idmap_init: failed to initialize remote backend!
[2005/07/08 11:23:25, 1] nsswitch/winbindd.c:main(897)
  Could not init idmap -- netlogon proxy only

The ldap backend has idmap in it as entered by the smbldap-populate tools:

dn: ou=Idmap,ou=OxObjects,dc=guestsfurniturehire,dc=com,dc=au
objectClass: organizationalUnit
ou: Idmap
structuralObjectClass: organizationalUnit
entryUUID: ae4d1d72-6847-1029-9f4f-fbdbb9cf79d8

And I have what I believe are the relevant enries in my smb.conf:

	  ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Users
        ldap passwd sync = Yes
        ldap suffix = ou=OxObjects,dc=guestsfurniturehire,dc=com,dc=au
        ldap user suffix = ou=Users
        idmap backend = ldap://mail.guestsfurniturehire.com.au
        idmap uid = 10000-20000
        idmap gid = 10000-20000

What gives?

        Regards Geoff 



More information about the samba mailing list