[Samba] Re: [idx-smbldap-tools ] smbldap-tools and joining workstation to domain

[Roger Eisenecher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Andres

Andres Toomsalu schrieb:
> The problem is that smbldap-useradd -w 'machinename' will add only
> posixAccount entrys into ldap but it should add both posixAccount and
> sambaSAMAccount entrys.
> 
> So if one doesn't add correct machine account entrys manually to ldap
> the windows workstation domain joining is impossible.

As Jerome said samba would add the additional necessary attributes when
the workstation joins the domain. The ldap script has only to add the
posix stuff.

I do not know if this is correct because sometimes I have also the
problem that some workstations could not join the domain. If I check
then the ldap I could only see the entries necessary for a posixAccount.
If I delete this information from ldap my workstation is able to join
the domain which failed before... But only 2 to 5 of 200 workstations
will fail...

I hope this will help you.

kindly regards
rOger

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCohFgpF3l9rYt4bARAowhAJ0QgNETJ8lMRO1lER3hAYwDJgSDDACcDy/C
N4KB4IuE3zeVPn6WeKoFPfw=
=P8d4
-----END PGP SIGNATURE-----