[Samba] Samba + LDAP NSS resolving

[Geert Stappers]

On Tue, Jun 14, 2005 at 01:58:52PM -0700, linuxlady wrote:
> I'm sure it's not the docs, just me.  I used the other docs from
> idealx because I had problems with the smbldap-tools - but I managed
> to solve those problems and add entries.
> 
>  I went back and checked the configuration for nss_ldap and pam_ldap -
> but it still didn't work.  I'm using Chapter 5 of the Samba Docs:
> http://us3.samba.org/samba/docs/man/Samba-Guide/happy.html
> 
> getent passwd | grep testuser1
> In the logs:
> conn=120 op=0 RESULT tag=97 err=49 text=

Error 49: bad credentials

which means the wrong password,
but could also mean not using TLS/SSL where you should.

> 
> And the windows domain groups are not mapped to the UNIX groups:
> net groupmap list
> Domain Admins (S-1-5-21-306150234-1547186280-1464621331-512) -> 512
> Domain Users (S-1-5-21-306150234-1547186280-1464621331-513) -> 513
> Domain Guests (S-1-5-21-306150234-1547186280-1464621331-514) -> 514
> Domain Computers (S-1-5-21-306150234-1547186280-1464621331-515) -> 515
> Administrators (S-1-5-32-544) -> 544
> Account Operators (S-1-5-32-548) -> 548
> Print Operators (S-1-5-32-550) -> 550
> Backup Operators (S-1-5-32-551) -> 551
> Replicators (S-1-5-32-552) -> 552
> 
> Maybe I should just start over.  Where in the samba docs would be a
> good place to start for using Samba with LDAP?  This is the second
> time I've started over already - I've never gotten it to work
> completely.

For me was spending time on understanding LDAP a good thing.

> 
> Thanks,
> 
> Yasi
> 
> 
> 
> On 6/13/05, John H Terpstra <jht at samba.org> wrote:
> > On Monday 13 June 2005 19:58, linuxlady wrote:
> > > I'm using the howto from idealx and the samba-guide to configure a
> > > samba server with LDAP backend.
> > 
> > I am the author of the Samba-Guide.  Frankly, if my documentation does not
> > solve your problem then it is broken and useless! You should not need more
> > documentation than the official Samba documentation.

Please notice that the reply goes below the text.


Cheers
Geert Stappers