[samba] smbldap adding machine error

[John H Terpstra]

On Thursday 16 June 2005 09:18, Corey Spalding wrote:
> Hi all,
>
> I'm currently working on getting the whole samba with ldap working. I'm
> having an error trying to join a computer to the domain, when windows
> goes to change to the new domain
> I get the dialogue box to enter the user/pass to join I do that and it
> returns:
>
> the following error occurred.... the username could not be found.

What is your ldap.conf configuration? When you do a search for users is the 
computers container searched also? If not, there is your problem!

- John T.

>
> taking a look at the smbd.log file it shows:
>
> [2005/06/16 11:09:18, 2] smbd/reply.c:reply_special(236)
>   netbios connect: name1=BUTCH           name2=SHERRI
> [2005/06/16 11:09:18, 2] smbd/reply.c:reply_special(243)
>   netbios connect: local=butch remote=sherri, name type = 0
> [2005/06/16 11:09:18, 2] smbd/sesssetup.c:setup_new_vc_session(608)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2005/06/16 11:09:18, 2] smbd/sesssetup.c:setup_new_vc_session(608)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2005/06/16 11:09:18, 2] lib/smbldap.c:smbldap_open_connection(692)
>   smbldap_open_connection: connection opened
> [2005/06/16 11:09:18, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>   init_sam_from_ldap: Entry found for user: root
> [2005/06/16 11:09:18, 2] auth/auth.c:check_ntlm_password(305)
>   check_ntlm_password:  authentication for user [root] -> [root] ->
> [root] succeeded
> [2005/06/16 11:09:18, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>   init_sam_from_ldap: Entry found for user: root
> [2005/06/16 11:09:18, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2580)
>   Returning domain sid for domain SPRINGFIELD2 ->
> S-1-5-21-44546037-3274923872-710358792
> [2005/06/16 11:09:18, 0] rpc_server/srv_samr_nt.c:_samr_create_user(2324)
>   _samr_create_user: Running the command
> `/opt/IDEALX/sbin/smbldap-useradd  -w sherri$' gave 9
> [2005/06/16 11:09:19, 2] smbd/server.c:exit_server(609)
>   Closing connections
>
> my smb.conf file is:
>
> [global]
>         dos charset = 850
>         unix charset = ISO8859-1
>         workgroup = SPRINGFIELD2
>         server string = SAMBA-LDAP PDC Server
>         passdb backend = ldapsam:ldap://127.0.0.1/
>         enable privileges = Yes
>         passwd program = /opt/IDEALX/sbin/smbldap-passwd
>         log level = 2
>         log file = /var/log/smbd.log
>         add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
>         delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
>         add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
>         delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
>         add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
> "%u" "%g"
>         delete user from group script =
> /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
>         set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
> "%g" "%u"
>         add machine script = /opt/IDEALX/sbin/smbldap-useradd  -w "%u"
>         domain logons = Yes
>         os level = 50
>         preferred master = Yes
>         domain master = Yes
>         wins support = Yes
>         ldap admin dn = cn=Manager,dc=SPRINGFIELD,dc=ORG
>         ldap delete dn = Yes
>         ldap group suffix = ou=Groups
>         ldap machine suffix = ou=Computers
>         ldap passwd sync = Yes
>         ldap suffix = dc=SPRINGFIELD,dc=ORG
>         ldap ssl = no
>         ldap user suffix = ou=Users
>
> If I run the command smbldap-useradd -w sherri$ it runs no problem.
>
> Anybody have any ideas as to whats wrong here?
>
> Thanks,

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.