[Samba] failed to add domain dn= sambaDomainName=hostname

Geert Stappers stappers at stappers.nl
Mon May 30 22:38:13 GMT 2005


Hello,

On a computer, a sparc64 with Debian, with hostname tw89
and domain name KUDDE 
thinks `smbpasswd` that the domain name is TW89

| tw89:~
| # grep workgroup /etc/samba/smb.conf
| # Change this to the workgroup/NT-domain name your Samba server will part of
|    workgroup = KUDDE
| tw89:~
| # ldapsearch -LLxW -H ldaps://tw89  -D cn=admin,ou=people,dc=gst,dc=stappers,dc=nl \
|   -b dc=gst,dc=stappers,dc=nl '(&(objectClass=*)(sambaDomainName=*))' sambaDomainName
| version: 1
|
| dn: sambaDomainName=KUDDE,dc=gst,dc=stappers,dc=nl
| sambaDomainName: KUDDE
|
| tw89:~
| # smbpasswd -a challange
| failed to add domain dn= sambaDomainName=TW89,dc=gst,dc=stappers,dc=nl with: Insufficient access
|         no write access to parent
| Adding domain info for TW89 failed with NT_STATUS_UNSUCCESSFUL
| New SMB password:
| Retype new SMB password:
| Failed to initialise SAM_ACCOUNT for user challange. Does this user exist in the UNIX password database ?
| Failed to modify password entry for user challange
| tw89:~
| #


On a working computer ( debian-edu, i386 ) there is

| tjener:~
| # smbpasswd -D 4 -a mymom
| Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=SKOLELINUX))]
| smbldap_open_connection: connection opened
| ldap_connect_system: succesful connection to the LDAP server
| The LDAP server is succesful connected
| New SMB password: ^C
| Interupted by signal.
| tjener:~
| #


The failing computer gives:

| tw89:~
| # smbpasswd -D 4 -a mymom
| Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=TW89))]
| smbldap_open_connection: connection opened
| ldap_connect_system: succesful connection to the LDAP server
| ldap_connect_system: LDAP server does support paged results
| The LDAP server is succesfully connected
| Got no domain info entries for domain
| Adding new domain
| failed to add domain dn= sambaDomainName=TW89,dc=gst,dc=stappers,dc=nl
| with: Insufficient access
|         no write access to parent
| Adding domain info for TW89 failed with NT_STATUS_UNSUCCESSFUL
| pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the
| domain
| pdb_init_ldapsam: Continuing on regardless, will be unable to allocate
| new users/groups, and will risk BDCs having inconsistant SIDs
| New SMB password: ^C
| Interupted by signal.
| tw89:~
| #

Why does it use it's hostname 
and the workgroup?


Cheers
Geert Stappers



More information about the samba mailing list