[Samba] Samba+LDAP Groups resolving problem

[robert.walland at r-kb.si]

Hi, 

I have managed to configure Samba+LDAP+smbldap-tools. Everything works 
fine, except one strange problem is appearing. 
When I connect with Windows tool UserManagerForDomains or I want to create 
a share on a Wndows box I can see the users but no groups. 

With UserManagerForDomains is see following: 

Users:        All the users 
Groups: none, just description of Replicators Group and the description 
Domain Unix Group 

When I try to add a group on share via selecting it I see nothing. 

The strange thing is that everything works fine and when I add a group 
like DOMAIN\group it works normally.

The only error I found was the LDAP error  bdb_equality_candidates: 
(sambaGroupType) index_param failed (18) but I can't find any clues. 

In the slapd.conf file I use access control policy like in the idealx 
manual. 


The LDAP log file : 

Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH 
base="ou=Users,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(uid=*)(objectClass=sambaSamAccount))"  
Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH attr=uid sambaSid 
displayName description sambaAcctFlags 
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=28 SEARCH RESULT tag=101 err=0 

nentries=511 text= 
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=4))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH attr=cn sambaSid 
displayName description sambaGroupType 
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
(sambaGroupType) index_param failed (18)  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SEARCH RESULT tag=101 err=0
nentries=0 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=5))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH attr=cn sambaSid 
displayName description sambaGroupType 
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
(sambaGroupType) index_param failed (18)  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SEARCH RESULT tag=101 err=0
nentries=5 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-544))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-548))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-550))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-551))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-552))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH attr=gidNumber 
sambaSID 
sambaGroupType sambaSIDList description displayName cn objectClass  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SEARCH RESULT tag=101 err=0 

nentries=1 text=  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH 
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=2))"  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH attr=cn sambaSid 
displayName description sambaGroupType 
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
(sambaGroupType) index_param failed (18)  
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SEARCH RESULT tag=101 err=0
nentries=6 text= 


Thanks