[Samba] Samba+LDAP Groups resolving problem

[Oliver Schulze L.]

Does:
net groupmap list
works?

Oliver

robert.walland at r-kb.si wrote:

>Hi, 
>
>I have managed to configure Samba+LDAP+smbldap-tools. Everything works 
>fine, except one strange problem is appearing. 
>When I connect with Windows tool UserManagerForDomains or I want to create 
>a share on a Wndows box I can see the users but no groups. 
>
>With UserManagerForDomains is see following: 
>
>Users:        All the users 
>Groups: none, just description of Replicators Group and the description 
>Domain Unix Group 
>
>When I try to add a group on share via selecting it I see nothing. 
>
>The strange thing is that everything works fine and when I add a group 
>like DOMAIN\group it works normally.
>
>The only error I found was the LDAP error  bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18) but I can't find any clues. 
>
>In the slapd.conf file I use access control policy like in the idealx 
>manual. 
>
>
>The LDAP log file : 
>
>Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH 
>base="ou=Users,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(uid=*)(objectClass=sambaSamAccount))"  
>Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH attr=uid sambaSid 
>displayName description sambaAcctFlags 
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=28 SEARCH RESULT tag=101 err=0 
>
>nentries=511 text= 
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=4))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH attr=cn sambaSid 
>displayName description sambaGroupType 
>Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18)  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SEARCH RESULT tag=101 err=0
>nentries=0 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=5))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH attr=cn sambaSid 
>displayName description sambaGroupType 
>Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18)  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SEARCH RESULT tag=101 err=0
>nentries=5 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-544))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-548))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-550))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-551))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-552))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH attr=gidNumber 
>sambaSID 
>sambaGroupType sambaSIDList description displayName cn objectClass  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SEARCH RESULT tag=101 err=0 
>
>nentries=1 text=  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH 
>base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 
>filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=2))"  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH attr=cn sambaSid 
>displayName description sambaGroupType 
>Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates: 
>(sambaGroupType) index_param failed (18)  
>Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SEARCH RESULT tag=101 err=0
>nentries=6 text= 
>
>
>Thanks
> 
>  
>

-- 
Oliver Schulze L.
<oliver at samera.com.py>