[Samba] samba BDC + LDAP slave Referral errors

[Michael Gasch]

hi,

i see the same error message with samba 3.0.14a and OpenLDAP 2.2.23 
(Debian Packages) with Master/Slave setup.

i did not set up a referral to the master, so why does samba get a 
referral when attempting to write to a slave? is this an in-build samba 
feature? do i have to enable referrals to get this to work properly?

any advise is appreciated!
thx!
micha

Zwonarz Ivo wrote:
> We use sambaPDC + LDAP
> On our BDC we have a replicated ldap slave.
> Everything seems to work fine.
> 
> Hower, in the smbd log file we have the following messages (only on the 
> BDC's)
> 
> [2006/05/31 15:25:08, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
>  ldapsam_modify_entry: Failed to modify user dn= 
> uid=pc01233$,ou=Machines,dc=brrc,dc=be with: Referral
> [2006/05/31 15:25:08, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
>  ldapsam_update_sam_account: failed to modify user with uid = pc01233$, 
> error:  (Success)
> [2006/05/31 15:25:08, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
>  ldapsam_modify_entry: Failed to modify user dn= 
> uid=pc01233$,ou=Machines,dc=brrc,dc=be with: Referral
> [2006/05/31 15:25:08, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
>  ldapsam_update_sam_account: failed to modify user with uid = pc01233$, 
> error:  (Success)
> 
> 
> Can someone prevent this errors?
> Does samba/openldap need to be changed?
> What is actually happening?
> 
> 
> With more Debug info:
> log level = 2 passdb:3 auth:3
> in smb.conf
> 
> [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  Checking password for unmapped user 
> []\[]@[PC00829] with the new password interface
> [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(222)
>  check_ntlm_password:  mapped user is: [BRRC]\[]@[PC00829]
> [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(268)
>  check_ntlm_password: guest authentication for user [] succeeded
> [2006/05/31 15:32:48, 2] lib/smbldap.c:smbldap_open_connection(692)
>  smbldap_open_connection: connection opened
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>  init_sam_from_ldap: Entry found for user: pc00829$
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>  init_sam_from_ldap: Entry found for user: pc00829$
> [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  Checking password for unmapped user 
> []\[]@[PC00829] with the new password interface
> [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(222)
>  check_ntlm_password:  mapped user is: [BRRC]\[]@[PC00829]
> [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(268)
>  check_ntlm_password: guest authentication for user [] succeeded
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>  init_sam_from_ldap: Entry found for user: pc00829$
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_ldap_from_sam(912)
>  init_ldap_from_sam: Setting entry for user: pc00829$
> [2006/05/31 15:32:48, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
>  ldapsam_modify_entry: Failed to modify user dn= 
> uid=pc00829$,ou=Machines,dc=brrc,dc=be with: Referral
> [2006/05/31 15:32:48, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
>  ldapsam_update_sam_account: failed to modify user with uid = pc00829$, 
> error:  (Success)
> 
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>  init_sam_from_ldap: Entry found for user: pc00829$
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>  init_sam_from_ldap: Entry found for user: pc00829$
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>  init_sam_from_ldap: Entry found for user: pc00829$
> [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_ldap_from_sam(912)
>  init_ldap_from_sam: Setting entry for user: pc00829$
> [2006/05/31 15:32:48, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
>  ldapsam_modify_entry: Failed to modify user dn= 
> uid=pc00829$,ou=Machines,dc=brrc,dc=be with: Referral
> [2006/05/31 15:32:48, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
>  ldapsam_update_sam_account: failed to modify user with uid = pc00829$, 
> error:  (Success)
> 
> 
> Kind regards,
> Ivo Zwonarz.

-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
        49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399