[Samba] [Follow-UP] samba BDC + LDAP slave Referral errors

[Michael Gasch]

hi,

i see the same error message with samba 3.0.14a and OpenLDAP 2.2.23
(Debian Packages) with Master/Slave setup.

i did not set up a referral to the master, so why does samba get a
referral when attempting to write to a slave? is this an in-build samba
feature? do i have to enable referrals to get this to work properly?

any advise is appreciated!
thx!
micha

Zwonarz Ivo wrote:
 > We use sambaPDC + LDAP
 > On our BDC we have a replicated ldap slave.
 > Everything seems to work fine.
 >
 > Hower, in the smbd log file we have the following messages (only on the
 > BDC's)
 >
 > [2006/05/31 15:25:08, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
 >  ldapsam_modify_entry: Failed to modify user dn=
 > uid=pc01233$,ou=Machines,dc=brrc,dc=be with: Referral
 > [2006/05/31 15:25:08, 0] 
passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
 >  ldapsam_update_sam_account: failed to modify user with uid = pc01233$,
 > error:  (Success)
 > [2006/05/31 15:25:08, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
 >  ldapsam_modify_entry: Failed to modify user dn=
 > uid=pc01233$,ou=Machines,dc=brrc,dc=be with: Referral
 > [2006/05/31 15:25:08, 0] 
passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
 >  ldapsam_update_sam_account: failed to modify user with uid = pc01233$,
 > error:  (Success)
 >
 >
 > Can someone prevent this errors?
 > Does samba/openldap need to be changed?
 > What is actually happening?
 >
 >
 > With more Debug info:
 > log level = 2 passdb:3 auth:3
 > in smb.conf
 >
 > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(219)
 >  check_ntlm_password:  Checking password for unmapped user
 > []\[]@[PC00829] with the new password interface
 > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(222)
 >  check_ntlm_password:  mapped user is: [BRRC]\[]@[PC00829]
 > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(268)
 >  check_ntlm_password: guest authentication for user [] succeeded
 > [2006/05/31 15:32:48, 2] lib/smbldap.c:smbldap_open_connection(692)
 >  smbldap_open_connection: connection opened
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
 >  init_sam_from_ldap: Entry found for user: pc00829$
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
 >  init_sam_from_ldap: Entry found for user: pc00829$
 > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(219)
 >  check_ntlm_password:  Checking password for unmapped user
 > []\[]@[PC00829] with the new password interface
 > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(222)
 >  check_ntlm_password:  mapped user is: [BRRC]\[]@[PC00829]
 > [2006/05/31 15:32:48, 3] auth/auth.c:check_ntlm_password(268)
 >  check_ntlm_password: guest authentication for user [] succeeded
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
 >  init_sam_from_ldap: Entry found for user: pc00829$
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_ldap_from_sam(912)
 >  init_ldap_from_sam: Setting entry for user: pc00829$
 > [2006/05/31 15:32:48, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
 >  ldapsam_modify_entry: Failed to modify user dn=
 > uid=pc00829$,ou=Machines,dc=brrc,dc=be with: Referral
 > [2006/05/31 15:32:48, 0] 
passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
 >  ldapsam_update_sam_account: failed to modify user with uid = pc00829$,
 > error:  (Success)
 >
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
 >  init_sam_from_ldap: Entry found for user: pc00829$
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
 >  init_sam_from_ldap: Entry found for user: pc00829$
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
 >  init_sam_from_ldap: Entry found for user: pc00829$
 > [2006/05/31 15:32:48, 2] passdb/pdb_ldap.c:init_ldap_from_sam(912)
 >  init_ldap_from_sam: Setting entry for user: pc00829$
 > [2006/05/31 15:32:48, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495)
 >  ldapsam_modify_entry: Failed to modify user dn=
 > uid=pc00829$,ou=Machines,dc=brrc,dc=be with: Referral
 > [2006/05/31 15:32:48, 0] 
passdb/pdb_ldap.c:ldapsam_update_sam_account(1720)
 >  ldapsam_update_sam_account: failed to modify user with uid = pc00829$,
 > error:  (Success)
 >
 >
 > Kind regards,
 > Ivo Zwonarz.

-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
        49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399