[Samba] Samba can't recongize machine account stored in LDAP

DRVTiny mudraia at list.ru
Sat Oct 14 14:46:19 GMT 2006


It would be a nice and very comfortable for me to use Samba machine account in this (non-standart for Samba, bit classical for LDAP) format:

dn: cn=HOST$,o=MyORG,c=ru
objectClass: dhcpHost
objectClass: posixAccount
objectClass: sambaSamAccount
cn: HOST$
uid: HOST$
... (etc.)

I know that Samba uses filter (&(uid=ACCOUNT_NAME$)(objectClass=sambaSamAccount)) to find machine accounts in appropriate ldap subtree, so i was very confused, when discover that actually Samba can read ONLY accounts with "uid" in distinguished name, i.e.:

dn: uid=HOST$,o=MyORG,c=ru
objectClass: dhcpHost
objectClass: posixAccount
objectClass: sambaSamAccount
cn: HOST$
uid: HOST$
... (etc.)

But filter (&(uid=ACCOUNT_NAME$)(objectClass=sambaSamAccount)) equally corresponds to both records!
I dont understand, WHY Samba distinguish between dn: cn=HOST$,o=MyORG,c=ru and dn: uid=HOST$,o=MyORG,c=ru and refuses to work with "dn: cn=..."???


More information about the samba mailing list