[Samba] My Net is busted

[Daniel Davidson]

CNRG is a posixgroup:

# cnrg, group, igb.uiuc.edu
dn: cn=cnrg,ou=group,dc=igb,dc=uiuc,dc=edu
cn: cnrg
objectClass: posixGroup
gidNumber: 102
description: Computer and Network Resource Group
memberUid: danield

I have smbldap-tools configured, I believe properly, and I can run them
and make them work.  However, I have not been using them and have
created my own scripts for use with my specific needs.  One guess I have
is that I am missing something from the group entry that samba needs,
but I am not sure.

Ldap group suffix is set, from smb.conf:

ldap group suffix = ou=group
ldap suffix = dc=igb,dc=uiuc,dc=edu
ldap ssl = on
ldap user suffix = ou=People
ldap machine suffix = ou=computer

I have not fired up wireshark yet, I was hoping to avoid that.  If this
does not give anyone hints on what I am doing wrong, I will bite the
bullet and get it installed.

Dan


On Fri, 2007-02-09 at 17:21 -0600, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Daniel Davidson wrote:
> > I was guessing that, but it will not let me create them:
> > 
> > [root at file-server os]# net groupmap add rid=512 unixgroup=cnrg
> > ntgroup="Domain Admins"
> > [2007/02/09 16:45:06, 0]
> > passdb/pdb_ldap.c:ldapsam_add_group_mapping_entry(2330)
> >   ldapsam_add_group_mapping_entry: failed to add group 102 error: �_
> > (Internal (implementation specific) error)
> > adding entry for group Domain Admins failed!
> > 
> > Otherwise, your book would be keeping me from 
> > posting here.
> 
> LOL!  ok.  Fair enough.
> 
> Basic questions:
> 
> * Is cnrg a posixGroup in the directory?
> * Are you using the smbldap tools ?
> * Have you set the 'ldap group suffix'?
> * Have you looked at the LDAP modify request on
>   the wire (in Wireshark)?
> 
> 
> 
> 
> 
> cheers, jerry
> =====================================================================
> Samba                                    ------- http://www.samba.org
> Centeris                         -----------  http://www.centeris.com
> "What man is a man who does not make the world better?"      --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.3 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFFzQIIIR7qMdg1EfYRAiMgAJ9f/OZw5DAY3xUzlYuQ1UcNsSTEtgCeJt0v
> g5JPZtEL8t7zzKPgTO4nb7E=
> =Ikqb
> -----END PGP SIGNATURE-----