[Samba] Samba/LDAP PDC problem

Guillaume silencer at free-4ever.net
Mon Jan 29 10:12:44 GMT 2007


Hi

I want to run a Samba PDC with LDAP backend on a FreeBSD 6.2 for Sparc64.

And off course, if I send this mail, it is not working ! :-(

I have this error message when using smbclient on the PDC itself.
The command line is: smbclient -L janus -Uadministrator%toto
The result is: session setup failed: Call returned zero bytes (EOF)

I've tested on 2 differents FreeBSD6.2 Sparc64, I have the same problem.
But i've also tested on a FreeBSD 6.2 i386 with exactly the same
configuration, it is working very well. And it is also working on a
Debian Etch for Sparc64 !
The version of Samba is always up to date

Thanks for any help.


I put here my config file for Samba:
---
# General parameters
netbios name = janus
work group = tatooine
server string = janus (Centile PDC Server)
dns proxy = no
wins support = yes
name resolve order = wins lmhosts host bcast
time server = yes
#socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192

# Logging
log file = /var/log/samba/log.%m
syslog = 0
log level = 10
max log size = 1000

# This server is the PDC
domain logons = yes
os level = 35
local master = yes
prefered master = yes
domain master = yes
security = user
encrypt passwords = yes

# Admin groups
admin users = @administrators

# Profils
logon path =
logon home =
logon drive = u:
logon script = %U.bat

# LDAP parameters
passdb backend = "ldapsam:ldaps://ldap1.centile.com/"
ldap ssl = on
ldap suffix = ou=internal,o=centile,dc=com
ldap admin dn = cn=manager,o=centile,dc=com
ldap machine suffix = ou=computers
ldap user suffix = ou=users
ldap group suffix = ou=groups
#ldap idmap suffix  = ou=users
ldap passwd sync = yes

# Netlogon
#[netlogon]
#  comment = Repertoire Netlogon
#  path = /var/db/samba/netlogon
#  browsable = yes
#  read only = no
#  write list = @administrateurs
#  create mask = 0644
---

And here is the corresponding log file at level 10:
---
[2007/01/29 10:17:26, 6] param/loadparm.c:lp_file_list_changed(2998)
  lp_file_list_changed()
  file /usr/local/etc/smb.conf -> /usr/local/etc/smb.conf  last
mod_time: Mon Jan 29 10:06:43 2007

[2007/01/29 10:17:26, 5] auth/auth_util.c:make_user_info_map(161)
  make_user_info_map: Mapping user [TATOOINE]\[administrator] from
workstation [JANUS]
[2007/01/29 10:17:26, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/01/29 10:17:26, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/01/29 10:17:26, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/01/29 10:17:26, 5] auth/auth_util.c:debug_nt_user_token(448)
  NT user token: (NULL)
[2007/01/29 10:17:26, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2007/01/29 10:17:26, 5] auth/auth_util.c:is_trusted_domain(2020)
  is_trusted_domain: Checking for domain trust with [TATOOINE]
[2007/01/29 10:17:26, 5]
passdb/secrets.c:secrets_fetch_trusted_domain_password(340)
  secrets_fetch failed!
[2007/01/29 10:17:26, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/01/29 10:17:26, 10] lib/gencache.c:gencache_get(329)
  Cache entry with key = TDOM/TATOOINE couldn't be found
[2007/01/29 10:17:26, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
  no entry for trusted domain TATOOINE found.
[2007/01/29 10:17:26, 5] auth/auth_util.c:make_user_info(75)
  attempting to make a user_info for administrator (administrator)
[2007/01/29 10:17:26, 5] auth/auth_util.c:make_user_info(85)
  making strings for administrator's user_info struct
[2007/01/29 10:17:26, 5] auth/auth_util.c:make_user_info(117)
  making blobs for administrator's user_info struct
[2007/01/29 10:17:26, 10] auth/auth_util.c:make_user_info(135)
  made an encrypted user_info for administrator (administrator)
[2007/01/29 10:17:26, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user
[TATOOINE]\[administrator]@[JANUS] with the new password interface
[2007/01/29 10:17:26, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: [TATOOINE]\[administrator]@[JANUS]
[2007/01/29 10:17:26, 10] auth/auth.c:check_ntlm_password(233)
  check_ntlm_password: auth_context challenge created by NTLMSSP
callback (NTLM2)
[2007/01/29 10:17:26, 10] auth/auth.c:check_ntlm_password(235)
  challenge is:
[2007/01/29 10:17:26, 5] lib/util.c:dump_data(2222)
  [000] 56 D3 03 25 4A 00 8D 86                           V..%J...
[2007/01/29 10:17:26, 10] auth/auth.c:check_ntlm_password(261)
  check_ntlm_password: guest had nothing to say
[2007/01/29 10:17:26, 8] lib/util.c:is_myname(2043)
  is_myname("TATOOINE") returns 0
[2007/01/29 10:17:26, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/01/29 10:17:26, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/01/29 10:17:26, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/01/29 10:17:26, 5] auth/auth_util.c:debug_nt_user_token(448)
  NT user token: (NULL)
[2007/01/29 10:17:26, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2007/01/29 10:17:26, 5] lib/smbldap.c:smbldap_search_ext(1179)
  smbldap_search_ext: base => [ou=internal,o=centile,dc=com], filter =>
[(&(uid=administrator)(objectclass=sambaSamAccount))], scope => [2]
---


-- 
Guillaume
E-mail: silencer_<at>_free-4ever_<dot>_net
Blog: http://guillaume.free-4ever.net
----
Site: http://www.free-4ever.net


More information about the samba mailing list