[Samba] Problem about samba3 on freebsd, with smbldap-tools [solved]

[Patrick Dung]

Hi

I have figured out what went wrong.
I have previously complied samba without ldap support.
There are tdb files in /var/db/samba.

I have just uninstall samba and
remove all tdb files (this instruction was given when run make
deinstall in the samba3 ports, but I didn't follow it before).

I did a fresh recompile with ldap support and now the problem is gone.

Thanks
Patrick

--- Patrick Dung <patrick_dkt at yahoo.com.hk> wrote:

> My domain name is WORKGROUP
> 
> 1. smbldap-usershow WORKGROUP\$ or smbldap-usershow DOMAIN\$
> shows user "XXX" doesn't exist in both FreeBSD/Linux
> 
> 2. I have used smbldap-populate and I have verified the items is
> added
> into the ldap server:
> 
> dn: dc=localdomain
> dn: ou=people,dc=localdomain
> dn: ou=group,dc=localdomain
> dn: ou=computers,dc=localdomain
> dn: ou=Idmap,dc=localdomain
> dn: uid=root,ou=people,dc=localdomain
> dn: uid=nobody,ou=people,dc=localdomain
> dn: cn=Domain Admins,ou=group,dc=localdomain
> dn: cn=Domain Users,ou=group,dc=localdomain
> dn: cn=Domain Guests,ou=group,dc=localdomain
> dn: cn=Domain Computers,ou=group,dc=localdomain
> dn: cn=Administrators,ou=group,dc=localdomain
> dn: cn=Account Operators,ou=group,dc=localdomain
> dn: cn=Print Operators,ou=group,dc=localdomain
> dn: cn=Backup Operators,ou=group,dc=localdomain
> dn: cn=Replicators,ou=group,dc=localdomain
> dn: sambaDomainName=WORKGROUP,dc=localdomain
> dn: uid=w2000srv$,ou=computers,dc=localdomain
> dn: uid=server$,ou=computers,dc=localdomain
> 
> 3. I have used slapcat and found no special problem.
> BTW, I have found this in my samba log:
> 
> [2007/06/05 18:00:40, 0] auth/auth_util.c:create_builtin_users(758)
>   create_builtin_users: Failed to create Users
> 
> 4. I am using the same setup (eg. ldap access list, smb.conf) for
> both
> FreeBSD and Linux.
> 
> Only FreeBSD have the problem.
> 
> Regards
> Patrick
> 
> --- Cardon Denis <denis.cardon at tranquilitsystems.com> wrote:
> 
> > Patrick Dung a écrit :
> > > Hi
> > > 
> > > I have tried to setup freebsd (with samba3 ports), backend is
> > openldap
> > > with smbldap-tools.
> > > 
> > > After a windows client joined the domain, I tried to right click
> a
> > > folder to set Security/permission.
> > > 
> > > The windows client has a popup windows which display:
> > > 
> > > The program cannot open the required dialog box
> > > because it cannot determine whether the computer named "DOMAIN"
> is
> > > joined to a domain
> > > 
> > > I have also tried to do same setup with Debian/Linux with the
> same
> > > settings in samba/openldap but it did not have this problem.
> > 
> > Have you check that the entry is correctly created into the ldap
> tree
> > (type smbldap-usershow DOMAIN\$ if DOMAIN is really your computer
> > name...). You should also check that the group id/SID of your
> > computers
> > does exist in your ldap. When the windows box is joined to a
> domain,
> > you
> > should get a log of the complete smbldap-useradd line used for
> adding
> > the computer in your smb.log file. If it failed, you can replay it
> on
> > the command line to see what is the error code. Perhaps there is a
> > missing perl library.
> > 
> > Hope this helps,
> > 
> > Denis
> > 
> > 
> > 
> > 
> > > BTW seems HPUX with the CIFS also get this problem:
> > > http://docs.hp.com/en/B8725-90119/ar01s05.html
> > > 
> > > Any ideas?
> > > 
> > > Thanks
> > > Patrick
> > > 
> > > 
> > >        
> > >
> >
>
____________________________________________________________________________________
> > > Building a website is a piece of cake. Yahoo! Small Business
> gives
> > you all the tools to get online.
> > > http://smallbusiness.yahoo.com/webhosting 
> > 
> > 
> > -- 
> > Denis Cardon
> > Tranquil IT Systems
> > 10 rue du Docteur Bouchard
> > 49400 Saumur
> > tel : +33 (0) 2.41.67.56.99
> > http://www.tranquil-it-systems.fr
> > 
> > 
> 
> 
> 
>  
>
____________________________________________________________________________________
> Never miss an email again!
> Yahoo! Toolbar alerts you the instant new Mail arrives.
> http://tools.search.yahoo.com/toolbar/features/mail/
> 



      ____________________________________________________________________________________
Fussy? Opinionated? Impossible to please? Perfect.  Join Yahoo!'s user panel and lay it on us. http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7