RE [Samba] smbldap-useradd -w won't create machine account

Hector Blanco white.lists at gmail.com
Wed Apr 2 16:03:14 GMT 2008


No? Then how do you say we must do? Because I also tried to do that
from Windows, and it doesn't work... I mean... right click on my pc
and "add machine to domain"... and still doesn't work :S

Quoting myself form:
http://lists.samba.org/archive/samba/2008-February/138639.html

> The linux server is the host called "xxxx" and the windows client is
> the host "enano"
>
> When I try to join the domain "JOME" from Windows, I am prompted for a
> user that has permission to create "things" in the domain. I fill the
> textboxes with "root" and the "rootpass", and in the samba.log file of
> the server (if the debug level is 2 or higher), it appears:
> "authentication for user [root] -> [root] -> [root] succeeded". After
> this, the machine (enano$) is properly created (if doesn't exist) in
> the Ldap schema (a new entry called enano$ appears in
> ou=Hosts,dc=jome) as shown in the diagram above.The thing is that
> everything seems to be fine until in the windows machine a "error
> window dialog" appears with a very ugly red signal, saying ("username
> not found"). I think it must be something wrong with the user "root",
> because if I try a username that is really non-existent (john, for
> instance) or if I mistype the password, the message that appears in
> windows is different (in my computer appears in Spanish, but it's
> something like "session starting error: username not found or wrong
> password")... I've tried to put a higher debug level in samba
> (smb.conf-> debug level=3) and between several other messages, it
> appears:
> [2008/02/22 15:33:37, 3] passdb/pdb_interface.c:pdb_default_create_user(354)
>  pdb_default_create_user: failed to create a new user structure:
> NT_STATUS_NO_SUCH_USER
>

2008/4/2, Christopher Perry <cperry at hmdc.harvard.edu>:
> the problem, as it turns out, is that you can't expect the command line to add the sambaSamAccount objectClass. the only way to get that added is by adding the windows machine to the domain, and samba will create that object class using the script. it must pass something magical to the script.
>
>  don't ask me why, it seems counter intuitive.
>
>
>
>  Hector Blanco wrote:
>
> >  Shouldn't it? I mean...Taking a look to the output produced by
> >  "smbldap-useradd -?" it says "-w is a windows machine account
> >  (otherwise, posix stuff only)" or something  similar... I don't have
> >  the exact output right now.
> >
> >   As far as I understand, it should add all the Samba stuff needed for Windows.
> >
> >   And I'm having the same (or similar) problems...
> >
> >  http://lists.samba.org/archive/samba/2008-February/138442.html
> >  http://lists.samba.org/archive/samba/2008-February/138639.html
> >  http://lists-archives.org/samba/36168-samba-ldap-question.html
> >  http://lists.samba.org/archive/samba/2008-March/139288.html
> >
> >  Well... at least I think they can be similar... Maybe I'm just really
> >  wrong and each time than someone is experiencing problems adding a
> >  Windows machine to an Ldap server, I keep saying "Me too, me too!!..."
> >  although they are actually different problems... I hope not...
> >
> >
> >
> >
> >  2008/4/1, stephane.purnelle at corman.be <stephane.purnelle at corman.be>:
> >
> > >  Samba will add sambaSAMAccount when you add the workstation to the domain.
> > >   sambaldaptools not add the samba shema for that.
> > >
> > >   -----------------------------------
> > >   Stéphane PURNELLE                         stephane.purnelle at corman.be
> > >   Service Informatique       Corman S.A.           Tel : 00 32 087/342467
> > >
> > >   samba-bounces+stephane.purnelle=corman.be at lists.samba.org a écrit sur
> > >   01/04/2008 16:17:13 :
> > >
> > >   > I can't get smbldap-useradd to add the sambaSamAccount workstation
> > >   > attributes. For example:
> > >   >
> > >   > smbldap-useradd -w 'test_machine$'
> > >   >
> > >   >
> > >   > # test_machine$, People, desktop.hmdc.harvard.edu
> > >   > dn: uid=test_machine$,ou=People,dc=desktop,dc=hmdc,dc=harvard,dc=edu
> > >   > objectClass: top
> > >   > objectClass: account
> > >   > objectClass: posixAccount
> > >   > cn: test_machine$
> > >   > uid: test_machine$
> > >   > uidNumber: 1010
> > >   > gidNumber: 515
> > >   > homeDirectory: /dev/null
> > >   > loginShell: /bin/false
> > >   > description: Computer
> > >   > gecos: Computer
> > >   >
> > >   >
> > >   > Has anyone else experienced this? It thinks it's creating a machine
> > >   > account, but it doesn't add sambaSamAccount, or sambaAcctFlags [W  ].
> > >   >
> > >   >
> > >   > More info:
> > >   > # rpm -qi smbldap-tools
> > >   > Name        : smbldap-tools                Relocations: (not
> > >   relocatable)
> > >   > Version     : 0.9.4                             Vendor: Dag Apt
> > >   > Repository, http://dag.wieers.com/apt/
> > >   > Release     : 1.el5.rf                      Build Date: Sat 22 Sep 2007
> > >   > 01:35:45 AM EDT
> > >   > Install Date: Tue 25 Mar 2008 11:43:42 AM EDT      Build Host:
> > >   > lisse.leuven.wieers.com
> > >   > Group       : System Environment/Base       Source RPM:
> > >   > smbldap-tools-0.9.4-1.el5.rf.src.rpm
> > >   > Size        : 525573                           License: GPL
> > >   > Signature   : DSA/SHA1, Sat 22 Sep 2007 02:51:47 PM EDT, Key ID
> > >   > a20e52146b8d79e6
> > >   > Packager    : Dag Wieers <dag at wieers.com>
> > >   > URL         : http://sourceforge.net/projects/smbldap-tools/
> > >   > Summary     : User and group administration tools for Samba-OpenLDAP
> > >   >
> > >   >
> > >   >
> > >   > Thanks,
> > >   > c
> > >   >
> > >   > --
> > >   > To unsubscribe from this list go to the following URL and read the
> > >   > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > >
> > >  --
> > >   To unsubscribe from this list go to the following URL and read the
> > >   instructions:  https://lists.samba.org/mailman/listinfo/samba
> > >
> > >
> >
>
>


More information about the samba mailing list