[Samba] SambaDomainName & strange Ldap authentification

franck dufau franckdufau at free.fr
Fri Dec 5 19:24:05 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hye all,

I have a samba server on sid with openldap backend with xp worstations.
many services are configured to use ldap authentification
(postfix,ftp,squid and samba off course)
my sambaDomainName is DOMAINE...
Everything work perfectly :)

I see in log many lines like :
slapd[23331] <= bdb_equality_candidates: (uid) not indexed
slapd[23331] <= bdb_equality_candidates: (memberUid) not indexed
slapd[23331] <= bdb_equality_candidates: (uniqueMember) not indexed
slapd[23331] <= bdb_equality_candidates: (giuNumber) not indexed
slapd[23331] <= bdb_equality_candidates: (sambaSID) not indexed
slapd[23331] <= bdb_equality_candidates: (sambaGroupType) not indexed
slapd[23331] <= bdb_equality_candidates: (sambaSIDList) not indexed

to clean log of this lines, i have add this lines in my
/etc/ldap/sladpd.conf :

index          uid     eq
index          memberUid eq
index          uniqueMember eq
index          gidNumber eq
index          sambaSID eq
index          sambaGroupType eq
index          sambaSIDList eq

i have restart ldap and samba....

i was very surprise to see the automatique creation of a new
sambaDomainName
i see in phpldapadmin 2 sambaDomainName !
sambaDomainName=DOMAINE and
sambaDomainName=WORKGROUP newly created after restart...

and all authentification work off...:( no samba authentification ! no
proxy ! no ftp ! no mail !

getent passwd seems to be OK
but
smbldap-usershow admin say : no user !!!

very surprise....i finally return to my initial configuration.

can someone explain it ? what's going on ?
logs with not indexed are normal ?
or i do a bad index ?

regards

Franck Dufau





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkk5f9QACgkQrKIazktK/hJVswCfZj5BUxqo714LBUKMBliGFehr
vYoAn0SfHDK1A12U3DLy1AbRvwZYWtYn
=GPQk
-----END PGP SIGNATURE-----


More information about the samba mailing list