[Samba] problem usmgr Version 3.2.4

[Robert Schetterer]

Jeremy Allison schrieb:
> On Fri, Oct 17, 2008 at 05:08:47PM +0200, Robert Schetterer wrote:
>> hi , i have
>> a few problems with usmgr on Version 3.2.4
>> ( Version 3.2.4-8.1-1931-SUSE-SL11.0 )
>> samba pdc ldap
>> the download version from ms
>> http://www.microsoft.com/Downloads/details.aspx?FamilyID=c0011ab8-3178-4701-a791-eafba0f42de2&displaylang=en
>> doesnt work
>> giving
>>
>> "device attached to the system is not functioning"
>> whatever i do
>>
>> a old version from usermgr works partially
>> but magic only with the first user in Domain Admins Group
>> other users in Domain Admins dont work ( root works too )
>>
>>
>> with the old usrmgr version i cant only add a user
>> in first case i want to add other stuff like name etc
>> i dont works , so i have to do it in asecond usermod
>> als password creating doesnt work in first useradd
>>
>> here are also comming up
>> device attached to the system is not functioning"
>> but operations final works and is shown after refresh
>>
>> win client is win xp prof german serv pack3 german
>> latest patch level
>>
>> i finally found some error code in the logs
>> using usrmgr with some user from the "Domain Admin" Group
>> smbldap_open: cannot access LDAP when not root
>>
>> 2008/10/17 00:37:09,  2] rpc_server/srv_samr_nt.c:_samr_LookupDomain(3490)
>>   Returning domain sid for domain FIDO ->
>> S-1-5-21-213567364-2628613513-2492443612
>> [2008/10/17 00:37:09,  2] passdb/pdb_ldap.c:init_group_from_ldap(2344)
>>   init_group_from_ldap: Entry found for group: 1007
>> [2008/10/17 00:37:09,  2] passdb/pdb_ldap.c:init_group_from_ldap(2344)
>>   init_group_from_ldap: Entry found for group: 1007
>> [2008/10/17 00:37:09,  2] passdb/pdb_ldap.c:init_group_from_ldap(2344)
>>   init_group_from_ldap: Entry found for group: 1007
>> [2008/10/17 00:37:09,  0] lib/smbldap.c:smbldap_open(1029)
>>   smbldap_open: cannot access LDAP when not root
>> [2008/10/17 00:38:16,  2] passdb/pdb_ldap.c:init_group_from_ldap(2344)
>>
>> any ideas how do get this fixed ?
> 
> Can you re-run smbd with debug level 10 so I can track
> down the codepath that isn't doing the become_root()
> correctly. It's possible that this is already fixed
> but I don't see an exact commit that would fix this.
> 
> Thanks,
> 
> Jeremy.

Hi Jeremy, i am just testing
one thing is solved, my fault

admin users in smb conf overrides
permission for other users from group "Domain Admins" edit with usrmgr

the other bugs stayed, yes i will do debug level 10

-- 
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria