[Samba] Users can't login on Samba+Ldap

[dogbert at infinito.it]

Yes, this is the [GLOBAL] section of my smb.conf

[global]
        dos charset = 850
        unix charset = ISO8859-1
        workgroup = DOMAIN.IT
        server string = SERVERNAME
        map to guest = Bad User
        passdb backend = ldapsam:ldap://localhost/
        syslog = 0
        log file = /var/log/samba/%m
        max log size = 100000
        smb ports = 3D 139
        time server = Yes
        deadtime = 10
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = cups
        add user script = /usr/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/sbin/smbldap-userdel "%u"
        add group script = /usr/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
        set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
        add machine script = /usr/sbin/smbldap-useradd -t 0 -w "%u"
        logon script = logon.bat
        logon path =
        logon drive = C:
        logon home =
        domain logons = Yes
        os level = 15
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        ldap admin dn = cn=admin,dc=DOMAIN,dc=IT
        ldap group suffix = ou=Groups
        ldap machine suffix = ou=Computers
        ldap passwd sync = Yes
        ldap suffix = dc=DOMAIN,dc=IT
        ldap user suffix = ou=Users
        create mask = 0640
        directory mask = 0750
        nt acl support = No
        case sensitive = No
        dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd



> 
> 
> do you have   ldap machine suffix = ou=Computers
> in smb.conf?
> 
> dogbert at infinito.it wrote:
> >
> > If I join a workstation (directly by the workstation) it is added to
ldap db
> > but it doesn't see the domain until I manually add an entry for it in
> > /etc/passwd
> >
> >   
> 
>