[Samba] LDAP_NO_SUCH_OBJECT upon new user creation in s4/OpenLDAP

Arvid Requate requate at univention.de
Thu Jan 7 14:00:02 MST 2010


sorry for the misquoted post. This one might be easier to read.

on Mon, 07 Dec 2009 01:13:19 -0800 Eric Woltermann posted:
> for some weeks now I am trying to set up Samba4 (alpha9) with an OpenLDAP 
> 2.4.17 backend as an AD PDC for my XP/7 clients.
> [...]
> Was is NOT working is the creation of new users.   
> Doing that in dsa.msc failes with an error message about password policies, 
> but this is probably not yet implemented, right? Going the 
> howto-way, "<source-dir>/setup/newuser blah" prompts for a password,
> displays  messages about skipping the loading of schema, naming context
> details and  domain details, and then failes with the following error
> message: 
> _ldb.LdbError: (32, 'objectclass: Cannot add
> CN=blah,CN=Users,DC=localdomain, parent does not exist!')  

Alpha10 showed the same problem. Looking into the code you can see that it 
accepts options to pass credentials. Providing the 'LDAP Admin User' name and 
password from the output of the provision command helps, although the 
AssertionError looks a bit discouaging at first sight:

debiantest:~# newuser --username=samba-admin --password=$ldapadminpass demo1
New Password: 
Traceback (most recent call last):
  File "/usr/local/samba/sbin/newuser", line 69, in <module>
    samdb.newuser(username, opts.unixname, password, 
  File "/usr/local/samba/lib/python2.5/site-packages/samba/samdb.py", line 
133, in newuser
  File "/usr/local/samba/lib/python2.5/site-packages/samba/samdb.py", line 
172, in setpassword
    assert(len(res) == 1)

The user object has been created anyway, but it is still inactive:

debiantest:~# smbclient //localhost/netlogon -Udemo1%S4password
Connection to \\localhost\netlogon failed - NT_STATUS_LOGON_FAILURE

Using windows dsa.msc to create the user, I got a NT_STATUS_ACCOUNT_DISABLED 
instead, trying to access netlogon. You can enable the account by running 
setup/setpassword (or setup/enableaccount).


Arvid Requate
Open Source Software Engineer

Univention GmbH
Linux for your business
28359 Bremen
Tel. : +49 421 22232-0
Fax : +49 421 22232-99

requate at univention.de

Geschäftsführer: Peter H. Ganten
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876 

More information about the samba mailing list