[Samba] objectClass:posixAccount missing

[steve]

On Thu, 2013-08-29 at 20:17 +0200, Luca Olivetti wrote:

> but then sssd complains that
> 
> [[sssd[ldap_child[2300]]]] [ldap_child_get_tgt_sync] (0x0100):
> Principal
> name is: [HP$@WETRON.ES]
> [[sssd[ldap_child[2300]]]] [ldap_child_get_tgt_sync] (0x0100): Using
> keytab [/etc/krb5.keytab]
> [[sssd[ldap_child[2300]]]] [ldap_child_get_tgt_sync] (0x0100): Will
> canonicalize principals
> [[sssd[ldap_child[2300]]]] [prepare_response] (0x0400): Building
> response for result [0]
> [[sssd[ldap_child[2300]]]] [main] (0x0400): ldap_child completed
> successfully
> [sssd[be[default]]] [read_pipe_handler] (0x0400): EOF received, client
> finished
> [sssd[be[default]]] [sdap_get_tgt_recv] (0x0400): Child responded: 0
> [FILE:/var/lib/sss/db/ccache_WETRON.ES], expired on [1377842615]
> [sssd[be[default]]] [sdap_cli_auth_step] (0x0100): expire timeout is
> 900
> [sssd[be[default]]] [sasl_bind_send] (0x0100): Executing sasl bind
> mech:
> gssapi, user: HP$
> [sssd[be[default]]] [sasl_bind_send] (0x0020): ldap_sasl_bind failed
> (-2)[Local error]
> [sssd[be[default]]] [sasl_bind_send] (0x0080): Extended failure
> message:
> [SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
> Minor code may provide more information (Server not found in Kerberos
> database)]

Oooof. ¡Doloroso!
Marc's howto will be here soon:)