[Samba] NIS extensions - only 3 of 55 entries present

[Rowland Penny]

On 23/06/14 14:28, Brian Candler wrote:
> I have a test setup of samba 4.1.6 under ubuntu 14.04.
>
> When I do the query shown at
> https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Check_if_NIS_Extensions_are_installed_in_your_Directory 
>
> it shows I have the ypServ30 container installed.
>
> If I change this query to -s sub then I find 3 entries in that subtree 
> (see [1] below)
>
> However the full schema in /usr/share/samba/setup/ypServ30.ldif has 55 
> entries. The three records I have correspond to just the last three 
> entries in this file.
>
> Questions:
> - Is this normal for an out-of-the-box Samba install?
> - Should I install the other 52 LDAP entries, if I want to do 
> centralised user/group mapping for Unix servers?
>
> Thanks,
>
> Brian.
>
> [1]
> root at dc1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -s sub -b 
> CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest,DC=int,DC=example,DC=net 
>
> # record 1
> dn: 
> CN=bydefaults,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest,DC=int,DC=example,DC=net
> objectClass: top
> objectClass: msSFU30NISMapConfig
> cn: bydefaults
> instanceType: 4
> whenCreated: 20140618075513.0Z
> whenChanged: 20140618075513.0Z
> uSNCreated: 3767
> uSNChanged: 3767
> showInAdvancedViewOnly: TRUE
> name: bydefaults
> objectGUID: ac691710-e588-403f-93ed-6840fad3d7de
> objectCategory: 
> CN=msSFU-30-NIS-Map-Config,CN=Schema,CN=Configuration,DC=adtes
>  t,DC=int,DC=example,DC=net
> msSFU30KeyAttributes: msSFU30Name
> msSFU30FieldSeparator:: IA==
> msSFU30IntraFieldSeparator:: IA==
> msSFU30SearchAttributes: msSFU30Name
> msSFU30ResultAttributes: msSFU30Name
> msSFU30MapFilter: (objectCategory=msSFU30YpServers)
> distinguishedName: 
> CN=bydefaults,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=Sy
>  stem,DC=adtest,DC=int,DC=example,DC=net
>
> # record 2
> dn: 
> CN=adtest,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest,DC=int,DC=example,DC=net
> objectClass: top
> objectClass: msSFU30DomainInfo
> cn: adtest
> instanceType: 4
> whenCreated: 20140618075513.0Z
> whenChanged: 20140618075513.0Z
> uSNCreated: 3768
> uSNChanged: 3768
> showInAdvancedViewOnly: TRUE
> name: adtest
> objectGUID: 78a19690-7641-4355-a92c-3545897c4403
> objectCategory: 
> CN=msSFU-30-Domain-Info,CN=Schema,CN=Configuration,DC=adtest,D
>  C=int,DC=example,DC=net
> msSFU30MasterServerName: DC1
> msSFU30OrderNumber: 10000
> msSFU30Domains: adtest
> distinguishedName: 
> CN=adtest,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System
>  ,DC=adtest,DC=int,DC=example,DC=net
>
> # record 3
> dn: 
> CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest,DC=int,DC=example,DC=net
> objectClass: top
> objectClass: container
> cn: ypservers
> instanceType: 4
> whenCreated: 20140618075513.0Z
> whenChanged: 20140618075513.0Z
> uSNCreated: 3766
> uSNChanged: 3766
> showInAdvancedViewOnly: TRUE
> name: ypservers
> objectGUID: b116fa4c-ff35-42ca-98ad-72a619c4f43b
> objectCategory: 
> CN=Container,CN=Schema,CN=Configuration,DC=adtest,DC=int,DC=ex
>  ample,DC=net
> distinguishedName: 
> CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest
>  ,DC=int,DC=example,DC=net
>
> # returned 3 records
> # 3 entries
> # 0 referrals
>

Try removing the first part of the base 'CN=ypservers'

Rowland