[Samba] ldap user login issue

[Rowland Penny]

On Sun, 21 Aug 2016 16:15:35 +0000
Parag Khuraswar <parag_k at citilindia.com> wrote:

> Hi Rowland,
> 
> Thanks for reply, 
> 
> I'm using:-
> Samba -                    SAMBA4 Domain Controller
> OS -                           RHEL 6.8 64bit
> Samba Version -      Version 4.4.5 (compiled)
> Samba config file:-
> --------------------------------------------------------------------
> # Global parameters
> [global]
>         netbios name = CONLDAP
>         realm = <My Domain>
>         workgroup = <My Domain>
>         dns forwarder = <DNS forwarder IP>
>         server role = active directory domain controller
> 
> # LDAP Settings
>         ldap admin dn = cn=Manager,dc=<My Domain>,dc=in
>         ldap group suffix = ou=Groups
>         ldap passwd sync = Yes
>         ldap suffix = dc=<My Domain>,dc=in
>         idmap backend  = ldap:ldap:// <My Domain Host Name>
> 
> 
> [netlogon]
>         path = /usr/local/samba/var/locks/sysvol/arde.in/scripts
>         read only = No
> 
> [sysvol]
>         path = /usr/local/samba/var/locks/sysvol
>         read only = No
> -------------------------------------------------------------------------------
> 
> 
> Regards,
> Parag
> +91 8308806004
> 
> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of
> Rowland Penny via samba Sent: Sunday, August , 2016 9:28 PM
> To: samba at lists.samba.org
> Subject: Re: [Samba] ldap user login issue
> 
> On Sun, 21 Aug 2016 15:04:35 +0000
> Parag Khuraswar via samba <samba at lists.samba.org> wrote:
> 
> > Hi,
> > 
> > I have configured OpenLdap server with Samba Domain Controller.
> > My problem is I cannot get any other users to logon in windows
> > client machine only the default administrator account can login.
> > Can anyone guide me how to authenticate ldap user in windows client
> > through samba DC.
> > 
> > Regards,
> > Parag
> > +91 8308806004
> > 
> 

I am a bit confused now, you say 'I have configured OpenLdap server
with Samba Domain Controller.' but you then produce a smb.conf that is
for an AD DC. The two are not compatible, you cannot use openldap with
a Samba AD DC. 

How did you provision your Samba AD DC ?

Rowland