| Daniel R. Meigs 2004-06-29, 5:50 pm |
| I am running Samba 3.0.2 as a PDC on a Fedora Core 1 machine using =
openldap
as the password backend. I think I've got all the openldap stuff =
working. I
can log in, ssh, etc. using ldap accounts.
When I try to join an XP machine to the domain, I get an error on the XP
machine that reads: The following error occurred attempting to join the
domain "TIMBERLINE": The user name could not be found.
When I check the logs, it is clear that the authentication succeeded and =
the
script to add a machine account completed successfully. So I can't =
figure
out what is causing the error.=20
Any help would be much appreciated!
Dan Meigs
--------
My smb.conf file is as follows:
#=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =
Global Settings =3D=3D=3D=3D=3D=3D=3D=3D=3D
[global]
log level =3D 3
workgroup =3D TIMBERLINE
netbios name =3D RAINIER
security =3D user
encrypt passwords =3D yes
username map =3D /etc/samba/smbusers
add user script =3D /usr/local/sbin/smbldap-useradd.pl -a -m '%u'
delete user script =3D /usr/local/sbin/smbldap-userdel.pl '%u'
add group script =3D /usr/local/sbin/smbldap-groupadd.pl -p '%g'
delete group script =3D /usr/local/sbin/smbldap-groupdel.pl '%g'
add user to group script =3D /usr/local/sbin/smbldap-groupmod.pl -m =
'%g'
'%u'
delete user from group script =3D /usr/local/sbin/smbldap-groupmod.pl =
-x
'%g' '%u'
set primary group script =3D /usr/local/sbin/smbldap-usermod.pl -g =
'%g'
'%u'
add machine script =3D /usr/local/sbin/smbldap-useradd.pl -w '%m'
ldap admin dn =3D "cn=3DManager,dc=3Dtlinenm,dc=3Dcom"
ldap ssl =3D start tls
passdb backend =3D ldapsam:ldap://rainier.tlinenm.com
ldap delete dn =3D no
ldap user suffix =3D ou=3DPeople
ldap group suffix =3D ou=3DGroups
ldap machine suffix =3D ou=3DComputers
ldap suffix =3D dc=3Dtlinenm,dc=3Dcom
ldap filter =3D (& (uid=3D%u)(objectclass=3DsambaSamAccount
))
server string =3D Samba Server on Rainier
hosts allow =3D 192.168.0. 127.
printcap name =3D cups
printing =3D cups
log file =3D /var/log/samba/%m.log
max log size =3D 500
socket options =3D TCP_NODELAY SO_RCVBUF=3D8192 SO_SNDBUF=3D8192
os level =3D 35
domain master =3D yes=20
preferred master =3D yes
domain logons =3D yes
wins support =3D yes
dns proxy =3D yes=20
#=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D Share Definitions =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
3D
[homes]
comment =3D Home Directories
browseable =3D no
writable =3D yes
[netlogon]
comment =3D Network Logon Service
path =3D /home/netlogon
guest ok =3D yes
writable =3D no
share modes =3D no
[Profiles]
path =3D /home/profiles
browseable =3D no
guest ok =3D yes
[printers]
comment =3D All Printers
path =3D /var/spool/samba
browseable =3D no
guest ok =3D no
writable =3D no
printable =3D yes
[tmp]
comment =3D Temporary file space
path =3D /tmp
read only =3D no
public =3D yes
---------
The smb log file is as follows (log level 2):
[2004/06/29 12:35:07, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
init_sam_from_ldap: Entry found for user: root
[2004/06/29 12:35:07, 2] passdb/pdb_ldap.c:init_group_from_ldap(1697)
init_group_from_ldap: Entry found for group: 512
[2004/06/29 12:35:07, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [Administrator] -> =
[root] ->
[root] succeeded
[2004/06/29 12:35:07, 2] lib/access.c:check_access(324)
Allowed connection from (192.168.0.98)
[2004/06/29 12:35:08, 2] smbd/server.c:exit_server(558)
Closing connections
[2004/06/29 12:35:09, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
init_sam_from_ldap: Entry found for user: root
[2004/06/29 12:35:09, 2] passdb/pdb_ldap.c:init_group_from_ldap(1697)
init_group_from_ldap: Entry found for group: 512
[2004/06/29 12:35:09, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [Administrator] -> =
[root] ->
[root] succeeded
[2004/06/29 12:35:09, 2] lib/access.c:check_access(324)
Allowed connection from (192.168.0.98)
[2004/06/29 12:35:09, 2] =
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461)
Returning domain sid for domain TIMBERLINE ->
S-1-5-21-1936347354-1918943746-3536452940
[2004/06/29 12:35:10, 2] smbd/server.c:exit_server(558)
Closing connections
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
|