<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>[2011/09/28 11:23:13, 2] lib/smbldap.c:smbldap_open_connection(786)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'> smbldap_open_connection: connection opened<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>[2011/09/28 11:23:13, 10] lib/smbldap.c:smbldap_connect_system(951)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'> ldap_connect_system: Binding to ldap server ldaps://adm301.stag.cle.us as "cn=Directory Manager"<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>[2011/09/28 11:23:13, 2] lib/smbldap.c:smbldap_connect_system(982)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'> failed to bind to server ldaps://”FQDN of server”.stag.cle.us with dn="cn=Directory Manager" Error: Can't contact LDAP server<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'> (unknown)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>And yes I can resolve the hostname which I have sanitized.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Thanks for the tip, but that doesn’t seem to help, still have same result. This was just working on another machine but I had to put that one back to the way it was, and must have missed something. Any more thoughts?<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> 389-users-bounces@lists.fedoraproject.org [mailto:389-users-bounces@lists.fedoraproject.org] <b>On Behalf Of </b>Angel Bosch Mora<br><b>Sent:</b> Wednesday, September 28, 2011 3:39 AM<br><b>To:</b> General discussion list for the 389 Directory server project.<br><b>Subject:</b> Re: [389-users] Problem with samba and 389 Directory server with LDAPS<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='color:black'>you have to use FQDN when connecting securely. and you have to use the exact name used in the certificate.<o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='color:black'><hr size=2 width="100%" align=center></span></div><blockquote style='border:none;border-left:solid #1010FF 1.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><span style='color:black'>I am getting the following message in the /var/log/samba/smbd.log file when I start up samba and try to connect as a user.<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>[2011/09/27 14:23:33, 1] lib/smbldap.c:another_ldap_try(1153)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> Connection to LDAP server failed for the 15 try!<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>[2011/09/27 14:23:34, 10] lib/smbldap.c:smb_ldap_setup_conn(630)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> smb_ldap_setup_connection: ldaps://192.168.3.79<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>[2011/09/27 14:23:34, 2] lib/smbldap.c:smbldap_open_connection(786)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> smbldap_open_connection: connection opened<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>[2011/09/27 14:23:34, 10] lib/smbldap.c:smbldap_connect_system(951)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap_connect_system: Binding to ldap server ldaps://192.168.x.x as "cn=directory manager,dc=stag,dc=cle,dc=us"<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>[2011/09/27 14:23:34, 2] lib/smbldap.c:smbldap_connect_system(982)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> failed to bind to server ldaps://192.168.x.x with dn="cn=directory manager,dc=stag,dc=cle,dc=us" Error: Can't contact LDAP server<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> (unknown)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Relevant part of the smb.conf<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> passdb backend = ldapsam:ldaps://192.168.x.x<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap suffix = dc=stag,dc=cle,dc=us<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap machine suffix = ou=people<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap user suffix = ou=people<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap group suffix = ou=groups<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap passwd sync = yes<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> ldap admin dn = cn=directory manager,dc=stag,dc=cle,dc=us<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> obey pam restrictions = yes<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>I was able to run smbpasswd –w to add the dn admin password to the secrets.tdb but am unable to add additional users as well, again getting a cannot contact ldap server message. I had this working on another machine, but that machine was needed for another purpose and lost the setup. I know I must be missing something simple and am checking the HOWTO for samba on the 389-Directory Server site.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:black'>David Hoskinson | </span><b><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'>DATATRAK</span></b><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'> International</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:black'><br>Systems Engineer<br>Mayfield Heights, Ohio, USA <br>+1.440.443.0082 x 124 (p) | +1.216.280.5457 (m)<br><a href="mailto:david.hoskinson@datatrak.net" target="_blank" title="blocked::mailto:anna.lyatkher@datatrak.net">david.hoskinson@datatrak.net</a> | <a href="http://www.datatrak.net/" target="_blank" title="blocked::http://www.datatrak.net/ http://www.datatrak.net/">www.datatrak.net</a></span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:black'><br>--<br>389 users mailing list<br>389-users@lists.fedoraproject.org<br>https://admin.fedoraproject.org/mailman/listinfo/389-users<o:p></o:p></span></p></blockquote><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:black'><o:p> </o:p></span></p></div></div></body></html>