[Fedora-directory-users] FDS + Samba + IdealX

[Alan Ferrier]

Hi guys,

I'm attempting to integrate FDS + the IdealX scripts to handle User, 
Group and Computer Management. It's all going reasonably well - I can 
authenticate against the Samba Domain and do most admin type tasks. I'm 
having an issue when attempting to add a Computer to the Domain, 
however. It's blowing chunks with an "Insufficient 'write' privilege" 
error. Log snippet below.

Running "/usr/sbin/smbldap-useradd -w marisa$" from the command line 
works fine.

I've tried adding an ACI for the admin user for 
"sambadomainname=bridges,dc=digitalbridges,dc=sys" but this doesn't 
appear to change anything.

Any hints greatly appreciated!

Alan

[2006/08/09 11:12:57, 2] smbd/sesssetup.c:setup_new_vc_session(772)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2006/08/09 11:12:57, 2] smbd/sesssetup.c:setup_new_vc_session(772)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2006/08/09 11:12:57, 2] lib/smbldap.c:smbldap_open_connection(722)
  smbldap_open_connection: connection opened
[2006/08/09 11:12:57, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
  init_sam_from_ldap: Entry found for user: alan.ferrier
[2006/08/09 11:12:57, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
  init_group_from_ldap: Entry found for group: 513
[2006/08/09 11:12:57, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
  init_group_from_ldap: Entry found for group: 1002
[2006/08/09 11:12:57, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
  init_group_from_ldap: Entry found for group: 1003
[2006/08/09 11:12:57, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
  init_group_from_ldap: Entry found for group: 1025
[2006/08/09 11:12:57, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [alan.ferrier] -> 
[alan.ferrier] -> [alan.ferrier] succeeded
[2006/08/09 11:12:57, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2670)
  Returning domain sid for domain BRIDGES -> 
S-1-5-21-683103908-991045669-825688854
[2006/08/09 11:12:57, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2670)
  Returning domain sid for domain BRIDGES -> 
S-1-5-21-683103908-991045669-825688854
Error: Insufficient 'write' privilege to the 'uidNumber' attribute of 
entry 'sambadomainname=bridges,dc=digitalbridges,dc=sys'.
[2006/08/09 11:12:58, 0] rpc_server/srv_samr_nt.c:_samr_create_user(2415)
  _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w 
marisa$' gave 1
[2006/08/09 11:12:59, 2] smbd/server.c:exit_server(614)
  Closing connections