[Fedora-directory-users] Samba and FDS 7.1 on Fedora Core 4 Error

[Leonardo Pugliesi]

Hi Everyone
I have installed FSD and console seems working fine:
I can log, adding entries, etc.
Following the Samba-Howto (http://people.redhat.com/astokes/samba_rhds.pdf)
I encountered problems with net groupmap command:
____________________________________________________________________________
 [root@fedorac4 setup]# net groupmap add rid=512 ntgroup="Domain Admins" 
unixgroup="Domain Admins" --debuglevel=10
[2005/07/19 12:09:44, 5] lib/debug.c:debug_dump_status(366)
  INFO: Current debug levels:
    all: True/10
    tdb: False/0
    printdrivers: False/0
    lanman: False/0
    smb: False/0
    rpc_parse: False/0
    rpc_srv: False/0
    rpc_cli: False/0
    passdb: False/0
    sam: False/0
    auth: False/0
    winbind: False/0
    vfs: False/0
    idmap: False/0
    quota: False/0
    acls: False/0
[2005/07/19 12:09:44, 3] param/loadparm.c:lp_load(3916)
  lp_load: refreshing parameters
[2005/07/19 12:09:44, 3] param/loadparm.c:init_globals(1321)
  Initialising global parameters
[2005/07/19 12:09:44, 3] param/params.c:pm_process(573)
  params.c:pm_process() - Processing configuration file 
"/etc/samba/smb.conf"
[2005/07/19 12:09:44, 3] param/loadparm.c:do_section(3418)
  Processing section "[global]"
  doing parameter workgroup = FEDORAC4
  doing parameter username map = /etc/samba/smbusers
  doing parameter enable privileges = yes
  doing parameter server string = Samba Server %v
  doing parameter security = user
  doing parameter encrypt passwords = Yes
  doing parameter min passwd length = 3
[2005/07/19 12:09:44, 1] param/loadparm.c:lp_do_parameter(3159)
  WARNING: The "min passwd length" option is deprecated
  doing parameter obey pam restrictions = No
  doing parameter ldap passwd sync = Yes
  doing parameter passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
  doing parameter ldap passwd sync = Yes
  doing parameter log level = 0
  doing parameter syslog = 0
  doing parameter log file = /var/log/samba/log.%m
  doing parameter max log size = 100000
  doing parameter time server = Yes
  doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  doing parameter mangling method = hash2
  doing parameter Dos charset = 850
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS-2LE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS-2LE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-16LE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-16LE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS-2BE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS-2BE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-16BE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-16BE
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF8
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF8
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-8
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-8
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset ASCII
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset ASCII
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset 646
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset 646
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset ISO-8859-1
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset ISO-8859-1
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS2-HEX
[2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS2-HEX
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
  doing parameter Unix charset = ISO8859-1
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
  doing parameter logon script = logon.bat
  doing parameter logon drive = H:
  doing parameter logon home =
  doing parameter logon path =
  doing parameter domain logons = Yes
  doing parameter os level = 65
  doing parameter preferred master = Yes
  doing parameter domain master = Yes
  doing parameter wins support = Yes
  doing parameter passdb backend = ldapsam:ldap://fedorac4.localdomain
  doing parameter ldap admin dn = cn=Directory Manager
  doing parameter ldap suffix = dc=localdomain
  doing parameter ldap group suffix = ou=Groups
  doing parameter ldap user suffix = ou=People
  doing parameter ldap machine suffix = ou=Computers
  doing parameter ldap idmap suffix = ou=Users
  doing parameter add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
  doing parameter ldap delete dn = Yes
  doing parameter add machine script = /opt/IDEALX/sbin/smbldap-useradd 
-w "%u"
  doing parameter add group script = /opt/IDEALX/sbin/smbldap-groupadd 
-p "%g"
  doing parameter add user to group script = 
/opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"
  doing parameter delete user from group script = 
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
  doing parameter set primary group script = 
/opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"
  doing parameter printer admin = @"Print Operators"
  doing parameter load printers = Yes
  doing parameter create mask = 0640
  doing parameter directory mask = 0750
  doing parameter nt acl support = No
  doing parameter printing = cups
  doing parameter printcap name = cups
  doing parameter deadtime = 10
  doing parameter guest account = nobody
  doing parameter map to guest = Bad User
  doing parameter dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
  doing parameter show add printer wizard = yes
  doing parameter preserve case = yes
  doing parameter short preserve case = yes
  doing parameter case sensitive = no
[2005/07/19 12:09:44, 4] param/loadparm.c:lp_load(3947)
  pm_process() returned Yes
[2005/07/19 12:09:44, 7] param/loadparm.c:lp_servicenumber(4057)
  lp_servicenumber: couldn't find homes
[2005/07/19 12:09:44, 10] param/loadparm.c:set_server_role(3865)
  set_server_role: role = ROLE_DOMAIN_PDC
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
  Substituting charset 'UTF-8' for LOCALE
[2005/07/19 12:09:44, 5] lib/util.c:init_names(278)
  Netbios name list:-
  my_netbios_names[0]="FEDORAC4"
[2005/07/19 12:09:44, 2] lib/interface.c:add_interface(81)
  added interface ip=10.0.0.162 bcast=10.255.255.255 nmask=255.0.0.0
[2005/07/19 12:09:44, 10] intl/lang_tdb.c:lang_tdb_init(135)
  lang_tdb_init: /usr/lib/samba/it_IT.UTF-8.msg: No such file or directory
Can't lookup UNIX group Domain Admins
[2005/07/19 12:09:44, 2] utils/net.c:main(897)
  return code = -1
_________________________________________________________________________________

This is the global section of smb.conf I use:
[global]
        workgroup = FEDORAC4
        username map = /etc/samba/smbusers
        enable privileges = yes
        server string = Samba Server %v
        security = user
        encrypt passwords = Yes
        min passwd length = 3
        obey pam restrictions = No
        ldap passwd sync = Yes
        passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
        ldap passwd sync = Yes
        log level = 0
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 100000
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        mangling method = hash2
        Dos charset = 850
        Unix charset = ISO8859-1
        logon script = logon.bat
        logon drive = H:
        logon home =
        logon path =
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        passdb backend = ldapsam:ldap://fedorac4.localdomain
        ldap admin dn = cn=Directory Manager
        ldap suffix = dc=localdomain
        ldap group suffix = ou=Groups
        ldap user suffix = ou=People
        ldap machine suffix = ou=Computers
        ldap idmap suffix = ou=Users
        add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
        ldap delete dn = Yes
        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m 
"%u" "%g"
        delete user from group script = 
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g 
"%g" "%u"
        printer admin = @"Print Operators"
        load printers = Yes
        create mask = 0640
        directory mask = 0750
        nt acl support = No
        printing = cups
        printcap name = cups
        deadtime = 10
        guest account = nobody
        map to guest = Bad User
        dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
        show add printer wizard = yes
        preserve case = yes
        short preserve case = yes
        case sensitive = no
___________________________________________________________________________________

The problem seems to be Samba...
Any idea?
regards
Leon


_ <http://people.redhat.com/astokes/samba_rhds.pdf>_

[Adam Stokes]

On Tue, 2005-07-19 at 12:35 +0200, Leonardo Pugliesi wrote:
>  Hi Everyone
>  I have installed FSD and console seems working fine:
>  I can log, adding entries, etc.
>  Following the Samba-Howto (http://people.redhat.com/astokes/samba_rhds.pdf)
>  I encountered problems with net groupmap command:
>  ____________________________________________________________________________
>   [root@fedorac4 setup]# net groupmap add rid=512 ntgroup="Domain Admins" 
>  unixgroup="Domain Admins" --debuglevel=10
>  [2005/07/19 12:09:44, 5] lib/debug.c:debug_dump_status(366)
>    INFO: Current debug levels:
>      all: True/10
>      tdb: False/0
>      printdrivers: False/0
>      lanman: False/0
>      smb: False/0
>      rpc_parse: False/0
>      rpc_srv: False/0
>      rpc_cli: False/0
>      passdb: False/0
>      sam: False/0
>      auth: False/0
>      winbind: False/0
>      vfs: False/0
>      idmap: False/0
>      quota: False/0
>      acls: False/0
>  [2005/07/19 12:09:44, 3] param/loadparm.c:lp_load(3916)
>    lp_load: refreshing parameters
>  [2005/07/19 12:09:44, 3] param/loadparm.c:init_globals(1321)
>    Initialising global parameters
>  [2005/07/19 12:09:44, 3] param/params.c:pm_process(573)
>    params.c:pm_process() - Processing configuration file 
>  "/etc/samba/smb.conf"
>  [2005/07/19 12:09:44, 3] param/loadparm.c:do_section(3418)
>    Processing section "[global]"
>    doing parameter workgroup = FEDORAC4
>    doing parameter username map = /etc/samba/smbusers
>    doing parameter enable privileges = yes
>    doing parameter server string = Samba Server %v
>    doing parameter security = user
>    doing parameter encrypt passwords = Yes
>    doing parameter min passwd length = 3
>  [2005/07/19 12:09:44, 1] param/loadparm.c:lp_do_parameter(3159)
>    WARNING: The "min passwd length" option is deprecated
>    doing parameter obey pam restrictions = No
>    doing parameter ldap passwd sync = Yes
>    doing parameter passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
>    doing parameter ldap passwd sync = Yes
>    doing parameter log level = 0
>    doing parameter syslog = 0
>    doing parameter log file = /var/log/samba/log.%m
>    doing parameter max log size = 100000
>    doing parameter time server = Yes
>    doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>    doing parameter mangling method = hash2
>    doing parameter Dos charset = 850
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UCS-2LE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UCS-2LE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UTF-16LE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UTF-16LE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UCS-2BE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UCS-2BE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UTF-16BE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UTF-16BE
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UTF8
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UTF8
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UTF-8
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UTF-8
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset ASCII
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset ASCII
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset 646
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset 646
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset ISO-8859-1
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset ISO-8859-1
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(103)
>    Attempting to register new charset UCS2-HEX
>  [2005/07/19 12:09:44, 5] lib/iconv.c:smb_register_charset(111)
>    Registered charset UCS2-HEX
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>    doing parameter Unix charset = ISO8859-1
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>    doing parameter logon script = logon.bat
>    doing parameter logon drive = H:
>    doing parameter logon home =
>    doing parameter logon path =
>    doing parameter domain logons = Yes
>    doing parameter os level = 65
>    doing parameter preferred master = Yes
>    doing parameter domain master = Yes
>    doing parameter wins support = Yes
>    doing parameter passdb backend = ldapsam:ldap://fedorac4.localdomain
>    doing parameter ldap admin dn = cn=Directory Manager
>    doing parameter ldap suffix = dc=localdomain
>    doing parameter ldap group suffix = ou=Groups
>    doing parameter ldap user suffix = ou=People
>    doing parameter ldap machine suffix = ou=Computers
>    doing parameter ldap idmap suffix = ou=Users
>    doing parameter add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
>    doing parameter ldap delete dn = Yes
>    doing parameter add machine script = /opt/IDEALX/sbin/smbldap-useradd 
>  -w "%u"
>    doing parameter add group script = /opt/IDEALX/sbin/smbldap-groupadd 
>  -p "%g"
>    doing parameter add user to group script = 
>  /opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"
>    doing parameter delete user from group script = 
>  /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
>    doing parameter set primary group script = 
>  /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"
>    doing parameter printer admin = @"Print Operators"
>    doing parameter load printers = Yes
>    doing parameter create mask = 0640
>    doing parameter directory mask = 0750
>    doing parameter nt acl support = No
>    doing parameter printing = cups
>    doing parameter printcap name = cups
>    doing parameter deadtime = 10
>    doing parameter guest account = nobody
>    doing parameter map to guest = Bad User
>    doing parameter dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
>    doing parameter show add printer wizard = yes
>    doing parameter preserve case = yes
>    doing parameter short preserve case = yes
>    doing parameter case sensitive = no
>  [2005/07/19 12:09:44, 4] param/loadparm.c:lp_load(3947)
>    pm_process() returned Yes
>  [2005/07/19 12:09:44, 7] param/loadparm.c:lp_servicenumber(4057)
>    lp_servicenumber: couldn't find homes
>  [2005/07/19 12:09:44, 10] param/loadparm.c:set_server_role(3865)
>    set_server_role: role = ROLE_DOMAIN_PDC
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/charcnv.c:charset_name(81)
>    Substituting charset 'UTF-8' for LOCALE
>  [2005/07/19 12:09:44, 5] lib/util.c:init_names(278)
>    Netbios name list:-
>    my_netbios_names[0]="FEDORAC4"
>  [2005/07/19 12:09:44, 2] lib/interface.c:add_interface(81)
>    added interface ip=10.0.0.162 bcast=10.255.255.255 nmask=255.0.0.0
>  [2005/07/19 12:09:44, 10] intl/lang_tdb.c:lang_tdb_init(135)
>    lang_tdb_init: /usr/lib/samba/it_IT.UTF-8.msg: No such file or directory
>  Can't lookup UNIX group Domain Admins
>  [2005/07/19 12:09:44, 2] utils/net.c:main(897)
>    return code = -1
>  _________________________________________________________________________________
>  
>  This is the global section of smb.conf I use:
>  [global]
>          workgroup = FEDORAC4
>          username map = /etc/samba/smbusers
>          enable privileges = yes
>          server string = Samba Server %v
>          security = user
>          encrypt passwords = Yes
>          min passwd length = 3
>          obey pam restrictions = No
>          ldap passwd sync = Yes
>          passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
>          ldap passwd sync = Yes
>          log level = 0
>          syslog = 0
>          log file = /var/log/samba/log.%m
>          max log size = 100000
>          time server = Yes
>          socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>          mangling method = hash2
>          Dos charset = 850
>          Unix charset = ISO8859-1
>          logon script = logon.bat
>          logon drive = H:
>          logon home =
>          logon path =
>          domain logons = Yes
>          os level = 65
>          preferred master = Yes
>          domain master = Yes
>          wins support = Yes
>          passdb backend = ldapsam:ldap://fedorac4.localdomain
>          ldap admin dn = cn=Directory Manager
>          ldap suffix = dc=localdomain
>          ldap group suffix = ou=Groups
>          ldap user suffix = ou=People
>          ldap machine suffix = ou=Computers
>          ldap idmap suffix = ou=Users
>          add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
>          ldap delete dn = Yes
>          add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
>          add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
>          add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m 
>  "%u" "%g"
>          delete user from group script = 
>  /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
>          set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g 
>  "%g" "%u"
>          printer admin = @"Print Operators"
>          load printers = Yes
>          create mask = 0640
>          directory mask = 0750
>          nt acl support = No
>          printing = cups
>          printcap name = cups
>          deadtime = 10
>          guest account = nobody
>          map to guest = Bad User
>          dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
>          show add printer wizard = yes
>          preserve case = yes
>          short preserve case = yes
>          case sensitive = no
>  ___________________________________________________________________________________
>  
>  The problem seems to be Samba...
>  Any idea?
>  regards
>  Leon
>  
>  
>  _ <http://people.redhat.com/astokes/samba_rhds.pdf>_
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
First thing, follow the article at
http://directory.fedora.redhat.com/wiki/Howto:Samba I tend to keep that
one closely updated as I find problems.

For this issue what is the output of :

ldapsearch -x -Z '(cn=Domain*)'

Thanks,
Adam

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> First thing, follow the article at
> http://directory.fedora.redhat.com/wiki/Howto:Samba I tend to keep that
> one closely updated as I find problems.
>
> For this issue what is the output of :
>
> ldapsearch -x -Z '(cn=Domain*)'
>   
>  
Ok, I have read everything (html and pdf version)

ldapsearch result:

[root@fedorac4 fedora-ds]# ldapsearch -x -Z '(cn=Domain*)'
ldap_start_tls: Protocol error (2)
        additional info: unsupported extended operation
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: (cn=Domain*)
# requesting: ALL
#

# Domain Admins, Groups, localdomain
dn: cn=Domain Admins,ou=Groups,dc=localdomain
objectClass: posixGroup
objectClass: top
cn: Domain Admins
gidNumber: 2512

# Domain Users, Groups, localdomain
dn: cn=Domain Users,ou=Groups,dc=localdomain
objectClass: posixGroup
objectClass: top
cn: Domain Users
gidNumber: 2513

# Domain Guests, Groups, localdomain
dn: cn=Domain Guests,ou=Groups,dc=localdomain
objectClass: posixGroup
objectClass: top
cn: Domain Guests
gidNumber: 2514

# Domain Computers, Groups, localdomain
dn: cn=Domain Computers,ou=Groups,dc=localdomain
objectClass: posixGroup
objectClass: top
cn: Domain Computers
gidNumber: 2515

# search result
search: 3
result: 0 Success

# numResponses: 5
# numEntries: 4

tsl_error is not important, I think
Leon

[Adam Stokes]

On Tue, 2005-07-19 at 15:31 +0200, Leonardo Pugliesi wrote:
>  Adam Stokes ha scritto:
>  
>  >First thing, follow the article at
>  >http://directory.fedora.redhat.com/wiki/Howto:Samba I tend to keep that
>  >one closely updated as I find problems.
>  >
>  >For this issue what is the output of :
>  >
>  >ldapsearch -x -Z '(cn=Domain*)'
>  >  
>  >
>  
>  Ok, I have read everything (html and pdf version)
>  
>  ldapsearch result:
>  
>  [root@fedorac4 fedora-ds]# ldapsearch -x -Z '(cn=Domain*)'
>  ldap_start_tls: Protocol error (2)
>          additional info: unsupported extended operation
>  # extended LDIF
>  #
>  # LDAPv3
>  # base <> with scope sub
>  # filter: (cn=Domain*)
>  # requesting: ALL
>  #
>  
>  # Domain Admins, Groups, localdomain
>  dn: cn=Domain Admins,ou=Groups,dc=localdomain
>  objectClass: posixGroup
>  objectClass: top
>  cn: Domain Admins
>  gidNumber: 2512
>  
>  # Domain Users, Groups, localdomain
>  dn: cn=Domain Users,ou=Groups,dc=localdomain
>  objectClass: posixGroup
>  objectClass: top
>  cn: Domain Users
>  gidNumber: 2513
>  
>  # Domain Guests, Groups, localdomain
>  dn: cn=Domain Guests,ou=Groups,dc=localdomain
>  objectClass: posixGroup
>  objectClass: top
>  cn: Domain Guests
>  gidNumber: 2514
>  
>  # Domain Computers, Groups, localdomain
>  dn: cn=Domain Computers,ou=Groups,dc=localdomain
>  objectClass: posixGroup
>  objectClass: top
>  cn: Domain Computers
>  gidNumber: 2515
>  
>  # search result
>  search: 3
>  result: 0 Success
>  
>  # numResponses: 5
>  # numEntries: 4
>  
>  tsl_error is not important, I think
>  Leon
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
Ok I know what the problem is, its my fault :( when I was testing this I
always run the following :

getent group

This should display
Domain Admins:x:2512:
Domain Users:x:2513:
Domain Guests:x:2514:
Domain Computers:x:2515:

So, if that doesn't display those groups after adding them to the ldap
server run the following (on fedora)

authconfig

Configure user information to use LDAP, this will configure PAM
correctly and then you should be able to proceed.

Ill get that added right away

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> Ok I know what the problem is, its my fault :( when I was testing this
> I
> always run the following :
>
> getent group
>
> This should display
> Domain Admins:x:2512:
> Domain Users:x:2513:
> Domain Guests:x:2514:
> Domain Computers:x:2515:
>
> So, if that doesn't display those groups after adding them to the ldap
> server run the following (on fedora)
>
> authconfig
>
> Configure user information to use LDAP, this will configure PAM
> correctly and then you should be able to proceed.
>
> Ill get that added right away
>
>   
>  
OK, now working...
net groupmapping result:
Successfully added group Domain Admins to the mapping db
thanks a lot
Leon

[Leonardo Pugliesi]

Leonardo Pugliesi ha scritto:

>  Adam Stokes ha scritto:
>
> > Ok I know what the problem is, its my fault :( when I was testing this I
> > always run the following :
> >
> > getent group
> >
> > This should display
> > Domain Admins:x:2512:
> > Domain Users:x:2513:
> > Domain Guests:x:2514:
> > Domain Computers:x:2515:
> >
> > So, if that doesn't display those groups after adding them to the ldap
> > server run the following (on fedora)
> >
> > authconfig
> >
> > Configure user information to use LDAP, this will configure PAM
> > correctly and then you should be able to proceed.
> >
> > Ill get that added right away
> >
> >  
> >
>  OK, now working...
>  net groupmapping result:
>  Successfully added group Domain Admins to the mapping db
>  thanks a lot
>  Leon
>
>  -- 
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
i managed to execute net groupmap add etc., but i have problems in the 
next step of how-to:
i added the entry of "Administrator" as shown in the how-to but on
smbpasswd -a Administrator i get the following error:
________________________________________________
[root@fedorac4 ~]# smbpasswd -a Administrator
New SMB password:
Retype new SMB password:
ldapsam_modify_entry: Failed to add user dn= 
uid=Administrator,ou=People,dc=localdomain with: Already exists

ldapsam_add_sam_account: failed to modify/add user with uid = 
Administrator (dn = uid=Administrator,ou=People,dc=localdomain)
Failed to add entry for user Administrator.
Failed to modify password entry for user Administrator
[root@fedorac4 ~]#
________________________________________________

the ldapsearch -x -Z shows the entry in this way:
_____________________________________

# Administrator, People, localdomain
dn: uid=Administrator,ou=People,dc=localdomain
uid: Administrator
cn: Samba Admin
givenName: Samba
sn: Admin
mail: Administrator@localdomain
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
loginShell: /bin/bash
uidNumber: 0
gidNumber: 0
homeDirectory: /root
gecos: Samba Admin

# search result
search: 3
result: 0 Success

# numResponses: 16
# numEntries: 15
[root@fedorac4 ~]#
_____________________________________

some hints?

thank you
Leon

[Adam Stokes]

On Wed, 2005-07-20 at 16:32 +0200, Leonardo Pugliesi wrote:
>  Leonardo Pugliesi ha scritto:
>  
>  > Adam Stokes ha scritto:
>  >
>  >> Ok I know what the problem is, its my fault :( when I was testing this I
>  >> always run the following :
>  >>
>  >> getent group
>  >>
>  >> This should display
>  >> Domain Admins:x:2512:
>  >> Domain Users:x:2513:
>  >> Domain Guests:x:2514:
>  >> Domain Computers:x:2515:
>  >>
>  >> So, if that doesn't display those groups after adding them to the ldap
>  >> server run the following (on fedora)
>  >>
>  >> authconfig
>  >>
>  >> Configure user information to use LDAP, this will configure PAM
>  >> correctly and then you should be able to proceed.
>  >>
>  >> Ill get that added right away
>  >>
>  >>  
>  >>
>  > OK, now working...
>  > net groupmapping result:
>  > Successfully added group Domain Admins to the mapping db
>  > thanks a lot
>  > Leon
>  >
>  > -- 
>  > Fedora-directory-users mailing list
>  > Fedora-directory-users(a)redhat.com
>  > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >
>  i managed to execute net groupmap add etc., but i have problems in the 
>  next step of how-to:
>  i added the entry of "Administrator" as shown in the how-to but on
>  smbpasswd -a Administrator i get the following error:
>  ________________________________________________
>  [root@fedorac4 ~]# smbpasswd -a Administrator
>  New SMB password:
>  Retype new SMB password:
>  ldapsam_modify_entry: Failed to add user dn= 
>  uid=Administrator,ou=People,dc=localdomain with: Already exists
>  
>  ldapsam_add_sam_account: failed to modify/add user with uid = 
>  Administrator (dn = uid=Administrator,ou=People,dc=localdomain)
>  Failed to add entry for user Administrator.
>  Failed to modify password entry for user Administrator
>  [root@fedorac4 ~]#
>  ________________________________________________
>  
>  the ldapsearch -x -Z shows the entry in this way:
>  _____________________________________
>  
>  # Administrator, People, localdomain
>  dn: uid=Administrator,ou=People,dc=localdomain
>  uid: Administrator
>  cn: Samba Admin
>  givenName: Samba
>  sn: Admin
>  mail: Administrator@localdomain
>  objectClass: person
>  objectClass: organizationalPerson
>  objectClass: inetOrgPerson
>  objectClass: posixAccount
>  objectClass: top
>  loginShell: /bin/bash
>  uidNumber: 0
>  gidNumber: 0
>  homeDirectory: /root
>  gecos: Samba Admin
>  
>  # search result
>  search: 3
>  result: 0 Success
>  
>  # numResponses: 16
>  # numEntries: 15
>  [root@fedorac4 ~]#
>  _____________________________________
>  
>  some hints?
>  
>  thank you
>  Leon
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
Leon,

I think since you have an administrator account set already, do

smbpasswd Adminsitrator

the '-a' switch tells samba to add that user without it will just change
the password and add the appropriate entries to directory server

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> On Wed, 2005-07-20 at 16:32 +0200, Leonardo Pugliesi wrote:
>   
>
> >Leonardo Pugliesi ha scritto:
> >
> >    
> >
> >>Adam Stokes ha scritto:
> >>
> >>      
> >>
> >>>Ok I know what the problem is, its my fault :( when I was testing this I
> >>>always run the following :
> >>>
> >>>getent group
> >>>
> >>>This should display
> >>>Domain Admins:x:2512:
> >>>Domain Users:x:2513:
> >>>Domain Guests:x:2514:
> >>>Domain Computers:x:2515:
> >>>
> >>>So, if that doesn't display those groups after adding them to the ldap
> >>>server run the following (on fedora)
> >>>
> >>>authconfig
> >>>
> >>>Configure user information to use LDAP, this will configure PAM
> >>>correctly and then you should be able to proceed.
> >>>
> >>>Ill get that added right away
> >>>
> >>> 
> >>>
> >>>        
> >>>
> >>OK, now working...
> >>net groupmapping result:
> >>Successfully added group Domain Admins to the mapping db
> >>thanks a lot
> >>Leon
> >>
> >>-- 
> >>Fedora-directory-users mailing list
> >>Fedora-directory-users(a)redhat.com
> >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> >>      
> >>
> >i managed to execute net groupmap add etc., but i have problems in the 
> >next step of how-to:
> >i added the entry of "Administrator" as shown in the how-to but on
> >smbpasswd -a Administrator i get the following error:
> >________________________________________________
> >[root@fedorac4 ~]# smbpasswd -a Administrator
> >New SMB password:
> >Retype new SMB password:
> >ldapsam_modify_entry: Failed to add user dn= 
> >uid=Administrator,ou=People,dc=localdomain with: Already exists
> >
> >ldapsam_add_sam_account: failed to modify/add user with uid = 
> >Administrator (dn = uid=Administrator,ou=People,dc=localdomain)
> >Failed to add entry for user Administrator.
> >Failed to modify password entry for user Administrator
> >[root@fedorac4 ~]#
> >________________________________________________
> >
> >the ldapsearch -x -Z shows the entry in this way:
> >_____________________________________
> >
> ># Administrator, People, localdomain
> >dn: uid=Administrator,ou=People,dc=localdomain
> >uid: Administrator
> >cn: Samba Admin
> >givenName: Samba
> >sn: Admin
> >mail: Administrator@localdomain
> >objectClass: person
> >objectClass: organizationalPerson
> >objectClass: inetOrgPerson
> >objectClass: posixAccount
> >objectClass: top
> >loginShell: /bin/bash
> >uidNumber: 0
> >gidNumber: 0
> >homeDirectory: /root
> >gecos: Samba Admin
> >
> ># search result
> >search: 3
> >result: 0 Success
> >
> ># numResponses: 16
> ># numEntries: 15
> >[root@fedorac4 ~]#
> >_____________________________________
> >
> >some hints?
> >
> >thank you
> >Leon
> >
> >--
> >Fedora-directory-users mailing list
> >Fedora-directory-users(a)redhat.com
> >https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >    
> >
>
> Leon,
>
> I think since you have an administrator account set already, do
>
> smbpasswd Adminsitrator
>
> the '-a' switch tells samba to add that user without it will just change
> the password and add the appropriate entries to directory server
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>   
>  
if i use "smbpasswd Administrator" i get:
_______________________________
[root@fedorac4 ~]# smbpasswd Administrator
New SMB password:
Retype new SMB password:
Failed to find entry for user administrator.
Failed to modify password entry for user administrator
[root@fedorac4 ~]#
_______________________________
so it seems that i can't add Administrator because the entry alredy 
exists, but i can't modify it because it doesn't exists.....
am i missing something :-)

thanx

[Adam Stokes]

>  >Leon,
>  >
>  >I think since you have an administrator account set already, do
>  >
>  >smbpasswd Adminsitrator
>  >
>  >the '-a' switch tells samba to add that user without it will just change
>  >the password and add the appropriate entries to directory server
>  >
>  >--
>  >Fedora-directory-users mailing list
>  >Fedora-directory-users(a)redhat.com
>  >https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >
>  >  
>  >
>  if i use "smbpasswd Administrator" i get:
>  _______________________________
>  [root@fedorac4 ~]# smbpasswd Administrator
>  New SMB password:
>  Retype new SMB password:
>  Failed to find entry for user administrator.
>  Failed to modify password entry for user administrator
>  [root@fedorac4 ~]#
>  _______________________________
>  so it seems that i can't add Administrator because the entry alredy 
>  exists, but i can't modify it because it doesn't exists.....
>  am i missing something :-)
>  
>  thanx
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
What does your smb.conf look like? Also is there anything in the samba
logs?

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> >>Leon,
> >>
> >>I think since you have an administrator account set already, do
> >>
> >>smbpasswd Adminsitrator
> >>
> >>the '-a' switch tells samba to add that user without it will just change
> >>the password and add the appropriate entries to directory server
> >>
> >>--
> >>Fedora-directory-users mailing list
> >>Fedora-directory-users(a)redhat.com
> >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> >> 
> >>
> >>      
> >>
> >if i use "smbpasswd Administrator" i get:
> >_______________________________
> >[root@fedorac4 ~]# smbpasswd Administrator
> >New SMB password:
> >Retype new SMB password:
> >Failed to find entry for user administrator.
> >Failed to modify password entry for user administrator
> >[root@fedorac4 ~]#
> >_______________________________
> >so it seems that i can't add Administrator because the entry alredy 
> >exists, but i can't modify it because it doesn't exists.....
> >am i missing something :-)
> >
> >thanx
> >
> >--
> >Fedora-directory-users mailing list
> >Fedora-directory-users(a)redhat.com
> >https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >    
> >
>
> What does your smb.conf look like? Also is there anything in the samba
> logs?
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>   
>  
This is smb.conf (global section):

[global]
   workgroup = FEDORAC4
        username map = /etc/samba/smbusers
	enable privileges = yes
        server string = Samba Server %v
   	security = user
        encrypt passwords = Yes
        min passwd length = 3
        obey pam restrictions = No
        ldap passwd sync = Yes
        #unix password sync = Yes
        passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
        #passwd chat = "Changing password for*\nNew password*" %n\n
"*Retype new password*" %n\n"
        ldap passwd sync = Yes
        log level = 0
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 100000
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        mangling method = hash2
        Dos charset = 850
        Unix charset = ISO8859-1
        logon script = logon.bat
        logon drive = H:
        logon home =
        logon path =
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        passdb backend = ldapsam:ldap://fedorac4.localdomain
        #passdb backend = ldap:ldap://fedorac4.localdomain
        # passdb backend = ldapsam:"ldap://127.0.0.1/ ldap://slave.idealx.com"
	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
        ldap admin dn = cn=Directory Manager
        ldap suffix = dc=localdomain
        ldap group suffix = ou=Groups
        ldap user suffix = ou=People
        ldap machine suffix = ou=Computers
        ldap idmap suffix = ou=Users
        #ldap ssl = start tls
        add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
        ldap delete dn = Yes
        #delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g" 
        #delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u"
"%g"
        delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
"%u" "%g"
        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g"
"%u"


samba logs is empty
Leon

[Adam Stokes]

On Thu, 2005-07-21 at 10:36 +0200, Leonardo Pugliesi wrote:
>  Adam Stokes ha scritto:
>  
>  >>>Leon,
>  >>>
>  >>>I think since you have an administrator account set already, do
>  >>>
>  >>>smbpasswd Adminsitrator
>  >>>
>  >>>the '-a' switch tells samba to add that user without it will just
> change
>  >>>the password and add the appropriate entries to directory server
>  >>>
>  >>>--
>  >>>Fedora-directory-users mailing list
>  >>>Fedora-directory-users(a)redhat.com
>  >>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>
>  >>> 
>  >>>
>  >>>      
>  >>>
>  >>if i use "smbpasswd Administrator" i get:
>  >>_______________________________
>  >>[root@fedorac4 ~]# smbpasswd Administrator
>  >>New SMB password:
>  >>Retype new SMB password:
>  >>Failed to find entry for user administrator.
>  >>Failed to modify password entry for user administrator
>  >>[root@fedorac4 ~]#
>  >>_______________________________
>  >>so it seems that i can't add Administrator because the entry alredy 
>  >>exists, but i can't modify it because it doesn't exists.....
>  >>am i missing something :-)
>  >>
>  >>thanx
>  >>
>  >>--
>  >>Fedora-directory-users mailing list
>  >>Fedora-directory-users(a)redhat.com
>  >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>    
>  >>
>  >
>  >What does your smb.conf look like? Also is there anything in the samba
>  >logs?
>  >
>  >--
>  >Fedora-directory-users mailing list
>  >Fedora-directory-users(a)redhat.com
>  >https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >
>  >  
>  >
>  This is smb.conf (global section):
>  
>  [global]
>     workgroup = FEDORAC4
>          username map = /etc/samba/smbusers
>  	enable privileges = yes
>          server string = Samba Server %v
>     	security = user
>          encrypt passwords = Yes
>          min passwd length = 3
>          obey pam restrictions = No
>          ldap passwd sync = Yes
>          #unix password sync = Yes
>          passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
>          #passwd chat = "Changing password for*\nNew password*" %n\n
> "*Retype new password*" %n\n"
>          ldap passwd sync = Yes
>          log level = 0
>          syslog = 0
>          log file = /var/log/samba/log.%m
>          max log size = 100000
>          time server = Yes
>          socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>          mangling method = hash2
>          Dos charset = 850
>          Unix charset = ISO8859-1
>          logon script = logon.bat
>          logon drive = H:
>          logon home =
>          logon path =
>          domain logons = Yes
>          os level = 65
>          preferred master = Yes
>          domain master = Yes
>          wins support = Yes
>          passdb backend = ldapsam:ldap://fedorac4.localdomain
>          #passdb backend = ldap:ldap://fedorac4.localdomain
>          # passdb backend = ldapsam:"ldap://127.0.0.1/ ldap://slave.idealx.com"
>  	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
>          ldap admin dn = cn=Directory Manager
>          ldap suffix = dc=localdomain
>          ldap group suffix = ou=Groups
>          ldap user suffix = ou=People
>          ldap machine suffix = ou=Computers
>          ldap idmap suffix = ou=Users
>          #ldap ssl = start tls
>          add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
>          ldap delete dn = Yes
>          #delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
>          add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
>          add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g" 
>          #delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
>          add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u"
> "%g"
>          delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
> "%u" "%g"
>          set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g"
> "%u"
>  
>  
>  samba logs is empty
>  Leon
>  
>  
>  
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
Not sure at this point, looks like you are using idealx scripts for some
of the administration maybe they created the admin account?

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> On Thu, 2005-07-21 at 10:36 +0200, Leonardo Pugliesi wrote:
>   
>
> >Adam Stokes ha scritto:
> >
> >    
> >
> >>>>Leon,
> >>>>
> >>>>I think since you have an administrator account set already, do
> >>>>
> >>>>smbpasswd Adminsitrator
> >>>>
> >>>>the '-a' switch tells samba to add that user without it will just
> change
> >>>>the password and add the appropriate entries to directory server
> >>>>
> >>>>--
> >>>>Fedora-directory-users mailing list
> >>>>Fedora-directory-users(a)redhat.com
> >>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>
> >>>>
> >>>>
> >>>>     
> >>>>
> >>>>          
> >>>>
> >>>if i use "smbpasswd Administrator" i get:
> >>>_______________________________
> >>>[root@fedorac4 ~]# smbpasswd Administrator
> >>>New SMB password:
> >>>Retype new SMB password:
> >>>Failed to find entry for user administrator.
> >>>Failed to modify password entry for user administrator
> >>>[root@fedorac4 ~]#
> >>>_______________________________
> >>>so it seems that i can't add Administrator because the entry alredy 
> >>>exists, but i can't modify it because it doesn't exists.....
> >>>am i missing something :-)
> >>>
> >>>thanx
> >>>
> >>>--
> >>>Fedora-directory-users mailing list
> >>>Fedora-directory-users(a)redhat.com
> >>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>   
> >>>
> >>>        
> >>>
> >>What does your smb.conf look like? Also is there anything in the samba
> >>logs?
> >>
> >>--
> >>Fedora-directory-users mailing list
> >>Fedora-directory-users(a)redhat.com
> >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> >> 
> >>
> >>      
> >>
> >This is smb.conf (global section):
> >
> >[global]
> >   workgroup = FEDORAC4
> >        username map = /etc/samba/smbusers
> >	enable privileges = yes
> >        server string = Samba Server %v
> >   	security = user
> >        encrypt passwords = Yes
> >        min passwd length = 3
> >        obey pam restrictions = No
> >        ldap passwd sync = Yes
> >        #unix password sync = Yes
> >        passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
> >        #passwd chat = "Changing password for*\nNew password*" %n\n
> "*Retype new password*" %n\n"
> >        ldap passwd sync = Yes
> >        log level = 0
> >        syslog = 0
> >        log file = /var/log/samba/log.%m
> >        max log size = 100000
> >        time server = Yes
> >        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> >        mangling method = hash2
> >        Dos charset = 850
> >        Unix charset = ISO8859-1
> >        logon script = logon.bat
> >        logon drive = H:
> >        logon home =
> >        logon path =
> >        domain logons = Yes
> >        os level = 65
> >        preferred master = Yes
> >        domain master = Yes
> >        wins support = Yes
> >        passdb backend = ldapsam:ldap://fedorac4.localdomain
> >        #passdb backend = ldap:ldap://fedorac4.localdomain
> >        # passdb backend = ldapsam:"ldap://127.0.0.1/
> ldap://slave.idealx.com"
> >	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
> >        ldap admin dn = cn=Directory Manager
> >        ldap suffix = dc=localdomain
> >        ldap group suffix = ou=Groups
> >        ldap user suffix = ou=People
> >        ldap machine suffix = ou=Computers
> >        ldap idmap suffix = ou=Users
> >        #ldap ssl = start tls
> >        add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
> >        ldap delete dn = Yes
> >        #delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
> >        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
> >        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g" 
> >        #delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
> >        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u"
> "%g"
> >        delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
> "%u" "%g"
> >        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g"
> "%u"
> >
> >
> >samba logs is empty
> >Leon
> >
> >
> >
> >
> >--
> >Fedora-directory-users mailing list
> >Fedora-directory-users(a)redhat.com
> >https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >    
> >
>
> Not sure at this point, looks like you are using idealx scripts for some
> of the administration maybe they created the admin account?
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>   
>  
the entry "Administrator.... " has been  created with the ldif2ldap 
method, as shown in the how-to.
the problem, in my opinion, is that if i use "smbldap-usershow 
Administrator" i get the right entry:

_____________________________
[root@fedorac4 ~]# /opt/IDEALX/sbin/smbldap-usershow Administrator
dn: uid=Administrator,ou=People,dc=localdomain
uid: Administrator
cn: Samba Admin
givenName: Samba
sn: Admin
mail: Administrator@localdomain
objectClass: person,organizationalPerson,inetOrgPerson,posixAccount,top
loginShell: /bin/bash
uidNumber: 0
gidNumber: 0
homeDirectory: /root
gecos: Samba Admin
userPassword: {SSHA}2b/re4djmAJmmNCWnJmKcJLGlCRqdGdU
_____________________________

if i use "ldapsearch -x -Z '(uid=Administrator)' i get the right entry, 
i suppose the same entry found with the other command:
____________________
[root@fedorac4 ~]# ldapsearch -x -Z '(uid=Administrator)'
ldap_start_tls: Protocol error (2)
        additional info: unsupported extended operation
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: (uid=Administrator)
# requesting: ALL
#

# Administrator, People, localdomain
dn: uid=Administrator,ou=People,dc=localdomain
uid: Administrator
cn: Samba Admin
givenName: Samba
sn: Admin
mail: Administrator@localdomain
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
loginShell: /bin/bash
uidNumber: 0
gidNumber: 0
homeDirectory: /root
gecos: Samba Admin

# search result
search: 3
result: 0 Success

# numResponses: 2
# numEntries: 1
[root@fedorac4 ~]#
_________________________________________-

i suppose the two command give me the same entry because sghould be 
querying the same database......

if i use pdbedit -u Administrator
i get
_________________
[root@fedorac4 ~]# pdbedit -u Administrator
Username not found!
[root@fedorac4 ~]#
_________________

so if only samba related commands seem not to work properly perhaps the 
problem is in samba configuration,
but in the guides downloaded from the website i didn't found how to 
configure the part of the file for what concern the scripts of entries 
managemant such as adding users, machine, etc......
what should i do now?

bye leon

[Adam Stokes]

On Thu, 2005-07-21 at 15:44 +0200, Leonardo Pugliesi wrote:
>  Adam Stokes ha scritto:
>  
>  >On Thu, 2005-07-21 at 10:36 +0200, Leonardo Pugliesi wrote:
>  >  
>  >
>  >>Adam Stokes ha scritto:
>  >>
>  >>    
>  >>
>  >>>>>Leon,
>  >>>>>
>  >>>>>I think since you have an administrator account set already, do
>  >>>>>
>  >>>>>smbpasswd Adminsitrator
>  >>>>>
>  >>>>>the '-a' switch tells samba to add that user without it will
> just change
>  >>>>>the password and add the appropriate entries to directory server
>  >>>>>
>  >>>>>--
>  >>>>>Fedora-directory-users mailing list
>  >>>>>Fedora-directory-users(a)redhat.com
>  >>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>>>
>  >>>>>
>  >>>>>
>  >>>>>     
>  >>>>>
>  >>>>>          
>  >>>>>
>  >>>>if i use "smbpasswd Administrator" i get:
>  >>>>_______________________________
>  >>>>[root@fedorac4 ~]# smbpasswd Administrator
>  >>>>New SMB password:
>  >>>>Retype new SMB password:
>  >>>>Failed to find entry for user administrator.
>  >>>>Failed to modify password entry for user administrator
>  >>>>[root@fedorac4 ~]#
>  >>>>_______________________________
>  >>>>so it seems that i can't add Administrator because the entry alredy 
>  >>>>exists, but i can't modify it because it doesn't exists.....
>  >>>>am i missing something :-)
>  >>>>
>  >>>>thanx
>  >>>>
>  >>>>--
>  >>>>Fedora-directory-users mailing list
>  >>>>Fedora-directory-users(a)redhat.com
>  >>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>>   
>  >>>>
>  >>>>        
>  >>>>
>  >>>What does your smb.conf look like? Also is there anything in the samba
>  >>>logs?
>  >>>
>  >>>--
>  >>>Fedora-directory-users mailing list
>  >>>Fedora-directory-users(a)redhat.com
>  >>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>
>  >>> 
>  >>>
>  >>>      
>  >>>
>  >>This is smb.conf (global section):
>  >>
>  >>[global]
>  >>   workgroup = FEDORAC4
>  >>        username map = /etc/samba/smbusers
>  >>	enable privileges = yes
>  >>        server string = Samba Server %v
>  >>   	security = user
>  >>        encrypt passwords = Yes
>  >>        min passwd length = 3
>  >>        obey pam restrictions = No
>  >>        ldap passwd sync = Yes
>  >>        #unix password sync = Yes
>  >>        passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
>  >>        #passwd chat = "Changing password for*\nNew password*" %n\n
> "*Retype new password*" %n\n"
>  >>        ldap passwd sync = Yes
>  >>        log level = 0
>  >>        syslog = 0
>  >>        log file = /var/log/samba/log.%m
>  >>        max log size = 100000
>  >>        time server = Yes
>  >>        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>  >>        mangling method = hash2
>  >>        Dos charset = 850
>  >>        Unix charset = ISO8859-1
>  >>        logon script = logon.bat
>  >>        logon drive = H:
>  >>        logon home =
>  >>        logon path =
>  >>        domain logons = Yes
>  >>        os level = 65
>  >>        preferred master = Yes
>  >>        domain master = Yes
>  >>        wins support = Yes
>  >>        passdb backend = ldapsam:ldap://fedorac4.localdomain
>  >>        #passdb backend = ldap:ldap://fedorac4.localdomain
>  >>        # passdb backend = ldapsam:"ldap://127.0.0.1/
> ldap://slave.idealx.com"
>  >>	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
>  >>        ldap admin dn = cn=Directory Manager
>  >>        ldap suffix = dc=localdomain
>  >>        ldap group suffix = ou=Groups
>  >>        ldap user suffix = ou=People
>  >>        ldap machine suffix = ou=Computers
>  >>        ldap idmap suffix = ou=Users
>  >>        #ldap ssl = start tls
>  >>        add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
>  >>        ldap delete dn = Yes
>  >>        #delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
>  >>        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
>  >>        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g" 
>  >>        #delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
>  >>        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
> "%u" "%g"
>  >>        delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
> "%u" "%g"
>  >>        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
> "%g" "%u"
>  >>
>  >>
>  >>samba logs is empty
>  >>Leon
>  >>
>  >>
>  >>
>  >>
>  >>--
>  >>Fedora-directory-users mailing list
>  >>Fedora-directory-users(a)redhat.com
>  >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>    
>  >>
>  >
>  >Not sure at this point, looks like you are using idealx scripts for some
>  >of the administration maybe they created the admin account?
>  >
>  >--
>  >Fedora-directory-users mailing list
>  >Fedora-directory-users(a)redhat.com
>  >https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >
>  >  
>  >
>  the entry "Administrator.... " has been  created with the ldif2ldap 
>  method, as shown in the how-to.
>  the problem, in my opinion, is that if i use "smbldap-usershow 
>  Administrator" i get the right entry:
>  
>  _____________________________
>  [root@fedorac4 ~]# /opt/IDEALX/sbin/smbldap-usershow Administrator
>  dn: uid=Administrator,ou=People,dc=localdomain
>  uid: Administrator
>  cn: Samba Admin
>  givenName: Samba
>  sn: Admin
>  mail: Administrator@localdomain
>  objectClass: person,organizationalPerson,inetOrgPerson,posixAccount,top
>  loginShell: /bin/bash
>  uidNumber: 0
>  gidNumber: 0
>  homeDirectory: /root
>  gecos: Samba Admin
>  userPassword: {SSHA}2b/re4djmAJmmNCWnJmKcJLGlCRqdGdU
>  _____________________________
>  
>  if i use "ldapsearch -x -Z '(uid=Administrator)' i get the right entry, 
>  i suppose the same entry found with the other command:
>  ____________________
>  [root@fedorac4 ~]# ldapsearch -x -Z '(uid=Administrator)'
>  ldap_start_tls: Protocol error (2)
>          additional info: unsupported extended operation
>  # extended LDIF
>  #
>  # LDAPv3
>  # base <> with scope sub
>  # filter: (uid=Administrator)
>  # requesting: ALL
>  #
>  
>  # Administrator, People, localdomain
>  dn: uid=Administrator,ou=People,dc=localdomain
>  uid: Administrator
>  cn: Samba Admin
>  givenName: Samba
>  sn: Admin
>  mail: Administrator@localdomain
>  objectClass: person
>  objectClass: organizationalPerson
>  objectClass: inetOrgPerson
>  objectClass: posixAccount
>  objectClass: top
>  loginShell: /bin/bash
>  uidNumber: 0
>  gidNumber: 0
>  homeDirectory: /root
>  gecos: Samba Admin
>  
>  # search result
>  search: 3
>  result: 0 Success
>  
>  # numResponses: 2
>  # numEntries: 1
>  [root@fedorac4 ~]#
>  _________________________________________-
>  
>  i suppose the two command give me the same entry because sghould be 
>  querying the same database......
>  
>  if i use pdbedit -u Administrator
>  i get
>  _________________
>  [root@fedorac4 ~]# pdbedit -u Administrator
>  Username not found!
>  [root@fedorac4 ~]#
>  _________________
>  
>  so if only samba related commands seem not to work properly perhaps the 
>  problem is in samba configuration,
>  but in the guides downloaded from the website i didn't found how to 
>  configure the part of the file for what concern the scripts of entries 
>  managemant such as adding users, machine, etc......
>  what should i do now?
>  
>  bye leon
>  
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
This is what the administrator entry should look like :

[root@directory alias]# ldapsearch -x -ZZ '(uid=administrator)'
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: (uid=administrator)
# requesting: ALL
#

# Administrator, People, gsslab.rdu.redhat.com
dn: uid=Administrator,ou=People,dc=gsslab,dc=rdu,dc=redhat,dc=com
uid: Administrator
cn: Samba Administrator
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: sambaSamAccount
loginShell: /bin/bish
uidNumber: 0
gidNumber: 0
homeDirectory: /root
gecos: Samba Administrator
sambaSID: S-1-5-21-1803520230-1543781662-649387223-1000
sambaPrimaryGroupSID: S-1-5-21-1803520230-1543781662-649387223-1001
displayName: Samba Administrator
sambaPwdCanChange: 1120750967
sambaPwdMustChange: 2147483647
sambaLMPassword: CFA95C51F11AB11DC2265B23734E0DAC
sambaNTPassword: B2D88A4A9B0DAEE170E75F67D54918F6
sambaPasswordHistory:
00000000000000000000000000000000000000000000000000000000
 00000000
sambaPwdLastSet: 1120750967
sambaAcctFlags: [U          ]

# search result
search: 3
result: 0 Success

# numResponses: 2
# numEntries: 1

So it looks like perhaps the administrator account needs the objectclass
sambaSamAccount added to the entry manually then you should be able to
proceed

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> On Thu, 2005-07-21 at 15:44 +0200, Leonardo Pugliesi wrote:
>   
>
> >Adam Stokes ha scritto:
> >
> >    
> >
> >>On Thu, 2005-07-21 at 10:36 +0200, Leonardo Pugliesi wrote:
> >> 
> >>
> >>      
> >>
> >>>Adam Stokes ha scritto:
> >>>
> >>>   
> >>>
> >>>        
> >>>
> >>>>>>Leon,
> >>>>>>
> >>>>>>I think since you have an administrator account set already, do
> >>>>>>
> >>>>>>smbpasswd Adminsitrator
> >>>>>>
> >>>>>>the '-a' switch tells samba to add that user without it
> will just change
> >>>>>>the password and add the appropriate entries to directory server
> >>>>>>
> >>>>>>--
> >>>>>>Fedora-directory-users mailing list
> >>>>>>Fedora-directory-users(a)redhat.com
> >>>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>    
> >>>>>>
> >>>>>>         
> >>>>>>
> >>>>>>              
> >>>>>>
> >>>>>if i use "smbpasswd Administrator" i get:
> >>>>>_______________________________
> >>>>>[root@fedorac4 ~]# smbpasswd Administrator
> >>>>>New SMB password:
> >>>>>Retype new SMB password:
> >>>>>Failed to find entry for user administrator.
> >>>>>Failed to modify password entry for user administrator
> >>>>>[root@fedorac4 ~]#
> >>>>>_______________________________
> >>>>>so it seems that i can't add Administrator because the entry
> alredy 
> >>>>>exists, but i can't modify it because it doesn't exists.....
> >>>>>am i missing something :-)
> >>>>>
> >>>>>thanx
> >>>>>
> >>>>>--
> >>>>>Fedora-directory-users mailing list
> >>>>>Fedora-directory-users(a)redhat.com
> >>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>>  
> >>>>>
> >>>>>       
> >>>>>
> >>>>>            
> >>>>>
> >>>>What does your smb.conf look like? Also is there anything in the samba
> >>>>logs?
> >>>>
> >>>>--
> >>>>Fedora-directory-users mailing list
> >>>>Fedora-directory-users(a)redhat.com
> >>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>
> >>>>
> >>>>
> >>>>     
> >>>>
> >>>>          
> >>>>
> >>>This is smb.conf (global section):
> >>>
> >>>[global]
> >>>  workgroup = FEDORAC4
> >>>       username map = /etc/samba/smbusers
> >>>	enable privileges = yes
> >>>       server string = Samba Server %v
> >>>  	security = user
> >>>       encrypt passwords = Yes
> >>>       min passwd length = 3
> >>>       obey pam restrictions = No
> >>>       ldap passwd sync = Yes
> >>>       #unix password sync = Yes
> >>>       passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
> >>>       #passwd chat = "Changing password for*\nNew password*" %n\n
> "*Retype new password*" %n\n"
> >>>       ldap passwd sync = Yes
> >>>       log level = 0
> >>>       syslog = 0
> >>>       log file = /var/log/samba/log.%m
> >>>       max log size = 100000
> >>>       time server = Yes
> >>>       socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> >>>       mangling method = hash2
> >>>       Dos charset = 850
> >>>       Unix charset = ISO8859-1
> >>>       logon script = logon.bat
> >>>       logon drive = H:
> >>>       logon home =
> >>>       logon path =
> >>>       domain logons = Yes
> >>>       os level = 65
> >>>       preferred master = Yes
> >>>       domain master = Yes
> >>>       wins support = Yes
> >>>       passdb backend = ldapsam:ldap://fedorac4.localdomain
> >>>       #passdb backend = ldap:ldap://fedorac4.localdomain
> >>>       # passdb backend = ldapsam:"ldap://127.0.0.1/
> ldap://slave.idealx.com"
> >>>	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
> >>>       ldap admin dn = cn=Directory Manager
> >>>       ldap suffix = dc=localdomain
> >>>       ldap group suffix = ou=Groups
> >>>       ldap user suffix = ou=People
> >>>       ldap machine suffix = ou=Computers
> >>>       ldap idmap suffix = ou=Users
> >>>       #ldap ssl = start tls
> >>>       add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
> >>>       ldap delete dn = Yes
> >>>       #delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
> >>>       add machine script = /opt/IDEALX/sbin/smbldap-useradd -w
> "%u"
> >>>       add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
>
> >>>       #delete group script = /opt/IDEALX/sbin/smbldap-groupdel
> "%g"
> >>>       add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
> "%u" "%g"
> >>>       delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
> "%u" "%g"
> >>>       set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
> "%g" "%u"
> >>>
> >>>
> >>>samba logs is empty
> >>>Leon
> >>>
> >>>
> >>>
> >>>
> >>>--
> >>>Fedora-directory-users mailing list
> >>>Fedora-directory-users(a)redhat.com
> >>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>   
> >>>
> >>>        
> >>>
> >>Not sure at this point, looks like you are using idealx scripts for some
> >>of the administration maybe they created the admin account?
> >>
> >>--
> >>Fedora-directory-users mailing list
> >>Fedora-directory-users(a)redhat.com
> >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> >> 
> >>
> >>      
> >>
> >the entry "Administrator.... " has been  created with the ldif2ldap 
> >method, as shown in the how-to.
> >the problem, in my opinion, is that if i use "smbldap-usershow 
> >Administrator" i get the right entry:
> >
> >_____________________________
> >[root@fedorac4 ~]# /opt/IDEALX/sbin/smbldap-usershow Administrator
> >dn: uid=Administrator,ou=People,dc=localdomain
> >uid: Administrator
> >cn: Samba Admin
> >givenName: Samba
> >sn: Admin
> >mail: Administrator@localdomain
> >objectClass: person,organizationalPerson,inetOrgPerson,posixAccount,top
> >loginShell: /bin/bash
> >uidNumber: 0
> >gidNumber: 0
> >homeDirectory: /root
> >gecos: Samba Admin
> >userPassword: {SSHA}2b/re4djmAJmmNCWnJmKcJLGlCRqdGdU
> >_____________________________
> >
> >if i use "ldapsearch -x -Z '(uid=Administrator)' i get the right entry, 
> >i suppose the same entry found with the other command:
> >____________________
> >[root@fedorac4 ~]# ldapsearch -x -Z '(uid=Administrator)'
> >ldap_start_tls: Protocol error (2)
> >        additional info: unsupported extended operation
> ># extended LDIF
> >#
> ># LDAPv3
> ># base <> with scope sub
> ># filter: (uid=Administrator)
> ># requesting: ALL
> >#
> >
> ># Administrator, People, localdomain
> >dn: uid=Administrator,ou=People,dc=localdomain
> >uid: Administrator
> >cn: Samba Admin
> >givenName: Samba
> >sn: Admin
> >mail: Administrator@localdomain
> >objectClass: person
> >objectClass: organizationalPerson
> >objectClass: inetOrgPerson
> >objectClass: posixAccount
> >objectClass: top
> >loginShell: /bin/bash
> >uidNumber: 0
> >gidNumber: 0
> >homeDirectory: /root
> >gecos: Samba Admin
> >
> ># search result
> >search: 3
> >result: 0 Success
> >
> ># numResponses: 2
> ># numEntries: 1
> >[root@fedorac4 ~]#
> >_________________________________________-
> >
> >i suppose the two command give me the same entry because sghould be 
> >querying the same database......
> >
> >if i use pdbedit -u Administrator
> >i get
> >_________________
> >[root@fedorac4 ~]# pdbedit -u Administrator
> >Username not found!
> >[root@fedorac4 ~]#
> >_________________
> >
> >so if only samba related commands seem not to work properly perhaps the 
> >problem is in samba configuration,
> >but in the guides downloaded from the website i didn't found how to 
> >configure the part of the file for what concern the scripts of entries 
> >managemant such as adding users, machine, etc......
> >what should i do now?
> >
> >bye leon
> >
> >
> >--
> >Fedora-directory-users mailing list
> &gt;Fedora-directory-users(a)redhat.com
> >https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >    
> >
>
> This is what the administrator entry should look like :
>
> [root@directory alias]# ldapsearch -x -ZZ '(uid=administrator)'
> # extended LDIF
> #
> # LDAPv3
> # base <> with scope sub
> # filter: (uid=administrator)
> # requesting: ALL
> #
>
> # Administrator, People, gsslab.rdu.redhat.com
> dn: uid=Administrator,ou=People,dc=gsslab,dc=rdu,dc=redhat,dc=com
> uid: Administrator
> cn: Samba Administrator
> objectClass: account
> objectClass: posixAccount
> objectClass: top
> objectClass: sambaSamAccount
> loginShell: /bin/bish
> uidNumber: 0
> gidNumber: 0
> homeDirectory: /root
> gecos: Samba Administrator
> sambaSID: S-1-5-21-1803520230-1543781662-649387223-1000
> sambaPrimaryGroupSID: S-1-5-21-1803520230-1543781662-649387223-1001
> displayName: Samba Administrator
> sambaPwdCanChange: 1120750967
> sambaPwdMustChange: 2147483647
> sambaLMPassword: CFA95C51F11AB11DC2265B23734E0DAC
> sambaNTPassword: B2D88A4A9B0DAEE170E75F67D54918F6
> sambaPasswordHistory:
> 00000000000000000000000000000000000000000000000000000000
>  00000000
> sambaPwdLastSet: 1120750967
> sambaAcctFlags: [U          ]
>
> # search result
> search: 3
> result: 0 Success
>
> # numResponses: 2
> # numEntries: 1
>
> So it looks like perhaps the administrator account needs the objectclass
> sambaSamAccount added to the entry manually then you should be able to
> proceed
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>   
>  
i removed all the references to smbldap-tools in the smb.conf and now 
things seems to work better...
i beg your pardon for this mistake but i thought that samba would 
interact with ldap through that tools.
now, for example, when i join a machine to the domain who is in charge 
of adding the correct entry in ldap database without smbladp-tools?

thanks,
leon

[Adam Stokes]

On Thu, 2005-07-21 at 17:05 +0200, Leonardo Pugliesi wrote:
>  Adam Stokes ha scritto:
>  
>  >On Thu, 2005-07-21 at 15:44 +0200, Leonardo Pugliesi wrote:
>  >  
>  >
>  >>Adam Stokes ha scritto:
>  >>
>  >>    
>  >>
>  >>>On Thu, 2005-07-21 at 10:36 +0200, Leonardo Pugliesi wrote:
>  >>> 
>  >>>
>  >>>      
>  >>>
>  >>>>Adam Stokes ha scritto:
>  >>>>
>  >>>>   
>  >>>>
>  >>>>        
>  >>>>
>  >>>>>>>Leon,
>  >>>>>>>
>  >>>>>>>I think since you have an administrator account set already,
> do
>  >>>>>>>
>  >>>>>>>smbpasswd Adminsitrator
>  >>>>>>>
>  >>>>>>>the '-a' switch tells samba to add that user without
> it will just change
>  >>>>>>>the password and add the appropriate entries to directory
> server
>  >>>>>>>
>  >>>>>>>--
>  >>>>>>>Fedora-directory-users mailing list
>  >>>>>>>Fedora-directory-users(a)redhat.com
>
> >>>>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>>>>>
>  >>>>>>>
>  >>>>>>>
>  >>>>>>>    
>  >>>>>>>
>  >>>>>>>         
>  >>>>>>>
>  >>>>>>>              
>  >>>>>>>
>  >>>>>>if i use "smbpasswd Administrator" i get:
>  >>>>>>_______________________________
>  >>>>>>[root@fedorac4 ~]# smbpasswd Administrator
>  >>>>>>New SMB password:
>  >>>>>>Retype new SMB password:
>  >>>>>>Failed to find entry for user administrator.
>  >>>>>>Failed to modify password entry for user administrator
>  >>>>>>[root@fedorac4 ~]#
>  >>>>>>_______________________________
>  >>>>>>so it seems that i can't add Administrator because the entry
> alredy 
>  >>>>>>exists, but i can't modify it because it doesn't
> exists.....
>  >>>>>>am i missing something :-)
>  >>>>>>
>  >>>>>>thanx
>  >>>>>>
>  >>>>>>--
>  >>>>>>Fedora-directory-users mailing list
>  >>>>>>Fedora-directory-users(a)redhat.com
>  >>>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>>>>  
>  >>>>>>
>  >>>>>>       
>  >>>>>>
>  >>>>>>            
>  >>>>>>
>  >>>>>What does your smb.conf look like? Also is there anything in the
> samba
>  >>>>>logs?
>  >>>>>
>  >>>>>--
>  >>>>>Fedora-directory-users mailing list
>  >>>>>Fedora-directory-users(a)redhat.com
>  >>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>>>
>  >>>>>
>  >>>>>
>  >>>>>     
>  >>>>>
>  >>>>>          
>  >>>>>
>  >>>>This is smb.conf (global section):
>  >>>>
>  >>>>[global]
>  >>>>  workgroup = FEDORAC4
>  >>>>       username map = /etc/samba/smbusers
>  >>>>	enable privileges = yes
>  >>>>       server string = Samba Server %v
>  >>>>  	security = user
>  >>>>       encrypt passwords = Yes
>  >>>>       min passwd length = 3
>  >>>>       obey pam restrictions = No
>  >>>>       ldap passwd sync = Yes
>  >>>>       #unix password sync = Yes
>  >>>>       passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
>  >>>>       #passwd chat = "Changing password for*\nNew password*"
> %n\n "*Retype new password*" %n\n"
>  >>>>       ldap passwd sync = Yes
>  >>>>       log level = 0
>  >>>>       syslog = 0
>  >>>>       log file = /var/log/samba/log.%m
>  >>>>       max log size = 100000
>  >>>>       time server = Yes
>  >>>>       socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>  >>>>       mangling method = hash2
>  >>>>       Dos charset = 850
>  >>>>       Unix charset = ISO8859-1
>  >>>>       logon script = logon.bat
>  >>>>       logon drive = H:
>  >>>>       logon home =
>  >>>>       logon path =
>  >>>>       domain logons = Yes
>  >>>>       os level = 65
>  >>>>       preferred master = Yes
>  >>>>       domain master = Yes
>  >>>>       wins support = Yes
>  >>>>       passdb backend = ldapsam:ldap://fedorac4.localdomain
>  >>>>       #passdb backend = ldap:ldap://fedorac4.localdomain
>  >>>>       # passdb backend = ldapsam:"ldap://127.0.0.1/
> ldap://slave.idealx.com"
>  >>>>	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
>  >>>>       ldap admin dn = cn=Directory Manager
>  >>>>       ldap suffix = dc=localdomain
>  >>>>       ldap group suffix = ou=Groups
>  >>>>       ldap user suffix = ou=People
>  >>>>       ldap machine suffix = ou=Computers
>  >>>>       ldap idmap suffix = ou=Users
>  >>>>       #ldap ssl = start tls
>  >>>>       add user script = /opt/IDEALX/sbin/smbldap-useradd -m
> "%u"
>  >>>>       ldap delete dn = Yes
>  >>>>       #delete user script = /opt/IDEALX/sbin/smbldap-userdel
> "%u"
>  >>>>       add machine script = /opt/IDEALX/sbin/smbldap-useradd -w
> "%u"
>  >>>>       add group script = /opt/IDEALX/sbin/smbldap-groupadd -p
> "%g" 
>  >>>>       #delete group script = /opt/IDEALX/sbin/smbldap-groupdel
> "%g"
>  >>>>       add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
> "%u" "%g"
>  >>>>       delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod
> -x "%u" "%g"
>  >>>>       set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
> "%g" "%u"
>  >>>>
>  >>>>
>  >>>>samba logs is empty
>  >>>>Leon
>  >>>>
>  >>>>
>  >>>>
>  >>>>
>  >>>>--
>  >>>>Fedora-directory-users mailing list
>  >>>>Fedora-directory-users(a)redhat.com
>  >>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>>   
>  >>>>
>  >>>>        
>  >>>>
>  >>>Not sure at this point, looks like you are using idealx scripts for some
>  >>>of the administration maybe they created the admin account?
>  >>>
>  >>>--
>  >>>Fedora-directory-users mailing list
>  >>>Fedora-directory-users(a)redhat.com
>  >>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>>
>  >>> 
>  >>>
>  >>>      
>  >>>
>  >>the entry "Administrator.... " has been  created with the ldif2ldap 
>  >>method, as shown in the how-to.
>  >>the problem, in my opinion, is that if i use "smbldap-usershow 
>  >>Administrator" i get the right entry:
>  >>
>  >>_____________________________
>  >>[root@fedorac4 ~]# /opt/IDEALX/sbin/smbldap-usershow Administrator
>  >>dn: uid=Administrator,ou=People,dc=localdomain
>  >>uid: Administrator
>  >>cn: Samba Admin
>  >>givenName: Samba
>  >>sn: Admin
>  >>mail: Administrator@localdomain
>  >>objectClass: person,organizationalPerson,inetOrgPerson,posixAccount,top
>  >>loginShell: /bin/bash
>  >>uidNumber: 0
>  >>gidNumber: 0
>  >>homeDirectory: /root
>  >>gecos: Samba Admin
>  >>userPassword: {SSHA}2b/re4djmAJmmNCWnJmKcJLGlCRqdGdU
>  >>_____________________________
>  >>
>  >>if i use "ldapsearch -x -Z '(uid=Administrator)' i get the right
> entry, 
>  >>i suppose the same entry found with the other command:
>  >>____________________
>  >>[root@fedorac4 ~]# ldapsearch -x -Z '(uid=Administrator)'
>  >>ldap_start_tls: Protocol error (2)
>  >>        additional info: unsupported extended operation
>  >># extended LDIF
>  >>#
>  >># LDAPv3
>  >># base <> with scope sub
>  >># filter: (uid=Administrator)
>  >># requesting: ALL
>  >>#
>  >>
>  >># Administrator, People, localdomain
>  >>dn: uid=Administrator,ou=People,dc=localdomain
>  >>uid: Administrator
>  >>cn: Samba Admin
>  >>givenName: Samba
>  >>sn: Admin
>  >>mail: Administrator@localdomain
>  >>objectClass: person
>  >>objectClass: organizationalPerson
>  >>objectClass: inetOrgPerson
>  >>objectClass: posixAccount
>  >>objectClass: top
>  >>loginShell: /bin/bash
>  >>uidNumber: 0
>  >>gidNumber: 0
>  >>homeDirectory: /root
>  >>gecos: Samba Admin
>  >>
>  >># search result
>  >>search: 3
>  >>result: 0 Success
>  >>
>  >># numResponses: 2
>  >># numEntries: 1
>  >>[root@fedorac4 ~]#
>  >>_________________________________________-
>  >>
>  >>i suppose the two command give me the same entry because sghould be 
>  >>querying the same database......
>  >>
>  >>if i use pdbedit -u Administrator
>  >>i get
>  >>_________________
>  >>[root@fedorac4 ~]# pdbedit -u Administrator
>  >>Username not found!
>  >>[root@fedorac4 ~]#
>  >>_________________
>  >>
>  >>so if only samba related commands seem not to work properly perhaps the 
>  >>problem is in samba configuration,
>  >>but in the guides downloaded from the website i didn't found how to 
>  >>configure the part of the file for what concern the scripts of entries 
>  >>managemant such as adding users, machine, etc......
>  >>what should i do now?
>  >>
>  >>bye leon
>  >>
>  >>
>  >>--
>  >>Fedora-directory-users mailing list
>  &gt;&gt;Fedora-directory-users(a)redhat.com
>  >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >>    
>  >>
>  >
>  >This is what the administrator entry should look like :
>  >
>  >[root@directory alias]# ldapsearch -x -ZZ '(uid=administrator)'
>  ># extended LDIF
>  >#
>  ># LDAPv3
>  ># base <> with scope sub
>  ># filter: (uid=administrator)
>  ># requesting: ALL
>  >#
>  >
>  ># Administrator, People, gsslab.rdu.redhat.com
>  >dn: uid=Administrator,ou=People,dc=gsslab,dc=rdu,dc=redhat,dc=com
>  >uid: Administrator
>  >cn: Samba Administrator
>  >objectClass: account
>  >objectClass: posixAccount
>  >objectClass: top
>  >objectClass: sambaSamAccount
>  >loginShell: /bin/bish
>  >uidNumber: 0
>  >gidNumber: 0
>  >homeDirectory: /root
>  >gecos: Samba Administrator
>  >sambaSID: S-1-5-21-1803520230-1543781662-649387223-1000
>  >sambaPrimaryGroupSID: S-1-5-21-1803520230-1543781662-649387223-1001
>  >displayName: Samba Administrator
>  >sambaPwdCanChange: 1120750967
>  >sambaPwdMustChange: 2147483647
>  >sambaLMPassword: CFA95C51F11AB11DC2265B23734E0DAC
>  >sambaNTPassword: B2D88A4A9B0DAEE170E75F67D54918F6
>  >sambaPasswordHistory:
>  >00000000000000000000000000000000000000000000000000000000
>  > 00000000
>  >sambaPwdLastSet: 1120750967
>  >sambaAcctFlags: [U          ]
>  >
>  ># search result
>  >search: 3
>  >result: 0 Success
>  >
>  ># numResponses: 2
>  ># numEntries: 1
>  >
>  >So it looks like perhaps the administrator account needs the objectclass
>  >sambaSamAccount added to the entry manually then you should be able to
>  >proceed
>  >
>  >--
>  >Fedora-directory-users mailing list
>  &gt;Fedora-directory-users(a)redhat.com
>  >https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  >
>  >  
>  >
>  i removed all the references to smbldap-tools in the smb.conf and now 
>  things seems to work better...
>  i beg your pardon for this mistake but i thought that samba would 
>  interact with ldap through that tools.
>  now, for example, when i join a machine to the domain who is in charge 
>  of adding the correct entry in ldap database without smbladp-tools?
>  
>  thanks,
>  leon
>  
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users 
Unfortunately, it has to be done manually without the proper ldap
tools.. I haven't gotten that far in testing just a preliminary how-to
for this. 

IDEALX scripts do work with openldap again I haven't tested with FDS. My
suggestion to you or someone who is good in C is to write a plugin for
FDS probably a Pre-operation plugin to allow for the adding/removing of
entries in the FDS db.

More information on plugins can be found :
http://directory.fedora.redhat.com/wiki/Plugins

Sorry I couldn't be of further assistance

thanks

[Leonardo Pugliesi]

Adam Stokes ha scritto:

> On Thu, 2005-07-21 at 17:05 +0200, Leonardo Pugliesi wrote:
>   
>
> >Adam Stokes ha scritto:
> >
> >    
> >
> >>On Thu, 2005-07-21 at 15:44 +0200, Leonardo Pugliesi wrote:
> >> 
> >>
> >>      
> >>
> >>>Adam Stokes ha scritto:
> >>>
> >>>   
> >>>
> >>>        
> >>>
> >>>>On Thu, 2005-07-21 at 10:36 +0200, Leonardo Pugliesi wrote:
> >>>>
> >>>>
> >>>>     
> >>>>
> >>>>          
> >>>>
> >>>>>Adam Stokes ha scritto:
> >>>>>
> >>>>>  
> >>>>>
> >>>>>       
> >>>>>
> >>>>>            
> >>>>>
> >>>>>>>>Leon,
> >>>>>>>>
> >>>>>>>>I think since you have an administrator account set
> already, do
> >>>>>>>>
> >>>>>>>>smbpasswd Adminsitrator
> >>>>>>>>
> >>>>>>>>the '-a' switch tells samba to add that user
> without it will just change
> >>>>>>>>the password and add the appropriate entries to directory
> server
> >>>>>>>>
> >>>>>>>>--
> >>>>>>>>Fedora-directory-users mailing list
> >>>>>>>>Fedora-directory-users(a)redhat.com
> >>>>>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>   
> >>>>>>>>
> >>>>>>>>        
> >>>>>>>>
> >>>>>>>>             
> >>>>>>>>
> >>>>>>>>                  
> >>>>>>>>
> >>>>>>>if i use "smbpasswd Administrator" i get:
> >>>>>>>_______________________________
> >>>>>>>[root@fedorac4 ~]# smbpasswd Administrator
> >>>>>>>New SMB password:
> >>>>>>>Retype new SMB password:
> >>>>>>>Failed to find entry for user administrator.
> >>>>>>>Failed to modify password entry for user administrator
> >>>>>>>[root@fedorac4 ~]#
> >>>>>>>_______________________________
> >>>>>>>so it seems that i can't add Administrator because the
> entry alredy 
> >>>>>>>exists, but i can't modify it because it doesn't
> exists.....
> >>>>>>>am i missing something :-)
> >>>>>>>
> >>>>>>>thanx
> >>>>>>>
> >>>>>>>--
> >>>>>>>Fedora-directory-users mailing list
> >>>>>>>Fedora-directory-users(a)redhat.com
> >>>>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>>>> 
> >>>>>>>
> >>>>>>>      
> >>>>>>>
> >>>>>>>           
> >>>>>>>
> >>>>>>>                
> >>>>>>>
> >>>>>>What does your smb.conf look like? Also is there anything in the
> samba
> >>>>>>logs?
> >>>>>>
> >>>>>>--
> >>>>>>Fedora-directory-users mailing list
> >>>>>>Fedora-directory-users(a)redhat.com
> >>>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>    
> >>>>>>
> >>>>>>         
> >>>>>>
> >>>>>>              
> >>>>>>
> >>>>>This is smb.conf (global section):
> >>>>>
> >>>>>[global]
> >>>>> workgroup = FEDORAC4
> >>>>>      username map = /etc/samba/smbusers
> >>>>>	enable privileges = yes
> >>>>>      server string = Samba Server %v
> >>>>> 	security = user
> >>>>>      encrypt passwords = Yes
> >>>>>      min passwd length = 3
> >>>>>      obey pam restrictions = No
> >>>>>      ldap passwd sync = Yes
> >>>>>      #unix password sync = Yes
> >>>>>      passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
> >>>>>      #passwd chat = "Changing password for*\nNew password*"
> %n\n "*Retype new password*" %n\n"
> >>>>>      ldap passwd sync = Yes
> >>>>>      log level = 0
> >>>>>      syslog = 0
> >>>>>      log file = /var/log/samba/log.%m
> >>>>>      max log size = 100000
> >>>>>      time server = Yes
> >>>>>      socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> >>>>>      mangling method = hash2
> >>>>>      Dos charset = 850
> >>>>>      Unix charset = ISO8859-1
> >>>>>      logon script = logon.bat
> >>>>>      logon drive = H:
> >>>>>      logon home =
> >>>>>      logon path =
> >>>>>      domain logons = Yes
> >>>>>      os level = 65
> >>>>>      preferred master = Yes
> >>>>>      domain master = Yes
> >>>>>      wins support = Yes
> >>>>>      passdb backend = ldapsam:ldap://fedorac4.localdomain
> >>>>>      #passdb backend = ldap:ldap://fedorac4.localdomain
> >>>>>      # passdb backend = ldapsam:"ldap://127.0.0.1/
> ldap://slave.idealx.com"
> >>>>>	ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
> >>>>>      ldap admin dn = cn=Directory Manager
> >>>>>      ldap suffix = dc=localdomain
> >>>>>      ldap group suffix = ou=Groups
> >>>>>      ldap user suffix = ou=People
> >>>>>      ldap machine suffix = ou=Computers
> >>>>>      ldap idmap suffix = ou=Users
> >>>>>      #ldap ssl = start tls
> >>>>>      add user script = /opt/IDEALX/sbin/smbldap-useradd -m
> "%u"
> >>>>>      ldap delete dn = Yes
> >>>>>      #delete user script = /opt/IDEALX/sbin/smbldap-userdel
> "%u"
> >>>>>      add machine script = /opt/IDEALX/sbin/smbldap-useradd -w
> "%u"
> >>>>>      add group script = /opt/IDEALX/sbin/smbldap-groupadd -p
> "%g" 
> >>>>>      #delete group script = /opt/IDEALX/sbin/smbldap-groupdel
> "%g"
> >>>>>      add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
> "%u" "%g"
> >>>>>      delete user from group script =
> /opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
> >>>>>      set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
> "%g" "%u"
> >>>>>
> >>>>>
> >>>>>samba logs is empty
> >>>>>Leon
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>--
> >>>>>Fedora-directory-users mailing list
> >>>>>Fedora-directory-users(a)redhat.com
> >>>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>>  
> >>>>>
> >>>>>       
> >>>>>
> >>>>>            
> >>>>>
> >>>>Not sure at this point, looks like you are using idealx scripts for some
> >>>>of the administration maybe they created the admin account?
> >>>>
> >>>>--
> >>>>Fedora-directory-users mailing list
> >>>>Fedora-directory-users(a)redhat.com
> >>>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>>
> >>>>
> >>>>
> >>>>     
> >>>>
> >>>>          
> >>>>
> >>>the entry "Administrator.... " has been  created with the ldif2ldap
>
> >>>method, as shown in the how-to.
> >>>the problem, in my opinion, is that if i use "smbldap-usershow 
> >>>Administrator" i get the right entry:
> >>>
> >>>_____________________________
> >>>[root@fedorac4 ~]# /opt/IDEALX/sbin/smbldap-usershow Administrator
> >>>dn: uid=Administrator,ou=People,dc=localdomain
> >>>uid: Administrator
> >>>cn: Samba Admin
> >>>givenName: Samba
> >>>sn: Admin
> >>>mail: Administrator@localdomain
> >>>objectClass: person,organizationalPerson,inetOrgPerson,posixAccount,top
> >>>loginShell: /bin/bash
> >>>uidNumber: 0
> >>>gidNumber: 0
> >>>homeDirectory: /root
> >>>gecos: Samba Admin
> >>>userPassword: {SSHA}2b/re4djmAJmmNCWnJmKcJLGlCRqdGdU
> >>>_____________________________
> >>>
> >>>if i use "ldapsearch -x -Z '(uid=Administrator)' i get the right
> entry, 
> >>>i suppose the same entry found with the other command:
> >>>____________________
> >>>[root@fedorac4 ~]# ldapsearch -x -Z '(uid=Administrator)'
> >>>ldap_start_tls: Protocol error (2)
> >>>       additional info: unsupported extended operation
> >>># extended LDIF
> >>>#
> >>># LDAPv3
> >>># base <> with scope sub
> >>># filter: (uid=Administrator)
> >>># requesting: ALL
> >>>#
> >>>
> >>># Administrator, People, localdomain
> >>>dn: uid=Administrator,ou=People,dc=localdomain
> >>>uid: Administrator
> >>>cn: Samba Admin
> >>>givenName: Samba
> >>>sn: Admin
> >>>mail: Administrator@localdomain
> >>>objectClass: person
> >>>objectClass: organizationalPerson
> >>>objectClass: inetOrgPerson
> >>>objectClass: posixAccount
> >>>objectClass: top
> >>>loginShell: /bin/bash
> >>>uidNumber: 0
> >>>gidNumber: 0
> >>>homeDirectory: /root
> >>>gecos: Samba Admin
> >>>
> >>># search result
> >>>search: 3
> >>>result: 0 Success
> >>>
> >>># numResponses: 2
> >>># numEntries: 1
> >>>[root@fedorac4 ~]#
> >>>_________________________________________-
> >>>
> >>>i suppose the two command give me the same entry because sghould be 
> >>>querying the same database......
> >>>
> >>>if i use pdbedit -u Administrator
> >>>i get
> >>>_________________
> >>>[root@fedorac4 ~]# pdbedit -u Administrator
> >>>Username not found!
> >>>[root@fedorac4 ~]#
> >>>_________________
> >>>
> >>>so if only samba related commands seem not to work properly perhaps the 
> >>>problem is in samba configuration,
> >>>but in the guides downloaded from the website i didn't found how to 
> >>>configure the part of the file for what concern the scripts of entries 
> >>>managemant such as adding users, machine, etc......
> >>>what should i do now?
> >>>
> >>>bye leon
> >>>
> >>>
> >>>--
> >>>Fedora-directory-users mailing list
> &gt;&gt;&gt;Fedora-directory-users(a)redhat.com
> >>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>>   
> >>>
> >>>        
> >>>
> >>This is what the administrator entry should look like :
> >>
> >>[root@directory alias]# ldapsearch -x -ZZ '(uid=administrator)'
> >># extended LDIF
> >>#
> >># LDAPv3
> >># base <> with scope sub
> >># filter: (uid=administrator)
> >># requesting: ALL
> >>#
> >>
> >># Administrator, People, gsslab.rdu.redhat.com
> >>dn: uid=Administrator,ou=People,dc=gsslab,dc=rdu,dc=redhat,dc=com
> >>uid: Administrator
> >>cn: Samba Administrator
> >>objectClass: account
> >>objectClass: posixAccount
> >>objectClass: top
> >>objectClass: sambaSamAccount
> >>loginShell: /bin/bish
> >>uidNumber: 0
> >>gidNumber: 0
> >>homeDirectory: /root
> >>gecos: Samba Administrator
> >>sambaSID: S-1-5-21-1803520230-1543781662-649387223-1000
> >>sambaPrimaryGroupSID: S-1-5-21-1803520230-1543781662-649387223-1001
> >>displayName: Samba Administrator
> >>sambaPwdCanChange: 1120750967
> >>sambaPwdMustChange: 2147483647
> >>sambaLMPassword: CFA95C51F11AB11DC2265B23734E0DAC
> >>sambaNTPassword: B2D88A4A9B0DAEE170E75F67D54918F6
> >>sambaPasswordHistory:
> >>00000000000000000000000000000000000000000000000000000000
> >>00000000
> >>sambaPwdLastSet: 1120750967
> >>sambaAcctFlags: [U          ]
> >>
> >># search result
> >>search: 3
> >>result: 0 Success
> >>
> >># numResponses: 2
> >># numEntries: 1
> >>
> >>So it looks like perhaps the administrator account needs the objectclass
> >>sambaSamAccount added to the entry manually then you should be able to
> >>proceed
> >>
> >>--
> >>Fedora-directory-users mailing list
> &gt;&gt;Fedora-directory-users(a)redhat.com
> >>https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> >> 
> >>
> >>      
> >>
> >i removed all the references to smbldap-tools in the smb.conf and now 
> >things seems to work better...
> >i beg your pardon for this mistake but i thought that samba would 
> >interact with ldap through that tools.
> >now, for example, when i join a machine to the domain who is in charge 
> >of adding the correct entry in ldap database without smbladp-tools?
> >
> >thanks,
> >leon
> >
> >
> >--
> >Fedora-directory-users mailing list
> &gt;Fedora-directory-users(a)redhat.com
> >https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >    
> >
>
> Unfortunately, it has to be done manually without the proper ldap
> tools.. I haven't gotten that far in testing just a preliminary how-to
> for this. 
>
> IDEALX scripts do work with openldap again I haven't tested with FDS. My
> suggestion to you or someone who is good in C is to write a plugin for
> FDS probably a Pre-operation plugin to allow for the adding/removing of
> entries in the FDS db.
>
> More information on plugins can be found :
> http://directory.fedora.redhat.com/wiki/Plugins
>
> Sorry I couldn't be of further assistance
>
> thanks
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>   
>  
now i have to users configured in ldap: testuser and admnistrator (as u 
do in the how-to)
when i try to enter in a samba share with testuser i have no problems 
but if i use administrator and its password i can't enter,
is this normal?

thanx,
leon

[Leonardo Pugliesi]

Help
how to insert computers in domain?
in your how-to you explained how to insert groups and users entries into 
ldap, how about machine account?
whitout them we can't let clients joining the domain!
any suggestions?

thanx
leon