samba pdc ldap

[Verwijderd]

Ik heb een samba-pdc server opgezet met ldap.
Alles lijkt goed te gaan. Behalve dat windows 2000 machine niet aan kan loggen op het domein. Dan zegt die "de opgegeven gebruiker is niet gevonden"
Ik heb de sleutel in het register al aangepast ook dat werkt niet.
In de logfiles zie ik dat de gegevens uit de ldap komen dat gaat allemaal goed.
Als ik gewoon bij netwerkomgeving een share benader gaat dat ook goed. Dat is ook tezien in de logfiles. Config file is getest met testparm en geeft geen problemen. Iemand nog een idee?
En ja heb al op google en tweakers gezocht.


Systeem : debian woody
samba versie : 2.2.3a


log.smbd
[2002/10/29 09:46:26, 0] smbd/server.c:main(698)
smbd version 2.2.3a-ldap-0 for Debian started.
Copyright Andrew Tridgell and the Samba Team 1992-2002
[2002/10/29 09:46:27, 1] lib/debug.c:debug_message(250)
INFO: Debug class all level = 5 (pid 12827 from pid 12827)
doing parameter max log size = 0;
doing parameter admin users = root, martyn
doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
doing parameter domain logons = Yes
doing parameter os level = 80
doing parameter preferred master = False
doing parameter domain master = True
doing parameter dns proxy = No
doing parameter wins support = Yes
doing parameter ldap suffix = dc=IDEALX,dc=ORG
doing parameter ldap admin dn = cn=Manager,dc=IDEALX,dc=ORG
doing parameter ldap port = 389
doing parameter ldap server = 127.0.0.1
doing parameter ldap ssl = No
doing parameter add user script = /usr/sbin/smbldap-useradd.pl -w %u
doing parameter domain admin group = " @"Domain admins" "
[2002/10/29 09:46:27, 2] param/loadparm.c:do_section(2965)
Processing section "[homes]"
doing parameter comment = Home Directories
doing parameter valid users = %S
doing parameter read only = No
doing parameter create mask = 0664
doing parameter directory mask = 0775
doing parameter browsable = No
[2002/10/29 09:46:27, 2] param/loadparm.c:do_section(2965)
Processing section "[netlogon]"
doing parameter comment = Network Logon Service
doing parameter path = /home/samba/netlogon
doing parameter guest ok = Yes
doing parameter browsable = No
[2002/10/29 09:46:27, 2] param/loadparm.c:do_section(2965)
Processing section "[profiles]"
doing parameter path = /home/samba/profiles
doing parameter writable = yes
doing parameter browsable = no
doing parameter create mode = 0755
doing parameter guest ok = Yes
[2002/10/29 09:46:27, 2] param/loadparm.c:do_section(2965)
Processing section "[tmp]"
doing parameter comment = Temprary file space
doing parameter path = /tmp
doing parameter read only = No
doing parameter guest ok = Yes
[2002/10/29 09:46:27, 4] param/loadparm.c:lp_load(3403)
pm_process() returned Yes
[2002/10/29 09:46:27, 3] param/loadparm.c:lp_add_ipc(1945)
adding IPC service IPC$
[2002/10/29 09:46:27, 3] param/loadparm.c:lp_add_ipc(1945)
adding IPC service ADMIN$
[2002/10/29 14:18:55, 0] smbd/server.c:main(698)
smbd version 2.2.3a-ldap-0 for Debian started.
Copyright Andrew Tridgell and the Samba Team 1992-2002
[2002/10/29 14:18:55, 1] lib/debug.c:debug_message(250)
INFO: Debug class all level = 5 (pid 13960 from pid 13960)
doing parameter max log size = 0;
doing parameter admin users = root, martyn
doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
doing parameter domain logons = Yes
doing parameter os level = 80
doing parameter preferred master = False
doing parameter domain master = True
doing parameter dns proxy = No
doing parameter wins support = Yes
doing parameter ldap suffix = dc=IDEALX,dc=ORG
doing parameter ldap admin dn = cn=Manager,dc=IDEALX,dc=ORG
doing parameter ldap port = 389
doing parameter ldap server = 127.0.0.1
doing parameter ldap ssl = No
doing parameter add user script = /usr/sbin/smbldap-useradd.pl -w %u
doing parameter domain admin group = root,martyn @Domain admins
[2002/10/29 14:18:55, 2] param/loadparm.c:do_section(2965)
Processing section "[root]"
doing parameter path = /
doing parameter valid users = root
[2002/10/29 14:18:55, 2] param/loadparm.c:do_section(2965)
Processing section "[homes]"
doing parameter comment = Home Directories
doing parameter valid users = %S
doing parameter read only = No
doing parameter create mask = 0664
doing parameter directory mask = 0775
doing parameter browsable = No
[2002/10/29 14:18:55, 2] param/loadparm.c:do_section(2965)
Processing section "[netlogon]"
doing parameter comment = Network Logon Service
doing parameter path = /home/samba/netlogon
doing parameter guest ok = Yes
doing parameter browsable = No
[2002/10/29 14:18:55, 2] param/loadparm.c:do_section(2965)
Processing section "[profiles]"
doing parameter path = /home/samba/profiles
doing parameter writable = yes
doing parameter browsable = no
doing parameter create mode = 0755
doing parameter guest ok = Yes
[2002/10/29 14:18:55, 2] param/loadparm.c:do_section(2965)
Processing section "[tmp]"
doing parameter comment = Temprary file space
doing parameter path = /tmp
doing parameter read only = No
doing parameter guest ok = Yes
[2002/10/29 14:18:55, 4] param/loadparm.c:lp_load(3403)
pm_process() returned Yes
[2002/10/29 14:18:55, 3] param/loadparm.c:lp_add_ipc(1945)
adding IPC service IPC$
[2002/10/29 14:18:55, 3] param/loadparm.c:lp_add_ipc(1945)
adding IPC service ADMIN$

[Verwijderd]

dit ziet er prima uit volgens mij (als ik even snel kijk)
hoe zit het met je windows pc?? Heb je die al op het domein aangemeld?

[Verwijderd]

Als ik de pc op het domein wil aanmelden zegt win2k : " de gebruiker is niet gevonden"
Voor de rest lijkt het nog ok te gaan, alleen bij het aanmelden gaat er iets fout.

De how-to die ik gebruik is komt van : http://samba.idealx.org

de smbd.log
hier gaat het fout

[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=9) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=13) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=14) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=15) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=16) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=17) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 5] tdb/tdbutil.c:tdb_log(475)
tdb((null)): tdb_brlock failed (fd=18) at offset 4 rw_type=1 lck_type=13
[2002/10/30 09:43:22, 3] smbd/oplock.c:init_oplocks(1184)
open_oplock_ipc: opening loopback UDP socket.
[2002/10/30 09:43:22, 3] lib/util_sock.c:open_socket_in(798)
bind succeeded on port 0

[hbokh]

De W2k-machines ook een eigen account gegeven in /etc/passwd ?
Zoals hier beschreven:

http://de.samba.org/samba...O-Collection.html#AEN1324

Hier werkt het perfect! Profiles staan op de FreeBSD-server

[Verwijderd]

Ja computer heeft een trusted computer-account.
Heb al gegoogled op tdb_brlock failed maar daar word ik ook niks wijzer van
Win2k werkte ook al niet met service pack 2 dus 3 geinstalleerd maar ook dat helpt niet .

[Verwijderd]

misschien kan je dit eens volgen?

http://www.linux-mag.com/2002-02/samba_01.html

[Verwijderd]

Ja zo denk ik er ook over.
Want als ik lokaal aanlog op deze pc, naar netwerkomgeving ga en de share benader komt die netjes gebruikersnaam en wachtwoord. Dat vul je netjes in en je krijgt toegang. In de logfile zie je dan ook dat uit ldap word gelezen en wachtwoord controle enzo. En dat werkt gewoon goed, maar aanmelden op het domein dat wil gewoon niet.

[Verwijderd]

bij het aanmelden op het domein wel het samba root account gebruikt?

[Verwijderd]

Bij het aanmelden maak ik gebruik van root,martyn, of administrator. En bij alleen zegt die hetzelfde. Terwijl ze allemaal lid zijn van Domain admins. Echt een probleem om een punthoofd van te krijgen....

[Verwijderd]

dan ken ik er nog een R.T.F.M. kameraad.

[Verwijderd]

Voor de zekerheid downgrade ik debian maar van unstable/testing naar stable. Kijken of dat helpt maar ik verwacht het niet.

[Verwijderd]

Ik heb weer een nieuwe melding :

Als ik de computer lid wil maken van het domein, moet ik netjes inloggen en krijg ik deze melding op me scherm.

De volgende fout is opgetreden tijdens het lid worden van het domein idealx-nt:
Er is geen toewijziging uitgevoerd tussen accountnamen en beveiligings-ID's

Het gaat fout in de logfile bij :
init_sam_from_ldap: User [pc-marco$] does not ave a uid!

Iemand een idee ?

[_JGC_]

Heb je Samba gecompiled volgens die howto? Ik heb het destijds ook gedaan, maar meer dan een Win98 bak heb ik niet getest voor de prutsbak een andere functie kreeg.
Wat je kunt proberen is de Samba-2.2.6 release compilen, debian buildscripts zitten in de Packaging directory van de source tarball, kan je zo een DEB van bouwen.

[Verwijderd]

Heb nu de nieuwste samba geinstalleerd en geconfigureerd. Samba is nu 2.2.6. Maar ook dat mag niet baten de melding blijft hetzelfde.

De logfile:

[2002/11/06 09:25:43, 2] passdb/pdb_ldap.c:ldap_open_connection(216)
ldap_open_connection: connection opened
[2002/11/06 09:25:43, 2] passdb/pdb_ldap.c:ldap_connect_system(250)
ldap_connect_system: succesful connection to the LDAP server
[2002/11/06 09:25:43, 2] passdb/pdb_ldap.c:ldap_search_one_user(262)
ldap_search_one_user: searching for:[(&(uid=martyn)(objectclass=sambaAccount))]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [uid] = [martyn]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:init_sam_from_ldap(495)
Entry found for user: martyn
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdLastSet] = [1036481210]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [logonTime] = [0]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [logoffTime] = [0]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [kickoffTime] = [0]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdCanChange] = [0]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdMustChange] = [0]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [cn] = [martyn]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [homeDrive] = [U:]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [smbHome] = [<does not exist>]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [scriptPath] = [/home/samba/netlogon]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [profilePath] = [/home/samba/profiles/martyn]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [description] = [System User]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [userWorkstations] = [<does not exist>]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [rid] = [123]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [primaryGroupID] = [123]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [lmPassword] = [2D5545077D7B7D2AAAD3B435B51404EE]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [ntPassword] = [7C53CFA5EA7D0F9B3B968AA0FB51A3F5]
[2002/11/06 09:25:44, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [acctFlags] = [[U ]]
[2002/11/06 09:25:44, 0] smbd/service.c:make_connection(381)
make_connection: martyn logged in as admin user (root privileges)
[2002/11/06 09:28:40, 2] smbd/process.c:timeout_processing(1126)
Closing idle connection
[2002/11/06 09:28:40, 2] smbd/server.c:exit_server(461)
Closing connections
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:ldap_open_connection(216)
ldap_open_connection: connection opened
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:ldap_connect_system(250)
ldap_connect_system: succesful connection to the LDAP server
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:ldap_search_one_user(262)
ldap_search_one_user: searching for:[(&(uid=root)(objectclass=sambaAccount))]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [uid] = [root]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(495)
Entry found for user: root
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdLastSet] = [1036481116]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [logonTime] = [0]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [logoffTime] = [2147483647]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [kickoffTime] = [2147483647]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdCanChange] = [0]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdMustChange] = [2147483647]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [cn] = [root]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [homeDrive] = [U:]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [smbHome] = [\\PDC-SRV\homes]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [scriptPath] = [root.cmd]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [profilePath] = [\\PDC-SRV\profiles\root]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [description] = [System User]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [userWorkstations] = [<does not exist>]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [rid] = [3002]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [primaryGroupID] = [1201]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [lmPassword] = [50081C6A6EDD109BAAD3B435B51404EE]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [ntPassword] = [A345F400768BF5FC69A08E2E25DC9B9A]
[2002/11/06 09:28:54, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [acctFlags] = [[UX ]]
[2002/11/06 09:28:54, 0] smbd/service.c:make_connection(381)
make_connection: root logged in as admin user (root privileges)
[2002/11/06 09:28:55, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
Returning domain sid for domain IDEALX-NT -> S-1-5-21-2725307054-968510620-611186906
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:ldap_open_connection(216)
ldap_open_connection: connection opened
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:ldap_connect_system(250)
ldap_connect_system: succesful connection to the LDAP server
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:ldap_search_one_user(262)
ldap_search_one_user: searching for:[(&(uid=pc-marco$)(objectclass=sambaAccount))]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [uid] = [pc-marco$]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:init_sam_from_ldap(495)
Entry found for user: pc-marco$
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdLastSet] = [0]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [logonTime] = [0]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [logoffTime] = [2147483647]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [kickoffTime] = [2147483647]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdCanChange] = [0]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [pwdMustChange] = [2147483647]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [cn] = [pc-marco$]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [homeDrive] = [<does not exist>]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [smbHome] = [<does not exist>]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [scriptPath] = [<does not exist>]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [profilePath] = [<does not exist>]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [description] = [Computer]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(354)
get_single_attribute: [userWorkstations] = [<does not exist>]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [rid] = [3002]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:get_single_attribute(360)
get_single_attribute: [primaryGroupID] = [0]
[2002/11/06 09:28:55, 2] passdb/pdb_ldap.c:init_sam_from_ldap(593)
init_sam_from_ldap: User [pc-marco$] does not ave a uid!
[2002/11/06 09:30:55, 2] smbd/process.c:timeout_processing(1126)
Closing idle connection
[2002/11/06 09:30:55, 2] smbd/server.c:exit_server(461)
Closing connections

[Verwijderd]

Het werkt eindelijk :-D

[Verwijderd]

Verwijderd schreef op 03 December 2002 @ 13:41:
Het werkt eindelijk :-D

en hoe heb je dat voor elkaar gekregen (t.b.v. search)

[Verwijderd]

Want mijn bevindingen is gebruik geen testing of unstable packages. Tijdens het compileren en configueren lijkt alles goed te zijn, maar uiteindelijk gaat het toch net ff niet werken. Gebruik dus alleen stable. Werkt nu heel mooi.

[ Voor 5% gewijzigd door Verwijderd op 03-12-2002 14:46 ]