Re: PDC/BDC + OpenLDAP: Problem bei Eintritt in Domäne

["M. Hagedorn" <hagedorn.michael@lycos.de>]

> Wie sieht denn die Config von server1 aus?
Kommt unten...
>
> [...]
>
> >         add machine script = /daten/admin/config/includes/ldap_addmachine
> > %u #add machine script = /usr/sbin/useradd -s /bin/false %u
>
> Hast Du hier gefummelt?
Nein, es ist von Slixs so vorgesehen. Der Eintrag war seit der 
Grundinstallation so...

[...]
> Ihr tut komische Dinge.
Warum komisch? Notwendig ...


Also nochmal *fast* das gleiche:
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

# SERVER 1

#smb.conf
#2000-2004 slix's
#documentation www.slixs.at
# Global parameters

[global]
        workgroup = schule
        netbios name = server1
        server string = Samba-PDC
        encrypt passwords = Yes
        update encrypted = Yes
        password level = 4
        log level = 2
        log file = /var/log/samba/log.%m
        max log size = 50
        deadtime = 255
        unix charset = ISO8859-1

        username map = /etc/samba/smbusers
        admin users = root, @gr-admin

        deadtime = 225
        add machine script = /daten/admin/config/includes/ldap_addmachine %u
        #add machine script = /usr/sbin/useradd -s /bin/false %u
        logon script = %G.bat
        logon drive = H:
        logon home = \\server2\%U

        domain logons = Yes
# os level groesser als auf BDC!
        os level = 80
        domain master = Yes ldap
        preferred master = auto

        passdb backend = ldapsam:ldap://localhost
        ldap suffix = dc=schule,dc=local
        ldap admin dn = cn=root,dc=schule,dc=local
        ldap filter = "(&(uid=%u))"
        ldap machine suffix = ou=computers
        ldap user suffix = sambaDomainName=schule
        ldap group suffix = ou=groups

        ldap delete dn = no
        ldap ssl = off

        ldap passwd sync = yes

        printing = CUPS
        printcap name = CUPS
        load printers = yes
        socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY 
SO_SNDBUF=4096 SO_RCVBUF=4096
        wins support = yes

        public = no
        browseable = no
        read only = no


[homes]
        comment = Freigabe des Home-Verzeichnisses
        valid users = %U, root, @gr-admin
        write list = %U, root, @gr-admin
        preexec =  /usr/sbin/quota-abfrage.sh %g %u %m

        max connections = 1

        # Mitloggen, wer sich wann wo eingeloggt hat:
        root preexec = echo "Logon am %T als %U an %m" 
>> /var/log/samba/info.log
        root postexec = echo "Logoff am %T als %U an %m" 
>> /var/log/samba/info.log
        postexec = find /daten/gemeinsam -amin +120 -user %U -type f -exec rm 
{} \;

        
[netlogon]
        comment = netlogon
        path = /etc/samba/netlogon
        write list = root, @gr-admin

[... weitere Shares ...]