[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Samba, LDAP Sync problem



Hi,

I search for serverals hours but dit not get the cluem why this
samba can not conntect to the LDAP server.

I tried it even with this plain non SSL/TLS connection without 
majour access restrictions, but it faild!

The LDAP is wide open!

What can I do to repair that?

Samba version:
Version 3.0.14a-Debian

LDAP version
@(#) $OpenLDAP: slapd 2.2.23 (May 30 2005 08:52:42) $
        @pulsar:/home/torsten/packages/openldap/openldap2.2-2.2.23/debian/build/servers/slapd

smb.conf (part)
    passdb backend = ldapsam:ldap://ldap
   # passdb backend = ldapsam:ldaps://ldap
   ldap suffix = dc=skole,dc=skolelinux,dc=no
   ldap user suffix = ou=People
   ldap machine suffix = ou=Machines
   ldap admin dn =
"cn=smbadmin,ou=People,dc=skole,dc=skolelinux,dc=no"
   #ldap ssl = start_tls

slapd.conf (part) 
access to *
        by dn.exact="cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no" ssf=128 =wx
        by dn.exact="cn=smbadmin,ou=People,dc=skole,dc=skolelinux,dc=no"  write
        by * read


Of course this will fail because this is the wrong password:

/usr/bin/ldapsearch -x -p 389 -h localhost -ZZ -w 'xxxx' -D 'cn=smbadmin,ou=People,dc=skole,dc=skolelinux,dc=no' -b 'uid=root,ou=People,dc=skole,dc=skolelinux,dc=no' -LLL
ldap_bind: Invalid credentials (49)

This is the right password, an that works!

tjener:/etc/ldap# /usr/bin/ldapsearch -x -p 389 -h localhost -ZZ -w 'hallo' -D 'cn=smbadmin,ou=People,dc=skole,dc=skolelinux,dc=no' -b 'uid=root,ou=People,dc=skole,dc=skolelinux,dc=no' -LLL
dn: uid=root,ou=People,dc=skole,dc=skolelinux,dc=no
objectClass: sambaSamAccount
objectClass: account
uid: root
sambaSID: S-1-5-21-1620031947-3531512261-2226742065-1000
sambaPwdCanChange: 1136557781
sambaPwdMustChange: 2147483647
sambaLMPassword: F32FAFEF08FFF512E3800B504F29D647
sambaNTPassword: E5EC03C3898E60D8D01EBD82B3DE5631
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
 00000000
sambaPwdLastSet: 1136557781
sambaAcctFlags: [U          ]

Thanks in advance!
Christian 


























Reply to: