Re: Samba als PDC

[Boris Höffgen <borish@hjdt.de>]

Stefan Bauer schrieb:

Boris Höffgen schrieb:
  

Bei Benutzern gibt er Informationen aus. Bei den Trust Accounts 
(Maschinenkonten) kommt:
ldapsam_getsampwnam: Unable to locate user [client1$] count=0
Username not found!
Woran kann das liegen?
    

Ich vermute, dass es beim Mapping zwickt. pdbedit frägt ja bestimmte
Einträge im LDAP-Baum ab. Hier scheint die Zuordnung nicht zu stimmen.
Interessant wäre die smb.conf bzw. dort die relevanten Einstellungen.

Gruß

  

Gut, dann nachfolgend der Global-Teil der smb.conf:

[global]
   dos charset = 850
   unix charset = UTF-8
   display charset = UTF-8
   unix charset = UTF-8
   panic action = "" %d
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = 127.0.0.1, eth2
   bind interfaces _only_ = Yes
   hosts allow = 132.92.8.0/255.255.255.224,10.0.0.0/255.255.255.0
   profile acls = Yes
   use sendfile = no
   large readwrite = no
   max xmit = 16644
   workgroup = wg
   server string = %h PDC
   netbios name = fs1
   load printers = yes
   printcap name = /etc/printcap
   printing = cups
   printcap cache time = 750
   cups options = raw
   winbind nested groups = no
   log level = 5
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog _only_ = no
   syslog = 0
   dns proxy = yes
   security = user
   encrypt passwords = true
   passdb backend = ldapsam:ldap://132.92.8.4/
   pam password change = Yes
   passwd chat debug = yes
   update encrypted = Yes
     add user script = /usr/sbin/smbldap-useradd -m -a "%u"
     delete user script = /usr/sbin/smbldap-userdel "%u"
     add group script = /usr/sbin/smbldap-groupadd -p "%g"
     delete group script = /usr/sbin/smbldap-groupdel "%g"
     add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
     delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
     set primary group script = /usr/sbin/smbldap-usermod -g "%u" "%g"
     add machine script = /usr/sbin/smbldap-useradd -g maschine -w "%u"
     ldap admin dn = cn=root,dc=xxxx,dc=de
     ldap delete dn = Yes
     ldap user suffix = ou=Users
     ldap group suffix = ou=Groups
     ldap machine suffix = ou=Machines
     ldap passwd sync = Yes
     ldap suffix = dc=xxxx,dc=de
     ldap ssl = no
     host msdfs = Yes
   name resolve order = wins lmhosts hosts bcast
   username map = /etc/samba/smbusers
   map to guest = Bad User
   time server = yes
   admin users = root, Administrator
    # logon path teilt Samba mit, wo die Windows NT/2000/XP-Roaming-Profile abgelegt werden
    logon path = \\%L\profiles\xp\%U
    logon script = logon.bat
    logon drive = Z:
    # logon home wird verwendet, um das Home-Verzeichnis sowie den Ablageort
    # der Windows 95/98/Me-Roaming-Profile festzulegen
    logon home = \\%L\profiles\98\%U
    #
    local master = yes
    os level = 255
    domain master = yes
    domain logons = yes
    preferred master = yes
    wins support = yes
    dns proxy = yes
   obey pam restrictions = yes

Ich stehe wie Ochs vor dem Berg. Vielleicht sieht ja jemand das Problem. Danke!

Gruß