Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-17 Thread Andrew Bartlett
On Thu, 2008-07-03 at 16:04 -0400, Charlie wrote: On Thu, Jul 3, 2008 at 2:54 PM, Charlie [EMAIL PROTECTED] wrote: The most common problem I see with busted referrals is when someone sets up a program (such as samba) to use the local replica's rootdn/rootpw as defined in /etc/slapd.conf

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-03 Thread jakjr
I looked at samba code and I found this: while (another_ldap_try(ldap_state, rc, attempts, endtime)) { rc = ldap_modify_s(ldap_state-ldap_struct, utf8_dn, attrs); if (rc != LDAP_SUCCESS) { char *ld_error =

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-03 Thread Volker Lendecke
On Thu, Jul 03, 2008 at 10:05:07AM -0300, jakjr wrote: I looked at samba code and I found this: Can you send sample code how this should be done. AFAIK the LDAP libs should take care of this. That's the whole point of having the rebind_proc stuff around. Volker pgpyddTOIg0wG.pgp Description:

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-03 Thread jakjr
Yes! rebind_proc should be call if the error return by openldap was Referral. I'm not a developer and can't help much with this. Sorry. João Alfredo On Thu, Jul 3, 2008 at 10:12 AM, Volker Lendecke [EMAIL PROTECTED] wrote: On Thu, Jul 03, 2008 at 10:05:07AM -0300, jakjr wrote: I looked at

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-03 Thread Volker Lendecke
On Thu, Jul 03, 2008 at 10:18:58AM -0300, jakjr wrote: Yes! rebind_proc should be call if the error return by openldap was Referral. Then if you don't provide the sniff I have asked for the developers can not be of much help. Please also check your /etc/ldap.conf (or so) for the setting of

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-03 Thread Charlie
On Thu, Jul 3, 2008 at 9:12 AM, Volker Lendecke [EMAIL PROTECTED] wrote: Can you send sample code how this should be done. AFAIK the LDAP libs should take care of this. That's the whole point of having the rebind_proc stuff around. I believe that the OpenLDAP libraries have been able to chase

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-03 Thread Charlie
On Thu, Jul 3, 2008 at 2:54 PM, Charlie [EMAIL PROTECTED] wrote: The most common problem I see with busted referrals is when someone sets up a program (such as samba) to use the local replica's rootdn/rootpw as defined in /etc/slapd.conf (which allows bypassing ACLs and whatnot) but does not

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread Volker Lendecke
On Wed, Jul 02, 2008 at 10:08:19AM -0300, jakjr wrote: Hello, I'm trying to config samba to use a openldap replica (slave) base. Every thing is working, except when I try to join a machine to a domain. Samba try to write some attributes in openldap, but this database (slave) is

RE: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread L.P.H. van Belle
i suggest setting up ldap syncrepl if needed you can use it in multi master mode. ( im running also etch, with pdc and bdc + 1 ldap master and 4 slaves. ) Louis -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens jakjr Verzonden: woensdag 2 juli 2008

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread jakjr
Hey, When I try to join a new machine on a domain, it's simple fail. I already set the ldap replication sleep to a higher value, but this do not work. I'm using synrepl on ldap (refreshAndPersist) and this is working. Including the referral return if the updateref config on slapd.conf. Thanks

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread Tomasz Chmielewski
jakjr schrieb: Hey, When I try to join a new machine on a domain, it's simple fail. I already set the ldap replication sleep to a higher value, but this do not work. I'm using synrepl on ldap (refreshAndPersist) and this is working. Including the referral return if the updateref config on

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread jakjr
I'm using a thitd-party software to create the accounts in the ldap. But the problem is when I try to include this machine (the entry of this machine already exist in ldap) in my samab domain using a ldap-replica (read-only). Samba try to modify some atributes in the slave (read-only), the slave

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread Tomasz Chmielewski
jakjr schrieb: I'm using a thitd-party software to create the accounts in the ldap. But the problem is when I try to include this machine (the entry of this machine already exist in ldap) in my samab domain using a ldap-replica (read-only). Samba try to modify some atributes in the slave

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread jakjr
No. Samba does not create any account in ldap (users or machines). This accounts are created by another software, like (phpSambaAdmin). smb.conf: [global] workgroup = caresl netbios name = scaresmb03 ldap admin dn = uid=smb--admin,dc** ldap suffix = ou=test,dc=* ldap passwd

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread jakjr
Hey, Here another log: Samba try to change some atributes, like sambaNTPassword (gree) and ldap return an error (red) and a referral for the mastes ldap. But samba do not follow this referral. Why samba try to change this atributes ?? Thanks. [2008/07/02 16:36:32, 10]

Re: [Samba] samba + slave OpenLdap (read-only)

2008-07-02 Thread Volker Lendecke
On Wed, Jul 02, 2008 at 04:47:42PM -0300, jakjr wrote: Hey, Here another log: Samba try to change some atributes, like sambaNTPassword (gree) and ldap return an error (red) and a referral for the mastes ldap. But samba do not follow this referral. Why samba try to change this atributes