[expert] Samba-LDAP : Adding machines automatically

[Jim C]

Arrgh!  My Samba-LDAP setup won't add machines automatically any more 
and I've spent all day today trying to find the bug.

Prelim stuff checks to make sure it isn't something other than Samba-LDAP:

The setting in dhcpd.conf appears to be correct:

       host kaliklak
       {
       hardware ethernet 00:e0:7d:d1:23:26;
       fixed-address 192.168.1.251;
       }
(Note: I'm using fixed addresses but I am handing them out with dhcp for 
reasons having to do with MOSIX)

...looks OK.



DNS Setting in /var/named/microverse.net.db

kaliklak        IN A 192.168.1.251

...looks OK.



DNS Setting in  /var/named/192.168.1.rev

251     IN PTR kaliklak.

...looks OK.

Settings in /etc/hosts:

192.168.1.252           spartack.microverse.net spartack
127.0.0.1               localhost.localdomain localhost
192.168.1.17            sandrock.microverse.net sandrock
192.168.1.253           enigma.microverse.net enigma ldap.microverse.net 
ftp.microverse.net www.microverse.net mail.microverse.net
192.168.1.251           kaliklak.microverse.net kaliklak

This looks fine to me also.

When I try to add kaliklak to the domain, tail -f /var/log/messages gives:

Jul  5 21:55:09 enigma smbd[22629]: [2003/07/05 21:55:09, 0] 
passdb/pdb_ldap.c:ldap_connect_system(316)
Jul  5 21:55:09 enigma smbd[22629]:   ldap_connect_system: Binding to 
ldap server as "cn=root,dc=microverse,dc=net"
Jul  5 21:55:09 enigma smbd[22629]: [2003/07/05 21:55:09, 0] 
passdb/pdb_ldap.c:ldap_connect_system(316)
Jul  5 21:55:09 enigma smbd[22629]:   ldap_connect_system: Binding to 
ldap server as "cn=root,dc=microverse,dc=net"
Jul  5 21:55:09 enigma smbd[22629]: [2003/07/05 21:55:09, 0] 
passdb/pdb_ldap.c:pdb_getsampwnam(940)
Jul  5 21:55:09 enigma smbd[22629]:   LDAP search 
"(&(uid=kaliklak_)(objectclass=sambaAccount))" returned 0 entries.
Jul  5 21:55:09 enigma smbd[22629]: [2003/07/05 21:55:09, 0] 
rpc_server/srv_netlog_nt.c:get_md4pw(176)
Jul  5 21:55:09 enigma smbd[22629]:   get_md4pw: Workstation kaliklak$: 
no account in domain
Jul  5 21:55:10 enigma smbd[22630]: [2003/07/05 21:55:10, 0] 
passdb/pdb_ldap.c:ldap_connect_system(316)
Jul  5 21:55:10 enigma smbd[22630]:   ldap_connect_system: Binding to 
ldap server as "cn=root,dc=microverse,dc=net"
Jul  5 21:55:10 enigma smbd[22630]: [2003/07/05 21:55:10, 0] 
passdb/pdb_ldap.c:ldap_connect_system(316)
Jul  5 21:55:10 enigma smbd[22630]:   ldap_connect_system: Binding to 
ldap server as "cn=root,dc=microverse,dc=net"
Jul  5 21:55:10 enigma smbd[22630]: [2003/07/05 21:55:10, 0] 
passdb/pdb_ldap.c:pdb_getsampwnam(940)
Jul  5 21:55:10 enigma smbd[22630]:   LDAP search 
"(&(uid=kaliklak_)(objectclass=sambaAccount))" returned 0 entries.
Jul  5 21:55:10 enigma smbd[22630]: [2003/07/05 21:55:10, 0] 
rpc_server/srv_samr_nt.c:_api_samr_create_user(1929)
Jul  5 21:55:10 enigma smbd[22630]:   User kaliklak$ does not exist in 
system password file (usually /etc/passwd). Cannot add account without a 
valid local system user.

Adding a machine from the command line (using smbldap tools) is no 
problem.  The workstation adds just fine and shows up
in gq with no problems.

Tried resetting ACLs to be identical to the files we have spec'd out on 
the site... no dice.

# This is a good place to put slapd access-control directives
access to dn=".*,dc=microverse,dc=net" 
attr=userPassword,lmPassword,ntPassword
       by dn="cn=root,dc=microverse,dc=net" write
       by self write
       by * auth

access to dn=".*,dc=microverse,dc=net" attr=mail
       by dn="cn=root,dc=microverse,dc=net" write
       by self write
       by * read
access to dn=".*,ou=People,dc=microverse,dc=net"
       by * read
access to dn=".*,dc=microverse,dc=net"
       by self write
       by * read
I'm at the end of my rope here.



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com