Issue hopefully solved:

sambaUnixIdPool was missing as an object class for ou=Domains -> 
sambaDomainName
No idea why it was not implemented when populating the ldap-tree.
After I manually added it and gave values to the two required IDs 
joining a machine to a domain works.

Regards
Olaf

Olaf Zevenboom wrote:
> Hi
>
> smbldap-tools is used in smb.conf:
> add machine script = /usr/sbin/smbldap-useradd -w "%u"
>
> When I try to add a machine to the domain I see in  the logs:
> [2010/09/13 17:56:38,  0] 
> passdb/pdb_interface.c:pdb_default_create_user(336)
>   _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w 
> "vm-xp$"' gave 1
>
> Next I try to do this manual from commandline which gave significantly 
> more detailed info:
>
> gaz:/var/log/samba# /usr/sbin/smbldap-useradd -w "vm-xp$"
> Could not find base dn, to get next uidNumber at 
> /usr/share/perl5/smbldap_tools.pm line 1074.
> OZ: base: sambaDomainName=ARTEFACT,ou=Domains,dc=artefact,dc=com, 
> filter: (objectClass=sambaUnixIdPool), scope: base
> gaz:/var/log/samba#
>
> Next I did some testing:
>
> test #1 :
> I made a dump of my ldap next I issued:
> cat ldap_backup.13-09-2010.ldif |grep sambaUnix
> this came up empty
>
> test #2 :
> from script:
> adminDN="CN=admin,DC=artefact,DC=com"
> shortSB="sambaDomainName=ARTEFACT,ou=Domains,dc=artefact,dc=com"
> ldapsearch -v -x -w $PASSWORD2 \
>     -D $adminDN \
>     -b $shortSB \
>     objectClass=sambaUnixIdPool
>
> Resulting in:
> ldap_initialize( <DEFAULT> )
> filter: objectClass=sambaUnixIdPool
> requesting: All userApplication attributes
> # extended LDIF
> #
> # LDAPv3
> # base <sambaDomainName=ARTEFACT,ou=Domains,dc=artefact,dc=com> with 
> scope subtree
> # filter: objectClass=sambaUnixIdPool
> # requesting: ALL
> #
>
> # search result
> search: 2
> result: 0 Success
>
> # numResponses: 1
>
> Looking at the dump of the ldap-tree:
> dn: sambaDomainName=ARTEFACT,ou=Domains,dc=artefact,dc=com
> objectClass: sambaDomain
> sambaAlgorithmicRidBase: 1000
> sambaSID: somenumbers
> sambaDomainName: ARTEFACT
> sambaMinPwdLength: 4
> sambaLogonToChgPwd: 0
> sambaForceLogoff: -1
> structuralObjectClass: sambaDomain
> entryUUID: anID
> creatorsName: cn=admin,dc=artefact,dc=com
> createTimestamp: 20091022143634Z
> sambaPwdHistoryLength: 0
> sambaMaxPwdAge: -1
> sambaLockoutThreshold: 0
> sambaRefuseMachinePwdChange: 0
> entryCSN: 20100910162630.368949Z#000000#000#000000
> modifiersName: cn=admin,dc=artefact,dc=com
> modifyTimestamp: 20100910162630Z
>
> Indeed there is no "objectClass=sambaUnixIdPool". So there is something 
> missing somehow?
> If anyone knows why it is missing or how I fix this, please let me know.
>
> ldap-account-manager-lamdaemon        3.0.0
> smbldap-tools                         0.9.4
> samba                                 2:3.2.5
>
> Thanks in advance,
> Olaf
>
>
> ------------------------------------------------------------------------------
> Start uncovering the many advantages of virtual appliances
> and start using them to simplify application deployment and
> accelerate your shift to cloud computing.
> http://p.sf.net/sfu/novell-sfdev2dev
> _______________________________________________
> Lam-public mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/lam-public
>   


-- 
Olaf Zevenboom

Artefact Software & Consultancy
Verwersdijk 100
2611 NK Delft
Nederland
Tel: 015-2617532
verkoop: [email protected]
support: [email protected]
KvK-nummer: 232813, 223684 


------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to