veja como esta meu smbldap.conf
o SID eu peguei com o net getlocalsid
[EMAIL PROTECTED] migration]# cat /etc/smbldap-tools/smbldap.conf|grep -v "#"
SID="S-1-5-21-1583800448-1034510182-3313289156"
slaveLDAP="127.0.0.1"
slavePort="389"
masterLDAP="127.0.0.1"
masterPort="389"
ldapTLS="1"
verify="require"
cafile="/etc/smbldap-tools/ca.pem"
clientcert="/etc/smbldap-tools/smbldap-tools.pem"
clientkey="/etc/smbldap-tools/smbldap-tools.key"
suffix="dc=autototal,dc=intranet,dc=br"
usersdn="ou=People,${suffix}"
computersdn="ou=People,${suffix}"
groupsdn="ou=Groups,${suffix}"
idmapdn="ou=Idmap,${suffix}"
sambaUnixIdPooldn="sambaDomainName=auto,${suffix}"
scope="sub"
hash_encrypt="SSHA"
crypt_salt_format="%s"
userLoginShell="/bin/bash"
userHome="/home/%U"
userGecos="System User"
defaultUserGid="513"
defaultComputerGid="515"
skeletonDir="/etc/skel"
defaultMaxPasswordAge="99"
userSmbHome="\\%L\homes\%U"
userProfile="\\%L\profiles\%U"
userHomeDrive="U:"
userScript="%U.bat"
mailDomain="autototal.intranet.br"
#### smbldap_bind.conf
slaveDN="cn=root,dc=autototal,dc=intranet,dc=br"
slavePw="xxxxx"
masterDN="cn=root,dc=autototal,dc=intranet,dc=br"
masterPw="xxxxx"
---------------------------------------------------------------------------
Esta lista é patrocinada pela Conectiva S.A. Visite http://www.conectiva.com.br
Arquivo: http://bazar2.conectiva.com.br/mailman/listinfo/linux-br
Regras de utilização da lista: http://linux-br.conectiva.com.br
FAQ: http://www.zago.eti.br/menu.html