Hi, I am more or less following this tutorial Ldapsam Editposix =
http://wiki.samba.org/index.php/Ldapsam_Editposix but can't quite get my
domain to work.
I think the issue is with the idmap part of the smb.conf but can't quite
figure out what's wrong with it or what the correct format should be.
My SMB.CONF file....
#interfaces = lo0 em0 127.0.0.1
bind interfaces only = no
workgroup = GYLE
encrypt passwords = true
passdb backend = ldapsam
ldap ssl = off
security = user
local master = yes
domain master = yes
os level = 33
preferred master = yes
domain logons = yes
ldapsam:trusted=yes
ldapsam:editposix=yes
ldap admin dn = cn=admin,dc=gyle,dc=ourdomain,dc=com
ldap delete dn = yes
ldap group suffix = ou=groups
ldap machine suffix = ou=computers
ldap user suffix = ou=users
ldap suffix = dc=gyle,dc=ourdomain,dc=com
#idmap uid = 2000-4000
#idmap gid = 2000-4000
#idmap domains = DEFAULT
idmap config DEFAULT:backend = ldap
idmap config DEFAULT:readonly = no
idmap config DEFAULT:default = yes
idmap config DEFAULT:ldap_base_dn = ou=idmap,dc=gyle,dc=ourdomain,dc=com
idmap config DEFAULT:ldap_user_dn = cn=admin,dc=gyle,dc=ourdomain,dc=com
idmap config DEFAULT:ldap_url = ldap://localhost
idmap config DEFAULT:range = 50000-500000
idmap alloc backend = ldap
idmap alloc config:ldap_base_dn = ou=idmap,dc=gyle,dc=ourdomain,dc=com
idmap alloc config:ldap_user_dn = cn=admin,dc=gyle,dc=ourdomain,dc=com
idmap alloc config:ldap_url = ldap://localhost
idmap alloc config:range = 50000-500000
I've commented out the line "idmap domains = DEFAULT" as if it don't
then I get lots of warnings.
So If I start up my ldap server and import an basic schema, then do the
following.....
# smbpasswd -w secret
Setting stored password for "cn=admin,dc=gyle,dc=ourdomain,dc=com" in
secrets.tdb
#net idmap secret DEFAULT secret
Secret stored
#net idmap secret alloc secret
Secret stored
# /usr/local/libexec/winbindd
# net sam provision
Checking for Domain Users group.
Adding the Domain Users group.
Unable to allocate a new gid to create Domain Users group!
Checking for Domain Admins group.
Adding the Domain Admins group.
Unable to allocate a new gid to create Domain Admins group!
Check for Administrator account.
Adding the Administrator user.
Can't create Administrator user, Domain Admins group not available!
#cat log.winbindd-idmap
[2011/08/09 12:00:25.850065, 1]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap_ldap.c:268(idmap_ldap_alloc_init)
idmap uid or idmap gid missing
[2011/08/09 12:00:25.850452, 0]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap.c:589(idmap_alloc_init)
ERROR: Initialization failed for alloc backend, deferred!
[2011/08/09 12:00:25.852415, 0]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap.c:201(smb_register_idmap_alloc)
idmap_alloc module ldap already registered!
[2011/08/09 12:00:25.852698, 0]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap.c:201(smb_register_idmap_alloc)
idmap_alloc module tdb already registered!
[2011/08/09 12:00:25.852769, 0]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap.c:149(smb_register_idmap)
Idmap module passdb already registered!
[2011/08/09 12:00:25.852828, 0]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap.c:149(smb_register_idmap)
Idmap module nss already registered!
[2011/08/09 12:00:25.852915, 1]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap_ldap.c:268(idmap_ldap_alloc_init)
idmap uid or idmap gid missing
[2011/08/09 12:00:25.852945, 0]
/usr/obj/ports/samba-3.5.6-ldap/samba-3.5.6/source3/winbindd/idmap.c:589(idmap_alloc_init)
ERROR: Initialization failed for alloc backend, deferred!
If anyone can help then it would really be appreciated. Thanks for reading.
Oh yeah this is all being done on an OpenBSD 4.9 server running their
ldapd server.
Keith
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
