Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Henrik Dige Semark
Dos the PDC have to join the domain also? When I try to join my PDC to its domain with net join I get the following error. Enter root's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE The netbios name for my PDC is

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Gaiseric Vandal
Try using net ... -U Administrator instead, since root is not by default a member of the domain admin group. This presumes you have created the Administrator account in samba, created the domain admins group and setup the approp group mapping for key groups (domain admins, domain users

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Henrik Dige Semark
I have just tried with net join -U Admin and I get the same error as before. # net join -U Admin Enter admin's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE Ldap search for Admin: # ldapsearch -x -h 127.0.0.1 -p

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Dale Schroeder
Did you remember to run smbpasswd -W? Sometimes you have to add the -S switch for the join to work. net rpc join -S pdc -U root Dale On 01/27/2010 2:33 PM, Henrik Dige Semark wrote: I have just tried with net join -U Admin and I get the same error as before. # net join -U Admin Enter

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Henrik Dige Semark
I have remembered to run smbpassd -W, and I still get the same error when I try with -S pdc on net join command. I can see that LDAP is activated, and that samba is doing something, but it seams like the answer is disappear on the way back. Samba have initialised my LDAP with its SID and RID's,

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Gaiseric Vandal
Sorry, should be Administrator Verify the user exists in samba with pdbedit -Lv Administrator and that group mapping is setup. # net groupmap list | grep Domain Admins Domain Admins (S-1-5-21-x-512) - Domain Admins # The unix group name (on the right side of the mapping) may not

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-27 Thread Henrik Dige Semark
My admin account is called Admin: # pdbedit -Lv Admin INFO: Current debug levels: all: True/256 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0

Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-26 Thread Gaiseric Vandal
On 01/25/10 16:23, Henrik Dige Semark wrote: I have a serous problem. I have for some time now tried to get an SAMBA based Domain Controller working. I have tried with OpenLDAP and tdbsam as backend, but I get the same error every time. I wood prefer to use LDAP as my backend. I have read

[Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-25 Thread Henrik Dige Semark
I have a serous problem. I have for some time now tried to get an SAMBA based Domain Controller working. I have tried with OpenLDAP and tdbsam as backend, but I get the same error every time. I wood prefer to use LDAP as my backend. I have read tons of how-to SAMBA + LDAP, but non of the seams