Hi, At Tue, 01 Feb 2011 16:15:14 +0100, Joël Cuissinat wrote: > We upgraded our server from samba-3.4.7 to samba-3.5.6. > > But, now we can't join a station to the domain. > > We always use smbldap-tools 0.9.5 with this line in smb.conf : > add machine script = /usr/sbin/smbldap-useradd -w -d /dev/null -s > /bin/false %u > > In ldap logs we saw that Samba seems to search the station with : > > filter="(&(objectClass=posixAccount)(uid=<station>$)(objectClass=shadowAccount))"
Samba 3.5.6 does NOT treat "shadowAccount" object class and there is no such filter in Samba 3.5.6 source code. I think this is your NSS and/or PAM module configuration problem. -- -- Name: SATOH Fumiyasu (fumiyas @ osstech co jp) -- Business Home: http://www.OSSTech.co.jp/ -- Personal Home: http://www.SFO.jp/blog/ > But, the machine accounts made by smbldap-useradd doesn't have the > shadowAccount objectClass. > > After replacing the line 602 of /usr/share/perl5/smbldap_tools.pm from : > 'objectclass' => [ 'top', 'account', 'posixAccount' ], > to : > 'objectclass' => [ 'top', 'account', 'posixAccount', 'shadowAccount' ], > the stations can join the domain ! > > Can someone confirm this problem ? > Our solution (patch on smbldap_tools.pm) is it the good one ? _______________________________________________ Smbldap-tools-tech mailing list [email protected] https://mail.gna.org/listinfo/smbldap-tools-tech
