Hi !
Thank you for the advice, it works without patch if we remove the
objectClass filter in our /etc/ldap/ldap.conf
The line was :
nss_base_passwd o=gouv,c=fr?sub?objectClass=shadowAccount
This filter was added because we didn't want to have the stations listed
by the command :
getent passwd
Is there a way to have both the domain jonction OK and not the stations
listed by getent passwd ?
The pam.d files are the ones provided by Ubuntu 10.04 LTS excepted
common-password and login.
Joël
SATOH Fumiyasu a écrit :
Hi,
At Tue, 01 Feb 2011 16:15:14 +0100,
Joël Cuissinat wrote:
We upgraded our server from samba-3.4.7 to samba-3.5.6.
But, now we can't join a station to the domain.
We always use smbldap-tools 0.9.5 with this line in smb.conf :
add machine script = /usr/sbin/smbldap-useradd -w -d /dev/null -s
/bin/false %u
In ldap logs we saw that Samba seems to search the station with :
filter="(&(objectClass=posixAccount)(uid=<station>$)(objectClass=shadowAccount))"
Samba 3.5.6 does NOT treat "shadowAccount" object class and
there is no such filter in Samba 3.5.6 source code.
I think this is your NSS and/or PAM module configuration problem.
--
Joël Cuissinat
Equipe EOLE
CETIAD Dijon
http://eole.orion.education.fr
--
_______________________________________________
Smbldap-tools-tech mailing list
[email protected]
https://mail.gna.org/listinfo/smbldap-tools-tech
