[FUG-BR] [OT]pdc + samba + ldap

Márcio Luciano Donada mdonada em auroraalimentos.com.br
Ter Fev 1 11:20:28 BRST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bom dia,
Estou trabalha há 5 dias já em cima do pdc utilizando o samba para
autenticar numa base ldap. O servidor ldap é linux, o servidor que será
o PDC é FreeBSD. Agora a pouco finalizei as conf e estou fazendo alguns
teste. o log do smbd.log é o seguinte:

[2005/02/01 10:26:32, 0] lib/smbldap.c:smbldap_search_domain_info(1392)
~  Adding domain info for AURORA failed with NT_STATUS_UNSUCCESSFUL
[2005/02/01 10:26:32, 1] lib/smbldap.c:add_new_domain_info(1343)
~  failed to add domain dn=
sambaDomainName=AURORA,o=frigorifico-aurora,c=br with: Already exists

[2005/02/01 10:26:32, 0] lib/smbldap.c:smbldap_search_domain_info(1392)
~  Adding domain info for AURORA failed with NT_STATUS_UNSUCCESSFUL


Sei que diz que já existe, mas porque não autentica?! Alguma dica?
meu smb.conf está assim:

[global]
~        workgroup = AURORA
~        netbios name = PDC-SRV-COOP
~        server string = Cooperativa Central Oeste Catarinense
~        announce as = Windows 2003 Server

~        security = user
~        encrypt passwords = Yes

~        load printers = No

~        log file = /var/log/samba/%m.log
~        max log size = 50
~        os level = 50

~        local master = Yes
~        domain master = Yes
~        preferred master = Yes
~        domain logons = Yes

~        logon path = \\%L\profiles
~        logon drive = Z:
~        logon home = \\%L\profiles

~        #wins support = Yes
~        #wins server = 192.168.1.253
~        dns proxy = no

~        ldap passwd sync = Yes
~        ldap delete dn = Yes
~        passdb backend = ldapsam:ldap://200.193.54.10
~        ldap admin dn = cn=root,o=frigorifico-aurora,c=br
~        ldap group suffix = ou=Groups

~ ldap user suffix = ou=People
~        ldap machine suffix = ou=Computers
~        ldap suffix = o=frigorifico-aurora,c=br
~        ldap user suffix = ou=Users
~        idmap uid = 10000-15000
~        idmap gid = 10000-15000

~        nt acl support = Yes
~        create mask = 600
~        directory mask = 0700
~        force directory mode = 0700
~        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192

~       add machine script              = /usr/local/sbin/smbldap-useradd
- -w "%u"
~       add user script                 = /usr/local/sbin/smbldap-useradd
- -m "%u"
~       delete user script              = /usr/local/sbin/smbldap-userdel
"%u"
~       add group script                =
/usr/local/sbin/smbldap-groupdadd -p "%g"
~       delete gropu script             =
/usr/local/sbin/smbldap-groupdel "%g"
~       add user to group script        =
/usr/local/sbin/smbldap-groupmod -m "%u" "%g"
~       delete user from group script   =
/usr/local/sbin/smbldap-groupmod -x "%u" "%g"
~       set primary group script        = /usr/local/sbin/smbldap-usermod
- -g "%g" "%u"

~        unix charset = iso8859-1
~        display charset = cp850
[netlogon]
~        comment = Network Logon Service
~        path = /home/netlogon
~        write list = marcio, administrador
~        read only = No
~        create mask = 0777
~        force create mode = 0777
~        guest ok = Yes

[profiles]
~        comment = %u
~        path = /home/%u
~        write list = %u
~        read only = No
~        create mask = 0777
~        force create mode = 0770
~        guest ok = Yes

[files]
~        comment = Arquivos
~        path = /home/marcio
~        valid users = @users
~        write list = @users
~        read only = No
~        create mask = 0770
~        force create mode = 0770
~        force directory mode = 0770


Grato,
__
Márcio Luciano Donada
mdonada at auroraalimentos dot com dot br
FreeBSD - The uptime is mesuared in years!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB/4IcyJq2hZEymxcRAmeDAKCd/vRVujGvMiJRBlqt01uM05qXkQCgrzFD
hFWgc2NZjj21q8WKjmEwhY4=
=CyyV
-----END PGP SIGNATURE-----

_______________________________________________________________
Para enviar um novo email para a lista: freebsd em fug.com.br
Sair da Lista: http://mail.fug.com.br/mailman/listinfo/freebsd_fug.com.br
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/




Mais detalhes sobre a lista de discussão freebsd