From: Volker Lendecke on
On Mon, Mar 29, 2010 at 11:30:00AM +0000, Johnny R wrote:
> reetings List,
> I am a newbie in this list so please be indulgent.
> I am actually about running a samba (PDC) with OpenLDAP in Debian. I
> installed it (Samba) and configured it, but it didn't still work. Here are
> some outputs:
> from *net getlocalsid*
> csiidebian:~# net getlocalsid
> [2010/03/29 17:57:33, 0] lib/smbldap.c:1086(smbldap_connect_system)
> failed to bind to server ldap://127.0.0.1 with
> dn="cn=admin,dc=csimaroc,dc=net" Error: Invalid credentials
> (unknown)
> SID for domain CSIDEBIAN is: S-1-5-21-2033656986-2476707763-2123375676
> csidebian:~#
>
> it still give me the wrong SID.
> When I tried to add or search some entry in the Ldap DB, it gave me the
> following error: "
>
> ldap_sasl_interactive_bind_s: Invalid credentials (49)", I d like to notify
> that I have the same password for samba admin and ldap admin (smbpasswd and
> slappasswd). I was been in this error since 2 weeks so please help me, it
> makes me crazy!

This might be solved by calling "smbpasswd -W" and typing in
the correct password for cn=admin,dc=csimaroc,dc=net.

Volker
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Johnny R on
Thanks Volker,
But it still won't work ...
csidebian:~# smbpasswd -W ldapadmin
Setting stored password for "cn=admin,dc=csimaroc,dc=net" in secrets.tdb
New SMB password:
Retype new SMB password:
csidebian:~# net getlocalsid
[2010/03/29 18:40:46, 0] lib/smbldap.c:1086(smbldap_connect_system)
failed to bind to server ldap://127.0.0.1 with
dn="cn=admin,dc=csimaroc,dc=net" Error: Invalid credentials
(unknown)
SID for domain CSIDEBIAN is: S-1-5-21-2033656986-2476707763-2123375676

Is there any way to verify if the connexion between samba and ldap is ok?
Actually I am reading the samba official how to.
All the best.

On Mon, Mar 29, 2010 at 11:36 AM, Volker Lendecke <Volker.Lendecke(a)sernet.de
> wrote:

> On Mon, Mar 29, 2010 at 11:30:00AM +0000, Johnny R wrote:
> > reetings List,
> > I am a newbie in this list so please be indulgent.
> > I am actually about running a samba (PDC) with OpenLDAP in Debian. I
> > installed it (Samba) and configured it, but it didn't still work. Here
> are
> > some outputs:
> > from *net getlocalsid*
> > csiidebian:~# net getlocalsid
> > [2010/03/29 17:57:33, 0] lib/smbldap.c:1086(smbldap_connect_system)
> > failed to bind to server ldap://127.0.0.1 with
> > dn="cn=admin,dc=csimaroc,dc=net" Error: Invalid credentials
> > (unknown)
> > SID for domain CSIDEBIAN is: S-1-5-21-2033656986-2476707763-2123375676
> > csidebian:~#
> >
> > it still give me the wrong SID.
> > When I tried to add or search some entry in the Ldap DB, it gave me the
> > following error: "
> >
> > ldap_sasl_interactive_bind_s: Invalid credentials (49)", I d like to
> notify
> > that I have the same password for samba admin and ldap admin (smbpasswd
> and
> > slappasswd). I was been in this error since 2 weeks so please help me,
> it
> > makes me crazy!
>
> This might be solved by calling "smbpasswd -W" and typing in
> the correct password for cn=admin,dc=csimaroc,dc=net.
>
> Volker
>



--
-----------------------------------------------------------------
|JJohnny RANDRIAMAMPIONONA |
| Phone: +212663682554 |
| National School of Applied Sciences |
| 1818 TANGIER 90000 |
|----------------------------------------------------------------|
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Volker Lendecke on
On Mon, Mar 29, 2010 at 11:43:35AM +0000, Johnny R wrote:
> Is there any way to verify if the connexion between samba and ldap is ok?
> Actually I am reading the samba official how to.
> All the best.

You might try to authenticate with ldapsearch:

ldapsearch -x -s base -b "" -h 127.0.0.1 -D cn=admin,dc=csimaroc,dc=net -w

If that doesn't work, you've not correctly configured the
admin account in LDAP. If that works fine, the problem is
somewhere between Samba and LDAP.

Volker
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba