Hello!
I'm trying to join a Windows XP (64 bit version) machine to a Samba
3.0.21a domain via smbldap-tools 0.9.1 on FreeBSD 6.0-RELEASE-p4 and I'm
continually getting the message The user name could not be found.
I am attempting to join using members of the Domain Admins group (mapped
to Unix group 515), and I'm noticing in the logs (below) that even
though the machine successfully authenticates as that user, it tries the
domain Administrator account anyhow.
When attempting to join using the domain Administrator account, it fails
with the same error.
I have included my smb.conf as well as the smbtools.conf below as well,
and would greatly appreciate any assistance that I could get with this.
Thanks!
--
Anthony Chavez http://anthonychavez.org/
mailto:[EMAIL PROTECTED] jabber:[EMAIL PROTECTED]
--8---cut here---start-8---
[2006/03/06 14:49:45, 2] lib/smbldap.c:smbldap_open_connection(722)
smbldap_open_connection: connection opened
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
init_sam_from_ldap: Entry found for user: acc
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
init_group_from_ldap: Entry found for group: 512
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
init_group_from_ldap: Entry found for group: 544
[2006/03/06 14:49:45, 2] auth/auth.c:check_ntlm_password(307)
check_ntlm_password: authentication for user [acc] - [acc] - [acc]
succeeded
[2006/03/06 14:49:45, 0] lib/debug.c:reopen_logs(597)
Unable to open new log file /var/log/samba/log.myhost: Permission denied
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
init_sam_from_ldap: Entry found for user: Administrator
[2006/03/06 14:49:45, 2] auth/auth.c:check_ntlm_password(307)
check_ntlm_password: authentication for user [Administrator] -
[Administrator] - [Administrator] succeeded
[2006/03/06 14:49:45, 2] smbd/server.c:exit_server(614)
Closing connections
[2006/03/06 14:49:45, 2] lib/smbldap.c:smbldap_open_connection(722)
smbldap_open_connection: connection opened
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
init_sam_from_ldap: Entry found for user: acc
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
init_group_from_ldap: Entry found for group: 512
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
init_group_from_ldap: Entry found for group: 544
[2006/03/06 14:49:45, 2] auth/auth.c:check_ntlm_password(307)
check_ntlm_password: authentication for user [acc] - [acc] - [acc]
succeeded
[2006/03/06 14:49:45, 0] lib/debug.c:reopen_logs(597)
Unable to open new log file /var/log/samba/log.myhost: Permission denied
[2006/03/06 14:49:45, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
init_sam_from_ldap: Entry found for user: Administrator
[2006/03/06 14:49:45, 2] auth/auth.c:check_ntlm_password(307)
check_ntlm_password: authentication for user [Administrator] -
[Administrator] - [Administrator] succeeded
[2006/03/06 14:49:45, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2610)
Returning domain sid for domain MYDOMAIN - S-MYSID
[2006/03/06 14:49:46, 2] smbd/server.c:exit_server(614)
Closing connections
--8---cut here---end---8---
--8---cut here---start-8---
# Global parameters
[global]
workgroup = MYDOMAIN
server string = MYDOMAIN Master Server
interfaces = lo0, fxp0
bind interfaces only = Yes
socket options = TCP_NODELAY
log level = 2
log file = /var/log/samba/log.%m
max log size = 50
logon drive = Z:
logon home = \\%N\%U
logon path = \\%N\profiles\%U
logon script = %U.bat
domain logons = Yes
wins support = Yes
os level = 34
time server = Yes
printing = cups
printcap name = cups
show add printer wizard = No
idmap backend = ldap:ldapi://%2fvar%2frun%2fopenldap%2fldapi/
idmap uid = 64512-65532
idmap gid = 64512-65532
### winbind nested groups = Yes
### winbind use default domain = Yes
enable privileges = Yes
template homedir = /home/%U
template shell = /usr/sbin/nologin
passdb backend = ldapsam:ldapi://%2fvar%2frun%2fopenldap%2fldapi/
ldap passwd sync = Yes
ldap suffix = dc=mydomain,dc=com
ldap machine suffix = ou=Users
ldap user suffix = ou=Users
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=Manager,dc=mydomain,dc=com
ldap timeout = 5
add user script = /usr/local/sbin/smbldap-useradd -m %u
delete user script = /usr/local/sbin/smbldap-userdel %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g
delete group script = /usr/local/sbin/smbldap-groupdel %g
add user to
