Re: [Samba] Configuration of idmap_ldap "No backend defined"
Hi, your security concerns are welcome. Well I didn't use LDAP based idmap yet, but "multiple entries returned" could be a result of your duplicate settings for "idmap config" - one with the asterisk and the second with MYDOMAIN. Please read the docs to determine which of the entries is necessary. Cheers, Christian Jon Theil Nielsen schrieb: >Hi and thanks, > >The base dn is not as shown. Might be some kind of paranoia... >I changed the smb.conf as suggested. Did not change any other file. Now >my >log shows: > >[2012/04/14 20:29:36.891125, 2] >lib/smbldap.c:1018(smbldap_open_connection) > smbldap_open_connection: connection opened >[2012/04/14 20:29:36.901600, 0] >winbindd/idmap_ldap.c:192(verify_idpool) > Multiple entries returned from (objectclass=sambaUnixIdPool) (base == >dc=example,dc=com) >[2012/04/14 20:29:36.901919, 1] >winbindd/idmap_ldap.c:516(idmap_ldap_db_init) > idmap_ldap_db_init: failed to verify ID pool (NT_STATUS_UNSUCCESSFUL) >[2012/04/14 20:29:36.903646, 5] >winbindd/idmap_ldap.c:421(idmap_ldap_close_destructor) > The connection to the LDAP server was closed >[2012/04/14 20:29:36.904039, 1] >winbindd/idmap.c:249(idmap_init_domain) > idmap initialization returned NT_STATUS_UNSUCCESSFUL > >Regards, >Jon > >On 14 April 2012 20:14, Christian Rost >wrote: > >> Hi, >> >> please check your ldap configuration in your smb.conf file. At first >> verify that your base-dn is really "dc=example,dc=com". Than remove >> "cn=Manager" from each option that contains "base_dn". >> >> As usual, make sure that your LDAP server is set up correctly and >that >> everthing works fine. Than you can connect samba to your LDAP. >> >> Cheers, >> >> Christian >> >> Jon Theil Nielsen schrieb: >> >> >Hi list, >> > >> >I can't make idmap talk to my LDAP server. And I haven't found an >> >updated >> >howto. >> > >> >Some entries from log.windbindd-imap: >> >[2012/04/13 20:05:40.500475, 5] >> >winbindd/idmap.c:153(smb_register_idmap) >> > Successfully added idmap backend 'ldap' >> >[2012/04/13 20:05:40.501112, 5] >> >winbindd/idmap.c:153(smb_register_idmap) >> > Successfully added idmap backend 'tdb' >> >[2012/04/13 20:05:40.501318, 5] >> >winbindd/idmap.c:153(smb_register_idmap) >> > Successfully added idmap backend 'passdb' >> >[2012/04/13 20:05:40.501516, 5] >> >winbindd/idmap.c:153(smb_register_idmap) >> > Successfully added idmap backend 'nss' >> >[2012/04/13 20:05:40.540035, 2] >> >lib/smbldap.c:1018(smbldap_open_connection) >> > smbldap_open_connection: connection opened >> >[2012/04/13 20:05:40.550305, 2] >> >passdb/pdb_ldap.c:2427(init_group_from_ldap) >> > init_group_from_ldap: Entry found for group: 515 >> >[2012/04/13 20:05:40.592075, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config MYDOMAIN >> >[2012/04/13 20:06:23.606655, 2] >> >passdb/pdb_ldap.c:2427(init_group_from_ldap) >> > init_group_from_ldap: Entry found for group: 548 >> >[2012/04/13 20:06:23.629123, 2] >> >passdb/pdb_ldap.c:2427(init_group_from_ldap) >> > init_group_from_ldap: Entry found for group: 1006 >> >[2012/04/13 20:06:23.632141, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config MYDOMAIN >> >[2012/04/13 20:06:23.637118, 2] >> >passdb/pdb_ldap.c:2427(init_group_from_ldap) >> > init_group_from_ldap: Entry found for group: 1005 >> >[2012/04/13 20:06:23.640003, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config MYDOMAIN >> >[2012/04/13 20:06:23.653837, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config MYDOMAIN >> >[2012/04/13 20:06:33.287504, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config MYDOMAIN >> >[2012/04/13 20:06:33.287723, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config BUILTIN >> >[2012/04/13 20:06:38.048645, 1] >> >winbindd/idmap.c:288(idmap_init_named_domain) >> > no backend defined for idmap config MYDOMAIN >> > >> >Part of my smb.conf: >> >[global] >> >ldap admin dn = cn=Manager,dc=example,dc=com >> >ldap delete dn = Yes >> >ldap group suffix = ou=Groups >> >ldap idmap suffix = ou=Idmap >> >ldap machine suffix = ou=Computers >> >ldap passwd sync = yes >> >ldap suffix = dc=example,dc=com >> >ldap user suffix = ou=People >> >ldap debug level = 1 >> >idmap config *:backend = ldap >> >idmap config *:readonly = no >> >idmap config *:range = 1000-199 >> >idmap config *:ldap_url=ldap://localhost >> >idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com >> >idmap config MYDOMAIN:backend = ldap >> >idmap config MYDOMAIN:readonly = no >> >idmap config MYDOMAIN:range = 1000-199 >> >idmap config MYDOMAIN:ldap_url=ldap://localhost >> >idmap config MYDOMAIN:ldap_base_dn = >cn=Manager,dc=example,dc=com >> >idmap config MYDOMAIN:ldap_user_dn
Re: [Samba] Configuration of idmap_ldap "No backend defined"
Hi, please check your ldap configuration in your smb.conf file. At first verify that your base-dn is really "dc=example,dc=com". Than remove "cn=Manager" from each option that contains "base_dn". As usual, make sure that your LDAP server is set up correctly and that everthing works fine. Than you can connect samba to your LDAP. Cheers, Christian Jon Theil Nielsen schrieb: >Hi list, > >I can't make idmap talk to my LDAP server. And I haven't found an >updated >howto. > >Some entries from log.windbindd-imap: >[2012/04/13 20:05:40.500475, 5] >winbindd/idmap.c:153(smb_register_idmap) > Successfully added idmap backend 'ldap' >[2012/04/13 20:05:40.501112, 5] >winbindd/idmap.c:153(smb_register_idmap) > Successfully added idmap backend 'tdb' >[2012/04/13 20:05:40.501318, 5] >winbindd/idmap.c:153(smb_register_idmap) > Successfully added idmap backend 'passdb' >[2012/04/13 20:05:40.501516, 5] >winbindd/idmap.c:153(smb_register_idmap) > Successfully added idmap backend 'nss' >[2012/04/13 20:05:40.540035, 2] >lib/smbldap.c:1018(smbldap_open_connection) > smbldap_open_connection: connection opened >[2012/04/13 20:05:40.550305, 2] >passdb/pdb_ldap.c:2427(init_group_from_ldap) > init_group_from_ldap: Entry found for group: 515 >[2012/04/13 20:05:40.592075, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config MYDOMAIN >[2012/04/13 20:06:23.606655, 2] >passdb/pdb_ldap.c:2427(init_group_from_ldap) > init_group_from_ldap: Entry found for group: 548 >[2012/04/13 20:06:23.629123, 2] >passdb/pdb_ldap.c:2427(init_group_from_ldap) > init_group_from_ldap: Entry found for group: 1006 >[2012/04/13 20:06:23.632141, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config MYDOMAIN >[2012/04/13 20:06:23.637118, 2] >passdb/pdb_ldap.c:2427(init_group_from_ldap) > init_group_from_ldap: Entry found for group: 1005 >[2012/04/13 20:06:23.640003, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config MYDOMAIN >[2012/04/13 20:06:23.653837, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config MYDOMAIN >[2012/04/13 20:06:33.287504, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config MYDOMAIN >[2012/04/13 20:06:33.287723, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config BUILTIN >[2012/04/13 20:06:38.048645, 1] >winbindd/idmap.c:288(idmap_init_named_domain) > no backend defined for idmap config MYDOMAIN > >Part of my smb.conf: >[global] >ldap admin dn = cn=Manager,dc=example,dc=com >ldap delete dn = Yes >ldap group suffix = ou=Groups >ldap idmap suffix = ou=Idmap >ldap machine suffix = ou=Computers >ldap passwd sync = yes >ldap suffix = dc=example,dc=com >ldap user suffix = ou=People >ldap debug level = 1 >idmap config *:backend = ldap >idmap config *:readonly = no >idmap config *:range = 1000-199 >idmap config *:ldap_url=ldap://localhost >idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com >idmap config MYDOMAIN:backend = ldap >idmap config MYDOMAIN:readonly = no >idmap config MYDOMAIN:range = 1000-199 >idmap config MYDOMAIN:ldap_url=ldap://localhost >idmap config MYDOMAIN:ldap_base_dn = cn=Manager,dc=example,dc=com >idmap config MYDOMAIN:ldap_user_dn = >cn=admin,ou=Idmap,dc=example,dc=com > >I'm running samba 3.6.3 on FreeBSD 9.0-RELEASE and my LDAP server seems >to >work otherwise. At least, I can do user authentication this way. > >Of course, I can provide much more information from the logs and the >configuration files. I just don't know where to start. And any help >would >be much appreciated. > >Best regards, >Jon Theil Nielsen >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba -- Dipl.-Ing. Christian Rost roCon - Informationstechnologie Ulmenstraße 45 44534 Lünen Fon: +49 2306 910 658 Fax: +48 2306 910 664 URL: www.rocon-it.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Configuration of idmap_ldap "No backend defined"
Hi and thanks, The base dn is not as shown. Might be some kind of paranoia... I changed the smb.conf as suggested. Did not change any other file. Now my log shows: [2012/04/14 20:29:36.891125, 2] lib/smbldap.c:1018(smbldap_open_connection) smbldap_open_connection: connection opened [2012/04/14 20:29:36.901600, 0] winbindd/idmap_ldap.c:192(verify_idpool) Multiple entries returned from (objectclass=sambaUnixIdPool) (base == dc=example,dc=com) [2012/04/14 20:29:36.901919, 1] winbindd/idmap_ldap.c:516(idmap_ldap_db_init) idmap_ldap_db_init: failed to verify ID pool (NT_STATUS_UNSUCCESSFUL) [2012/04/14 20:29:36.903646, 5] winbindd/idmap_ldap.c:421(idmap_ldap_close_destructor) The connection to the LDAP server was closed [2012/04/14 20:29:36.904039, 1] winbindd/idmap.c:249(idmap_init_domain) idmap initialization returned NT_STATUS_UNSUCCESSFUL Regards, Jon On 14 April 2012 20:14, Christian Rost wrote: > Hi, > > please check your ldap configuration in your smb.conf file. At first > verify that your base-dn is really "dc=example,dc=com". Than remove > "cn=Manager" from each option that contains "base_dn". > > As usual, make sure that your LDAP server is set up correctly and that > everthing works fine. Than you can connect samba to your LDAP. > > Cheers, > > Christian > > Jon Theil Nielsen schrieb: > > >Hi list, > > > >I can't make idmap talk to my LDAP server. And I haven't found an > >updated > >howto. > > > >Some entries from log.windbindd-imap: > >[2012/04/13 20:05:40.500475, 5] > >winbindd/idmap.c:153(smb_register_idmap) > > Successfully added idmap backend 'ldap' > >[2012/04/13 20:05:40.501112, 5] > >winbindd/idmap.c:153(smb_register_idmap) > > Successfully added idmap backend 'tdb' > >[2012/04/13 20:05:40.501318, 5] > >winbindd/idmap.c:153(smb_register_idmap) > > Successfully added idmap backend 'passdb' > >[2012/04/13 20:05:40.501516, 5] > >winbindd/idmap.c:153(smb_register_idmap) > > Successfully added idmap backend 'nss' > >[2012/04/13 20:05:40.540035, 2] > >lib/smbldap.c:1018(smbldap_open_connection) > > smbldap_open_connection: connection opened > >[2012/04/13 20:05:40.550305, 2] > >passdb/pdb_ldap.c:2427(init_group_from_ldap) > > init_group_from_ldap: Entry found for group: 515 > >[2012/04/13 20:05:40.592075, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config MYDOMAIN > >[2012/04/13 20:06:23.606655, 2] > >passdb/pdb_ldap.c:2427(init_group_from_ldap) > > init_group_from_ldap: Entry found for group: 548 > >[2012/04/13 20:06:23.629123, 2] > >passdb/pdb_ldap.c:2427(init_group_from_ldap) > > init_group_from_ldap: Entry found for group: 1006 > >[2012/04/13 20:06:23.632141, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config MYDOMAIN > >[2012/04/13 20:06:23.637118, 2] > >passdb/pdb_ldap.c:2427(init_group_from_ldap) > > init_group_from_ldap: Entry found for group: 1005 > >[2012/04/13 20:06:23.640003, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config MYDOMAIN > >[2012/04/13 20:06:23.653837, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config MYDOMAIN > >[2012/04/13 20:06:33.287504, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config MYDOMAIN > >[2012/04/13 20:06:33.287723, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config BUILTIN > >[2012/04/13 20:06:38.048645, 1] > >winbindd/idmap.c:288(idmap_init_named_domain) > > no backend defined for idmap config MYDOMAIN > > > >Part of my smb.conf: > >[global] > >ldap admin dn = cn=Manager,dc=example,dc=com > >ldap delete dn = Yes > >ldap group suffix = ou=Groups > >ldap idmap suffix = ou=Idmap > >ldap machine suffix = ou=Computers > >ldap passwd sync = yes > >ldap suffix = dc=example,dc=com > >ldap user suffix = ou=People > >ldap debug level = 1 > >idmap config *:backend = ldap > >idmap config *:readonly = no > >idmap config *:range = 1000-199 > >idmap config *:ldap_url=ldap://localhost > >idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com > >idmap config MYDOMAIN:backend = ldap > >idmap config MYDOMAIN:readonly = no > >idmap config MYDOMAIN:range = 1000-199 > >idmap config MYDOMAIN:ldap_url=ldap://localhost > >idmap config MYDOMAIN:ldap_base_dn = cn=Manager,dc=example,dc=com > >idmap config MYDOMAIN:ldap_user_dn = > >cn=admin,ou=Idmap,dc=example,dc=com > > > >I'm running samba 3.6.3 on FreeBSD 9.0-RELEASE and my LDAP server seems > >to > >work otherwise. At least, I can do user authentication this way. > > > >Of course, I can provide much more information from the logs and the > >configuration files. I just don't know where to start. And any help > >would > >be much appreciated. > > > >Best regards, > >Jon Theil Nielsen > >-- > >To unsubscribe from this list go to the following URL an
[Samba] Configuration of idmap_ldap "No backend defined"
Hi list, I can't make idmap talk to my LDAP server. And I haven't found an updated howto. Some entries from log.windbindd-imap: [2012/04/13 20:05:40.500475, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'ldap' [2012/04/13 20:05:40.501112, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'tdb' [2012/04/13 20:05:40.501318, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'passdb' [2012/04/13 20:05:40.501516, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'nss' [2012/04/13 20:05:40.540035, 2] lib/smbldap.c:1018(smbldap_open_connection) smbldap_open_connection: connection opened [2012/04/13 20:05:40.550305, 2] passdb/pdb_ldap.c:2427(init_group_from_ldap) init_group_from_ldap: Entry found for group: 515 [2012/04/13 20:05:40.592075, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config MYDOMAIN [2012/04/13 20:06:23.606655, 2] passdb/pdb_ldap.c:2427(init_group_from_ldap) init_group_from_ldap: Entry found for group: 548 [2012/04/13 20:06:23.629123, 2] passdb/pdb_ldap.c:2427(init_group_from_ldap) init_group_from_ldap: Entry found for group: 1006 [2012/04/13 20:06:23.632141, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config MYDOMAIN [2012/04/13 20:06:23.637118, 2] passdb/pdb_ldap.c:2427(init_group_from_ldap) init_group_from_ldap: Entry found for group: 1005 [2012/04/13 20:06:23.640003, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config MYDOMAIN [2012/04/13 20:06:23.653837, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config MYDOMAIN [2012/04/13 20:06:33.287504, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config MYDOMAIN [2012/04/13 20:06:33.287723, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config BUILTIN [2012/04/13 20:06:38.048645, 1] winbindd/idmap.c:288(idmap_init_named_domain) no backend defined for idmap config MYDOMAIN Part of my smb.conf: [global] ldap admin dn = cn=Manager,dc=example,dc=com ldap delete dn = Yes ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=example,dc=com ldap user suffix = ou=People ldap debug level = 1 idmap config *:backend = ldap idmap config *:readonly = no idmap config *:range = 1000-199 idmap config *:ldap_url=ldap://localhost idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com idmap config MYDOMAIN:backend = ldap idmap config MYDOMAIN:readonly = no idmap config MYDOMAIN:range = 1000-199 idmap config MYDOMAIN:ldap_url=ldap://localhost idmap config MYDOMAIN:ldap_base_dn = cn=Manager,dc=example,dc=com idmap config MYDOMAIN:ldap_user_dn = cn=admin,ou=Idmap,dc=example,dc=com I'm running samba 3.6.3 on FreeBSD 9.0-RELEASE and my LDAP server seems to work otherwise. At least, I can do user authentication this way. Of course, I can provide much more information from the logs and the configuration files. I just don't know where to start. And any help would be much appreciated. Best regards, Jon Theil Nielsen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
