Re: [Samba] Samba+Ldap problems

2009-06-03 Thread dogbert
Ok, a little update on this issue. I've changed the various common-* within /etc/pam.d and I've obtained the following. Now I can connect with ssh or su with a user defined in ldap as long as this user is present also in /etc/passwd. It seems that the system check for the user account in /etc/pa

Re: [Samba] Samba+Ldap problems

2009-06-03 Thread dogbert
Thanks Oliver, I will check all the files in /etc/pam.d My problems are with samba, but after a little troubleshooting I think that some of them are originated at PAM/Ldap level, so I'm checking this first. I've followed the guide taken from Ubuntu site: https://help.ubuntu.com/8.10/serverguide/C/

[Samba] Samba+Ldap problems

2009-06-03 Thread dogbert
I'm trying to trobuleshoot my previuos problem from the basics. I've a box setup with Ubuntu, samba and ldap. I have a lot of problems with user authentications. I'm checking if LDAP and PAM ar working together. I've added an user to ldap with smbldap-useradd command (as posix account) and I'm try

Re: [Samba] Users can't login on Samba+Ldap

2009-05-29 Thread dogbert
Hi again, I've tested the configuration suggested and found some other problems. After applying the changes to ldap.conf I obtained again that users could logon only to workstation that already had their profile on it (i.e. pc where they already logon in the past). Also I discovered the following

Re: [Samba] Users can't login on Samba+Ldap

2009-05-19 Thread dogbert
Miguel Medalha wrote: > Based on your smb.conf, you must have the following entries in > /etc/ldap.conf > > nss_base_passwdou=Users,dc=DOMAIN,dc=IT?one > nss_base_passwdou=Computers,dc=DOMAIN,dc=IT?one > nss_base_shadowou=Users,dc=DOMAIN,dc=IT?one > nss_base_group

Re: [Samba] Users can't login on Samba+Ldap

2009-05-12 Thread dogbert
Yes, but I'd like to keep the minimal user configurations in /etc/passwd to allow system maintenance (root and a few local users). All the users related to the microsoft network will reside on ldap. Do you think that having all that users and machines in that directive can be problematic ? Tha

Re: [Samba] Users can't login on Samba+Ldap

2009-05-12 Thread dogbert
Yes, I followed the guides at Ubuntu site: https://help.ubuntu.com/8.10/serverguide/C/network-authentication.html and it included the installation of libnss_ldap François Legal wrote: Did you install the libnss_ldap package ? On Mon, 11 May 2009 23:32:00 +0200, dogbert wrote: Adam Williams

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
Adam Williams wrote: can you post your /etc/nsswitch.conf? # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file.

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
sibility, I did not have to modify ldap.conf at all for this to work. Here are two different approaches to making this work. They might possibly fill in some of the blanks. https://help.ubuntu.com/community/OpenLDAP-SambaPDC-OrgInfo-Posix http://wiki.makethemove.net/index.php?title=LDAP-Samba

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
I've found somewhere (I'm looking again for the document) that from a certain version it doesn't need anymore the file libnss_ldap.conf/secret because it's all configured from ldap.conf/secret (and I don't have libnss_ldap files). Anyway I checked with the getent command and I obtain only entri

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
Is this the section that has to be configured in ldap.conf? #nss_base_passwdou=People,dc=padl,dc=com?one #nss_base_shadowou=People,dc=padl,dc=com?one #nss_base_group ou=Group,dc=padl,dc=com?one #nss_base_hosts ou=Hosts,dc=padl,dc=com?one #nss_base_services ou=S

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
ADAM and BERENICE are fake username (I had to cover real username and domain informations before posting) > > is ADAM the username of a user or a machine account? > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
sorry... forgot to crosspost answer to the list: I'm checking /etc/ldap.conf and it seems that at the end of this file it was added a line with the following directive: nss_initgroups_ignoreusers that included more or less every single entry contained in my /etc/passwd file at the time of the lda

Re: [Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
Yes, this is the [GLOBAL] section of my smb.conf [global] dos charset = 850 unix charset = ISO8859-1 workgroup = DOMAIN.IT server string = SERVERNAME map to guest = Bad User passdb backend = ldapsam:ldap://localhost/ syslog = 0 log fi

[Samba] Users can't login on Samba+Ldap

2009-05-11 Thread dogbert
Hi, I've migrated from an old samba installation (Samba as PDC) that used TDB backend for password. I've setup a box with ubuntu and samba 3 + ldap and I imported the old users. Old users works fine. I have problems with new users and machines. Old users works but they don't show up with smblda

[Samba] Migrating Samba PDC from one server to another

2009-02-23 Thread dogbert
Hi All, I'm in the need to migrate a PDC based on samba 3 with TDB backend (on a Fedora 8 Box) onto a new server (based on Ubuntu server 8.10). Il call them OLD and NEW from now on. I've tried to install the new server with LDAP module for authentication (following the documents found on ubuntu s