Re: [Samba] Samba unable to bind to LDAP server

2007-11-16 Thread Steve Brown
> > 2) Is there a way to make Samba use the PAM / NSS mechanism that is > > already working? > > Yes, but you would need another passdb backend then. Which passdb backend would I need to use in this case? Perhaps I should just start over with an explanation of my environment. We run a largely Ma

Re: [Samba] Samba unable to bind to LDAP server

2007-11-16 Thread Roel van Meer
Steve Brown writes: I've spent the last several days trying to get Samba to bind to our OpenDirectory server for user authentication with no success. Whenever I try start Samba, it complains that the connection to the LDAP server failed with invalid credentials. I am authenticating other servic

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread John Drescher
On Nov 15, 2007 11:42 AM, Steve Brown <[EMAIL PROTECTED]> wrote: > > I see. PAM/NSS uses an anonymous bind and does this as read only I believe. > > So can I configure Samba to do an anonymous bind? > BTW, Here is what I have in my ldap config for samba: [global] passdb backend = ldapsam:"

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Steve Brown
> I see no smbpasswd -w ;o) Its there: $ sudo tdbdump /usr/local/private/secrets.tdb { key(58) = "SECRETS/LDAP_BIND_PW/uid=diradmin,dc=vpn,dc=a3dauto,dc=com" data(7) = "mypass\00" } Now I don't know where the \00 comes from. Is that just something that the tdb adds and Samba is smart enough to

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Steve Brown
> Have you copied something wrong? Yup, I did: $ sudo tdbdump /usr/local/private/secrets.tdb { key(45) = "SECRETS/LDAP_BIND_PW/dc=vpn,dc=a3dauto,dc=com" data(7) = "mypass\00" } { key(58) = "SECRETS/LDAP_BIND_PW/uid=diradmin,dc=vpn,dc=a3dauto,dc=com" data(7) = "mypass\00" } Both entries are there

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Ludek Finstrle
Thu, Nov 15, 2007 at 10:03:30AM -0600, Steve Brown napsal(a): > > I see no smbpasswd -w ;o) I'm sorry. You wrote you use smbpasswd -W ... > Its there: > > $ sudo tdbdump /usr/local/private/secrets.tdb > { > key(58) = "SECRETS/LDAP_BIND_PW/uid=diradmin,dc=vpn,dc=a3dauto,dc=com" > data(7) = "mypas

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Steve Brown
> > $ sudo tdbdump /usr/local/private/secrets.tdb > > { > > key(45) = "SECRETS/LDAP_BIND_PW/dc=vpn,dc=a3dauto,dc=com" > > data(7) = "mypass\00" > > } > > > I believe this one will not connect to the ldap server because you are > not specfying the uid or cn to conncet with. I would expect that to h

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread John Drescher
> > I see. PAM/NSS uses an anonymous bind and does this as read only I believe. > > So can I configure Samba to do an anonymous bind? > I have never tried that. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Steve Brown
> I see. PAM/NSS uses an anonymous bind and does this as read only I believe. So can I configure Samba to do an anonymous bind? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread John Drescher
> I would expect that to happen also, but that is how the PAM/NSS is > configured, so I would expect it to be the same. > I see. PAM/NSS uses an anonymous bind and does this as read only I believe. -- John M. Drescher -- To unsubscribe from this list go to the following URL and read the instruc

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread John Drescher
> Yup, I did: > > $ sudo tdbdump /usr/local/private/secrets.tdb > { > key(45) = "SECRETS/LDAP_BIND_PW/dc=vpn,dc=a3dauto,dc=com" > data(7) = "mypass\00" > } > I believe this one will not connect to the ldap server because you are not specfying the uid or cn to conncet with. John -- To unsubscribe

Re: [Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Ludek Finstrle
Thu, Nov 15, 2007 at 09:55:01AM -0600, Steve Brown napsal(a): > $ sudo /usr/local/sbin/smbd -iS > smbd version 3.0.26a started. > Copyright Andrew Tridgell and the Samba Team 1992-2007 > failed to bind to server ldap://192.168.19.1/ with > dn="dc=vpn,dc=a3dauto,dc=com" Error: Invalid credentials >

[Samba] Samba unable to bind to LDAP server

2007-11-15 Thread Steve Brown
I've spent the last several days trying to get Samba to bind to our OpenDirectory server for user authentication with no success. Whenever I try start Samba, it complains that the connection to the LDAP server failed with invalid credentials. I am authenticating other services against the LDAP ser