From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Wed, 14 Jul 2004 13:55:29 +0400 From: Oleg Frolkov X-Mailer: The Bat! (v1.53bis) Organization: =?koi8-r?B?7+/vICLyxcfJz87BzNjO2cog68/N0NjA1MXSztnKIOPFztTSIg==?= X-Priority: 3 (Normal) Message-ID: <0467688600.20040714135529@penza.com.ru> To: ALT Linux Sisyphus discussion list Subject: Re[2]: [sisyphus] openldap , samba3, pam_ldap, nss_ldap In-Reply-To: <40F3F8B9.3060107@syktsu.ru> References: <171287207362.20040712114727@penza.com.ru> <138397474397.20040713182514@penza.com.ru> <40F3F8B9.3060107@syktsu.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 8bit X-BeenThere: sisyphus@altlinux.ru X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Oleg Frolkov , ALT Linux Sisyphus discussion list List-Id: ALT Linux Sisyphus discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jul 2004 09:56:09 -0000 Archived-At: List-Archive: Здравствуйте, Vladimir. Вы писали 13 июля 2004 г., 18:59:05: VL> Oleg Frolkov wrote: >> Дистрибутив у меня ALT Linux sisyphus с пакетами: >> samba-3.0.3-alt1.1 >> openldap-2.1.30-alt3 >> nss_ldap-220-alt1 >> pam_ldap-169-alt1 >> >> В логе на линуксе имею: >> Jul 13 11:34:31 fs smbd[26373]: ldapsam_search_one_group: Problem >> during the LDAP search: LDAP error: invalid DN (Invalid DN syntax) >> Jul 13 11:34:31 fs smbd[26373]: ldapsam_search_one_group: Query was: >> ou=Groups,dc=rcc,dc=com,dc=ru", (&(objectClass=sambaGroupMapping)(gidNumber=512)) >> VL> Покажите вывод команды: VL> $ grep "ldap " /etc/samba/smb.conf Показать-то я покажу.... только я не понимаю эффекта производимого вводом правильного/неправильного пароля :( - юзера-то оно видит. ldap passwd sync = yes passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=admin,dc=rcc,dc=com,dc=ru ldap suffix = "dc=rcc,dc=com,dc=ru" ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap idmap suffix = ou=Users ldap ssl = off add machine script = /usr/local/sbin/smbldap-useradd -w "%u" add user script = /usr/local/sbin/smbldap-useradd -m "%u" # delete user script = /usr/local/sbin/smbldap-userdel "%u" ldap delete dn = Yes add group script = /usr/local/sbin/smbldap-groupadd -p "%g" #delete group script = /usr/local/sbin/smbldap-groupdel "%g" add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u" До кучи еще: ldapsearch -LLL -x -D 'cn=admin,dc=rcc,dc=com,dc=ru' \ -w supersecretpassword -b 'dc=rcc,dc=com,dc=ru' 'uid=Administrator' dn: uid=Administrator,ou=Users,dc=rcc,dc=com,dc=ru objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount homeDirectory: /opt/samba/home sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaHomePath: \\fs\homes sambaHomeDrive: Z: sambaProfilePath: \\fs\profiles\ sambaPrimaryGroupSID: S-1-5-21-3675520625-2731205987-3948704194-512 sambaSID: S-1-5-21-3675520625-2731205987-3948704194-2996 loginShell: /bin/false gecos: Netbios Domain Administrator uidNumber: 0 sambaPwdMustChange: 2147483647 sambaLMPassword: 14D45AF99322F92DD8F4A79B1E28032B sambaNTPassword: 3C24B3363D7A78B36C834E2F5C6A3D6C sambaAcctFlags: [U ] sn: Administrator cn: Administrator uid: Administrator gidNumber: 512 sambaPwdCanChange: 1089724691 sambaPwdLastSet: 1089724691 userPassword:: e1NNRDV9bU1JNlI2NzhwQ0h0OUlNbkVGM2QzOHAyRnlVPQ== Все как-бы нормально, но не работает :( -- С уважением, Oleg mailto:rcc-of@penza.com.ru