Hallo Liste, Ich habe nun während zwei Tagen einen Samba Server mit LDAP aufgesetzt. Nun komme ich aber nicht mehr weiter: Ich habe zwei Benutzer (raffi,tester) und root angelegt. Wenn ich mich von W2K auf den Server verbinde, kann ich mich mit raffi authentifizieren, mit tester aber nicht. Den Rechner der Domain hinzufügen funktioniert auch nicht (mit root). In den Logs (sambalog) sehe ich "User tester in passdb, but getpwnam() fails!" Was soll das?? Weiter entnehme ich messages, dass er in der falschen "db" sucht: Sep 21 13:22:54 mail slapd[3886]: conn=227 op=1 SRCH base="ou=Users,dc=mydomain,dc=org" scope=1 deref=0 filter="(&(objectClass=posixAccount)(uid=tester))" das sollte er nicht! ich weiss nicht warum das so ist, in allen config-files habe ich es richtig, denke ich mal.... von Mac oder Linux (SuSE 9.3 getestet) kann ich mich problemlos per LDAP authentifizieren. Das System ist ein SuSE 9.3, Samba Version 3.0.13-1.1-SUSE, openldap slapd 2.2.23 Wenn ihr die config-Dateien noch braucht, einfach melden... Wo liegt mein Fehler? Vielen Dank schon im Vorraus Grüsse rs #################################################################### messages-logfile mit tester: ------------------------------------------------------------- Sep 21 13:22:54 mail slapd[3886]: conn=226 fd=22 ACCEPT from IP=127.0.0.1:4205 (IP=0.0.0.0:389) Sep 21 13:22:54 mail slapd[3886]: conn=226 op=0 BIND dn="cn=root,dc=yux" method=128 Sep 21 13:22:54 mail slapd[3886]: conn=226 op=0 BIND dn="cn=root,dc=yux" mech=SIMPLE ssf=0 Sep 21 13:22:54 mail slapd[3886]: conn=226 op=0 RESULT tag=97 err=0 text= Sep 21 13:22:54 mail slapd[3886]: conn=226 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 21 13:22:54 mail slapd[3886]: conn=226 op=1 SRCH attr=supportedControl Sep 21 13:22:54 mail slapd[3886]: OTP unavailable because can't read/write key database /etc/opiekeys: No such file or directory Sep 21 13:22:54 mail slapd[3886]: conn=226 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 21 13:22:54 mail slapd[3886]: conn=226 op=2 SRCH base="ou=Users,dc=yux" scope=2 deref=0 filter="(&(uid=tester)(objectClass=sambaSamAccount))" Sep 21 13:22:54 mail slapd[3886]: conn=226 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Sep 21 13:22:54 mail slapd[3886]: conn=226 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 21 13:22:54 mail slapd[3886]: conn=227 fd=24 ACCEPT from IP=127.0.0.1:4206 (IP=0.0.0.0:389) Sep 21 13:22:54 mail slapd[3886]: conn=227 op=0 BIND dn="" method=128 Sep 21 13:22:54 mail slapd[3886]: conn=227 op=0 RESULT tag=97 err=0 text= Sep 21 13:22:54 mail slapd[3886]: conn=227 op=1 SRCH base="ou=Users,dc=mydomain,dc=org" scope=1 deref=0 filter="(&(objectClass=posixAccount)(uid=tester))" Sep 21 13:22:54 mail slapd[3886]: conn=227 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass Sep 21 13:22:54 mail slapd[3886]: conn=227 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 21 13:22:54 mail smbd[12188]: [2005/09/21 13:22:54, 0] auth/auth_sam.c:check_sam_security(324) Sep 21 13:22:54 mail smbd[12188]: check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER' Sep 21 13:22:54 mail slapd[3886]: conn=226 fd=22 closed Sep 21 13:22:54 mail slapd[3886]: conn=227 fd=24 closed ---------------------------------------------------------- samba-logfile mit tester: ---------------------------------------------------------- [2005/09/21 13:22:54, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/09/21 13:22:54, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/09/21 13:22:54, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2005/09/21 13:22:54, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: tester [2005/09/21 13:22:54, 1] auth/auth_util.c:make_server_info_sam(840) User tester in passdb, but getpwnam() fails! [2005/09/21 13:22:54, 0] auth/auth_sam.c:check_sam_security(324) check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER' [2005/09/21 13:22:54, 2] auth/auth.c:check_ntlm_password(312) check_ntlm_password: Authentication for user [tester] -> [tester] FAILED with error NT_STATUS_NO_SUCH_USER [2005/09/21 13:22:54, 2] smbd/server.c:exit_server(609) Closing connections ---------------------------------------------------------- messages-logfile mit raffi ---------------------------------------------------------- Sep 21 13:23:46 mail slapd[3886]: conn=228 fd=22 ACCEPT from IP=127.0.0.1:4299 (IP=0.0.0.0:389) Sep 21 13:23:46 mail slapd[3886]: conn=228 op=0 BIND dn="cn=root,dc=yux" method=128 Sep 21 13:23:46 mail slapd[3886]: conn=228 op=0 BIND dn="cn=root,dc=yux" mech=SIMPLE ssf=0 Sep 21 13:23:46 mail slapd[3886]: conn=228 op=0 RESULT tag=97 err=0 text= Sep 21 13:23:46 mail slapd[3886]: conn=228 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 21 13:23:46 mail slapd[3886]: conn=228 op=1 SRCH attr=supportedControl Sep 21 13:23:46 mail slapd[3886]: OTP unavailable because can't read/write key database /etc/opiekeys: No such file or directory Sep 21 13:23:46 mail slapd[3886]: conn=228 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 21 13:23:46 mail slapd[3886]: conn=228 op=2 SRCH base="ou=Users,dc=yux" scope=2 deref=0 filter="(&(uid=raffi)(objectClass=sambaSamAccount))" Sep 21 13:23:46 mail slapd[3886]: conn=228 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Sep 21 13:23:46 mail slapd[3886]: conn=228 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 21 13:23:46 mail slapd[3886]: conn=229 fd=24 ACCEPT from IP=127.0.0.1:4300 (IP=0.0.0.0:389) Sep 21 13:23:46 mail slapd[3886]: conn=229 op=0 BIND dn="" method=128 Sep 21 13:23:46 mail slapd[3886]: conn=229 op=0 RESULT tag=97 err=0 text= Sep 21 13:23:46 mail slapd[3886]: conn=229 op=1 SRCH base="ou=Users,dc=mydomain,dc=org" scope=1 deref=0 filter="(&(objectClass=posixAccount)(uid=raffi))" Sep 21 13:23:46 mail slapd[3886]: conn=229 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 21 13:23:46 mail slapd[3886]: conn=229 op=2 SRCH base="ou=Groups,dc=mydomain,dc=org" scope=1 deref=0 filter="(&(objectClass=posixGroup)(memberUid=raffi))" Sep 21 13:23:46 mail slapd[3886]: conn=229 op=2 SRCH attr=gidNumber Sep 21 13:23:46 mail slapd[3886]: conn=229 op=2 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 21 13:23:46 mail slapd[3886]: conn=228 op=3 SRCH base="ou=Groups,dc=yux,ou=Users,dc=yux" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=100))" Sep 21 13:23:46 mail slapd[3886]: conn=228 op=3 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Sep 21 13:23:46 mail slapd[3886]: conn=228 op=3 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 21 13:23:46 mail smbd[12190]: [2005/09/21 13:23:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1971) Sep 21 13:23:46 mail smbd[12190]: ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (No such object) Sep 21 13:23:46 mail slapd[3886]: conn=228 op=4 SRCH base="ou=Groups,dc=yux,ou=Users,dc=yux" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=16))" Sep 21 13:23:46 mail slapd[3886]: conn=228 op=4 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Sep 21 13:23:46 mail slapd[3886]: conn=228 op=4 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 21 13:23:46 mail smbd[12190]: [2005/09/21 13:23:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1971) Sep 21 13:23:46 mail smbd[12190]: ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (No such object) Sep 21 13:23:46 mail slapd[3886]: conn=228 op=5 SRCH base="ou=Groups,dc=yux,ou=Users,dc=yux" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=33))" Sep 21 13:23:46 mail slapd[3886]: conn=228 op=5 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Sep 21 13:23:46 mail slapd[3886]: conn=228 op=5 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 21 13:23:46 mail smbd[12190]: [2005/09/21 13:23:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1971) Sep 21 13:23:46 mail smbd[12190]: ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (No such object) ------------------------------------------------------------- samba-logfile mit raffi: ------------------------------------------------------------- [2005/09/21 13:23:46, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/09/21 13:23:46, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/09/21 13:23:46, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2005/09/21 13:23:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: raffi [2005/09/21 13:23:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1971) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (No such object) [2005/09/21 13:23:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1971) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (No such object) [2005/09/21 13:23:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1971) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (No such object) [2005/09/21 13:23:46, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [raffi] -> [raffi] -> [raffi] succeeded [2005/09/21 13:24:00, 0] lib/util_sock.c:read_socket_data(384) read_socket_data: recv failure for 4. Error = Connection reset by peer [2005/09/21 13:24:00, 2] smbd/server.c:exit_server(609) Closing connections -------------------------------------------------------------------