MDS - Mandriva Directory Server, kleiner Problem mit Samba

[MannOhMann]

Hi,

ich bin grad am konfigurieren eines MDS mit Samba als PDC und LDAP.

Das Problem das ich derzeit habe ist, dass beim Anlegen eines Users mit Samba Zugang folgender Fehler kommt:



smbpasswd scheiterte beim ändern Ihres Passwortes

Stellen Sie sicher, dass Ihr smbpasswd korrekt konfiguriert ist:

* Ihr LDAP-Server ist nicht gestartet
* Ihr Samba-Server ist nicht richtig konfiguriert

kompletten Trackback zeigen
vollständiger Traceback

PHP XMLRPC call: samba.addSmbAttr ('user1', )

Python Server traceback:
Traceback (most recent call last):
File "/usr/lib/python2.5/site-packages/twisted/web/http.py", line 626, in requestReceived
self.process()
File "/usr/lib/python2.5/site-packages/twisted/web/server.py", line 150, in process
self.render(resrc)
File "/usr/lib/python2.5/site-packages/twisted/web/server.py", line 157, in render
body = resrc.render(self)
File "/usr/lib/python2.5/site-packages/mmc/agent.py", line 145, in render
defer.maybeDeferred(function, *args).addErrback(
--- ---
File "/usr/lib/python2.5/site-packages/twisted/internet/defer.py", line 106, in maybeDeferred
result = f(*args, **kw)
File "/usr/lib/python2.5/site-packages/mmc/plugins/samba/__init__.py", line 281, in addSmbAttr
return sambaLdapControl().addSmbAttr(uid, password)
File "/usr/lib/python2.5/site-packages/mmc/plugins/samba/__init__.py", line 550, in addSmbAttr
raise Exception("Failed to modify password entry\n" + shProcess.stdall)
exceptions.Exception: Failed to modify password entry
<<12345
<<12345
>>Failed to modify password entry for user user1


LDAP ist gestartet, also liegts sicher an der smb.conf:



[global]
workgroup = TESTDOMAIN
netbiosname = SRV-TESTDOMAIN
server string = Mandriva Directory Server - SAMBA %v
log level = 3
null passwords = yes
domain logons = yes
os level = 65
domain master = yes
preferred master = yes
wins support = yes
time server = yes
enable privileges = yes
deadtime = 5
printing = cups
printcap name = cups

logon path = \\%N\profile\%U
logon script = logon.bat

map acl inherit = yes
inherit acls = yes
inherit permissions = yes
nt acl support = yes
force unknown acl user = Yes

passwd program = /usr/sbin/smbldap-passwd -u %u
add user script = /usr/sbin/smbldap-useradd -m "%u"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add group script = /usr/sbin/ambldap-groupadd -p "%g"
delete user script = /usr/sbin/smbldap-userdel "%u"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"

passdb backend = ldapsam:ldap://127.0.0.1/
ldap admin dn = cn=manager,dc=testdomain,dc=at
ldap suffix = dc=testdomain,dc=at
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=Hosts
ldap idmap suffix = ou=Idmap
idmap backend = ldap:ldap://127.0.0.1/
idmap uid = 20000-30000
idmap gid = 20000-30000

ldap passwd sync = yes

add machine script = /usr/lib/mmc/add_machine_script '%u'
add share command = /usr/lib/mmc/add_change_share_script
delete share command = /usr/lib/mmc/delete_share_script
add printer command = /usr/lib/mmc/add_printer_script
deleteprinter command = /usr/lib/mmc/delete_printer_script

[homes]
comment = Home directories
browseable = no
writeable = yes
create mask = 0700
directory mask = 0700
hide files = /Maildir/

[public]
comment = Public share
path = /home/documents
browseable = yes
public = yes
writeable = yes

[archives]
comment = Backup share
path = /home/archives
browseable = yes
public = no
writeable = no

[printers]
comment = All printers
path = /var/spool/samba
public = yes
guest ok = yes
browseable = no
writeable = no
printable = yes

[print$]
comment = Printer Driver Download Area
path = /var/lib/samba/printers
browseable = no
guest ok = yes
read only = yes
write list = +"Print Operators"
force group = "Print Operators"
create mask = 0775
directory mask = 0775

[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
guest ok = yes
browseable = no

[profiles]
path = /home/samba/profiles
writeable = yes
create mask = 0700
directory mask = 0700
browseable = no
hide files = /desktop.ini/ntuser.ini/NTUSER.*/


also falls wer weiß warum nicht klappt wär das super :)

[Stormbringer]

Hi,

was sagt denn ein in einer Konsole ausgeführtes testparm?

Und korrigiere mal den typo ;) :


add group script = /usr/sbin/ambldap-groupadd -p "%g"

[MannOhMann]

Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[public]"
Processing section "[archives]"
Processing section "[printers]"
Processing section "[print$]"
Processing section "[netlogon]"
Processing section "[profiles]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC

[MannOhMann]

ok, ich sag nur singlequotes zu dem Problem... :P

Jetzt hätt ich aber noch eine Frage da dies mein 1. PDC ist:

Sollte standardmäßig im profile Ordner das Profil eines neuen Users beim Anmelden am DC oder schon beim Anlegen des Users im LDAP erstellt werden, oder muß man dies händisch anlegen?

Fragen über Fragen :)