Debian Samba-LDAP

[raiserle]

Hallo,

ich habe ein Problem mit LDAP, denk ich mal.
Also ich habe Samba und LDAP eingerichtet.

Die neuen Benutzer werden auch in LDAP angelegt.

getent passwd tester1 

geht super.

more /etc/passwd 

steht er nicht drin, sagt mir also, das er im LDAP steht.
slapcat auch erfolgreich. Er steht wirklich drin.

Nun habe ich einen Win-XP-Pro Client in die domain geholt, was auch super klappte.
slapcat.. der Rechner testrechner$ ist in LDAP vorhanden.

Nun aber zu dem Problem:
Wenn ich jetzt versuche den Benutzer tester1 am Windows anzumelden, sagt er mir, das er den Benutzer nicht finden kann.

Selbiges gilt auch für einen weiteren Debianrechner, den ich als LDAP-Client eingerichtet habe. Dort schlägt die Anmeldung auch fehl.
Ein

getent passwd tester1 

bringt hier auch kein Ergebnis.

ldapsearch -x -W -D 'cn=admin,dc=boellermann,dc=gmbh' 

zeigt aber den LDAP-Baum.

SO.. am Server, kann ich aber den tester1 anmelden. Zu Testzwecken wurde er mit -s /bin/bash angelegt.


Könnte mir jemand einen Tipp geben, wo ich die Suche ansetzen muss?
Ich habe nun schon mehrmals jede conf angeschaut, finde aber keinen Fehler.

Wenn logs benötigt werden, syslog.. etc, kann ich die gern posten, wenn ihr mir das zugehörige Loglvel sagt. Ich habe in der slapd.conf das Loglevel aus 2 stehen, aber da kommt keine Meldung, wegen Fehlern oder so.


lG Henrik

[mamue]

Läuft der nscd? Es kann passieren, dass der beim Testen Ärger macht, weil er etwas cached, was er besser bleiben lassen sollte.
Ansonsten mal den Loglevel vom slapd auf 256 setzen, um Suchanfragen zu protokollieren. Es sollte dann zumindest beim Anmeldeversuch etwas angezeigt werden im Logfile. Wenn nicht, wird der LDAP-Server gar ncht befragt.

HTH
mamue

[raiserle]

Hi mamue,

danke für die Antwort.

Also nscd ist gar nicht installiert. Und ich hatte das loglevel auf -1 gestellt...
da kam dann eine Flut von Anfragen an den LDAP-dienst.

Er hat auch immer in den Suchpfaden nachgeschaut, sogar was gefunden.
Nur ... klappt trotzdem die Anmeldung nicht.

Ich werd ebn nochmal mit 256 gucken und den Log posten.


lG Henrik

[raiserle]

So, ich hab versucht den Benutzer "tester99" von einem XP aus anzumelden.
was mir aufgefallen ist:
<= bdb_equality_candidates: (objectClass) index_param failed (18)
Nur leider kann ich damit absolut nichts anfangen.

Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 fd=11 ACCEPT from IP=127.0.0.1:1935 (IP=0.0.0.0:389)
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=0 BIND dn="cn=admin,dc=boellermann,dc=gmbh" method=128
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=0 BIND dn="cn=admin,dc=boellermann,dc=gmbh" mech=SIMPLE ssf=0
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=0 RESULT tag=97 err=0 text=
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=1 SRCH attr=supportedControl
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=2 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=65534))"
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=2 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:16 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:16 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:16 debiansrv slapd[2346]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Mar  1 14:32:16 debiansrv slapd[2346]: conn=8 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=3 SRCH base="dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(sambaSID=s-1-5-21-3940756140-2944192743-1108261390-513)(objectClass=sambaSamAccount))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=3 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn sn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp uidNumber
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=4 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-21-3940756140-2944192743-1108261390-513))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=4 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=4 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=5 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-545))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=5 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=6 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(|(objectClass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=s-1-5-21-3940756140-2944192743-1108261390-501)(sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(sambaSIDList=s-1-5-32-546)))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=6 SRCH attr=sambaSID
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Mar  1 14:32:17 debiansrv last message repeated 3 times
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=6 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=7 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(|(objectClass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=s-1-5-21-3940756140-2944192743-1108261390-501)(sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(sambaSIDList=s-1-5-32-546)))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=7 SRCH attr=sambaSID
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Mar  1 14:32:17 debiansrv last message repeated 3 times
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=7 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=8 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-1-0))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=8 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=8 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=9 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-2))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=9 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=9 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=10 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-546))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=10 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=10 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=11 SRCH base="dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(uid=tester99)(objectClass=sambaSamAccount))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=11 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn sn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp uidNumber
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=11 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 fd=16 ACCEPT from IP=127.0.0.1:1936 (IP=0.0.0.0:389)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=0 BIND dn="cn=admin,dc=boellermann,dc=gmbh" method=128
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=0 BIND dn="cn=admin,dc=boellermann,dc=gmbh" mech=SIMPLE ssf=0
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=0 RESULT tag=97 err=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=1 SRCH base="dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=tester99))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=12 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=513))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=12 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=12 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=13 SRCH base="dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(sambaSID=s-1-5-21-3940756140-2944192743-1108261390-513)(objectClass=sambaSamAccount))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=13 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn sn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp uidNumber
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=13 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=14 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-21-3940756140-2944192743-1108261390-513))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=14 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=14 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=2 SRCH base="dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=tester99))"
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=3 SRCH base="dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=tester99)(uniqueMember=uid=tester99,ou=users,dc=boellermann,dc=gmbh)))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=3 SRCH attr=gidNumber
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=9 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=15 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-545))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=15 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=15 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=16 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(|(objectClass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=s-1-5-21-3940756140-2944192743-1108261390-501)(sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(sambaSIDList=s-1-5-32-546)))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=16 SRCH attr=sambaSID
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Mar  1 14:32:17 debiansrv last message repeated 3 times
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=16 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=17 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(|(objectClass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=s-1-5-21-3940756140-2944192743-1108261390-501)(sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(sambaSIDList=s-1-5-32-546)))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=17 SRCH attr=sambaSID
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Mar  1 14:32:17 debiansrv last message repeated 3 times
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=17 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=18 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-1-0))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=18 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=18 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=19 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-2))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=19 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=19 SEARCH RESULT tag=101 err=0 nentries=0 text=
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=20 SRCH base="ou=groups,dc=boellermann,dc=gmbh" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-546))"
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=20 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: <= bdb_equality_candidates: (objectClass) index_param failed (18)
Mar  1 14:32:17 debiansrv slapd[2346]: conn=8 op=20 SEARCH RESULT tag=101 err=0 nentries=0 text= 

Thx für weitere Hilfe.


lG Henrik

[mamue]

"index_param failed" ist nur ein freundlicher Hinweis darauf, dass Dein System eine Schlechte performance liefern wird. Die Suche ist sequentiell, also langsam. Baue mal beizeiten einen Index auf diesem Attribut auf.
Hast Du schon mal manuell gesucht:
ldapsearch -x -D <ldap-Admin-dn> -b ou=groups,dc=boellermann,dc=gmbh '(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-21-3940756140-2944192743-1108261390-513))' -W
(Alles in einer Zeile)?

Ich vermute mal, dass "getent group <name der Gruppe von testuser>" nicht funktioniert.

HTH
mamue