On Wed, Oct 28, 2009 at 11:55 PM, Zdenek Styblik stybla@turnovfree.net wrote:
Kaushal Shriyan wrote:
On Wed, Oct 28, 2009 at 11:37 PM, Zdenek Styblik stybla@turnovfree.net wrote:
Kaushal Shriyan wrote:
On Wed, Oct 28, 2009 at 5:17 AM, Brett Maxfield brett.maxfield@gmail.com wrote:
The log from samba says ldap: where's your test command says ldaps: maybe try ldap: from test command in case you only listen for ssl?
On 27/10/2009, at 7:28 PM, Kaushal Shriyan kaushalshriyan@gmail.com wrote:
Hi,
I am following https://help.ubuntu.com/8.10/serverguide/C/samba-ldap.html and ldap works perfectly fine. I have issues with connecting to ldap from samba.
I get
[2009/10/27 12:37:28, 1] lib/smbldap.c:another_ldap_try(1153) Connection to LDAP server failed for the 9 try! [2009/10/27 12:37:29, 2] lib/smbldap.c:smbldap_open_connection(786) smbldap_open_connection: connection opened [2009/10/27 12:37:29, 2] lib/smbldap.c:smbldap_connect_system(982) failed to bind to server ldap://localhost/ with dn="cn=admin,dc=mt,dc=webaroo,dc=com" Error: Can't contact LDAP server (unknown)
I have ldapserver running on the same server as samba server is running. when i run ldapsearch -x -H ldaps://localhost. I am able to see the user details. Please let me know if anyone needs configs and additional information. Also when i run smbldap-populate, i get http://paste.ubuntu.com/302630/
Thanks,
Kaushal
Hi,
Below are my configs.
http://pastebin.com/dcb24c87 ---> ldap.conf http://pastebin.com/d721f0d4d ---> slapd.conf http://pastebin.com/d102cbfc5 --->samba.conf http://pastebin.com/d4a02b874 --> smbldap.conf http://pastebin.com/d716fddc0 ---> smbldap_bind.conf
I am running both ldap and samba server on the same host running on ubuntu 8.04 Hardy server. I am following https://help.ubuntu.com/8.10/serverguide/C/samba-ldap.html. I get the below issue when i run smbldap-populate I get http://pastebin.com/d30ed0db6.
Please let me know if anyone needs more information.
Thanks,
Kaushal
As three of already pointed out, the error is probably in ldap X ldaps. I recommend you to read smbldap.conf carefully.
--- snip --- masterLDAP="127.0.0.1"
# # Use TLS for LDAP # # If set to 1, this option will use start_tls for connection # # (you should also used the port 636) # # If not defined, parameter is set to "1" # ldapTLS="0" # ldapSSL="1"
It should be obvious (yes, set ldapSSL=0; set ldapTLS=1).
btw your configs don't show whether is LDAP listening - is it port 389, or 636? Or better, it would be great to show parameters passed to # slapd;
Hi Zdenek Styblik
My slapd is running on port 636. so is it ldapSSL=1; set ldapTLS=0 ?
Please suggest/guide.
Thanks,
Kaushal
Try ldapSSL=0 + ldapTLS=1; as ldapSSL would be required for slapd listening at 389, imho. Check the log, if:
failed to bind to server ldap://localhost/ with
got changed to:
.... bind to server ldaps://localhost/ ....
Zdenek
-- Zdenek Styblik Net/Linux admin OS TurnovFree.net email: stybla@turnovfree.net jabber: stybla@jabber.turnovfree.net
Hi Zdenek,
I changed as suggested by you I get http://pastebin.com/d26f0e671
Any further ideas.
Thanks,
Kaushal