Hello !

I trying sync ldap users with users samba.

I´m using a interface, by create ldap users.

So, when ldap user be created, i want account e password samba be created.     

No my smb.conf I put the follow lines:

        ldap admin dn = cn=admin,dc=def,dc=mg,dc=gov,dc=br
        ldap group suffix = ou = groups
        ldap machine suffix = ou = computers
        ldap passwd sync = yes
        encrypt passwords = Yes
        ldap suffix = dc=def,dc=mg,dc=gov,dc=br
        ldap ssl = no
        ldap user suffix = ou = defensory
        smb ports = 445 139

        add user script = /usr/sbin/smbldap-useradd -a -m "%u"
        add group script = /usr/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
        add machine script = /usr/sbin/smbldap-useradd -w "%u"
        passwd program = /usr/sbin/smbldap-passwd -s "%u"
        passdb backend = ldapsam:ldap://10.65.8.95
        passdb backend = tdbsam
        hosts allow = 127.0.0.1, 10.65.8.0/255.255.252.0
        pam password change = yes
        passwd program = /usr/bin/passwd %u

I configure in  sladp.conf:

include        /etc/ldap/schema/ppolicy.schema

moduleload  ppolicy.so
overlay ppolicy
access to attrs=userPassword,shadowLastChange,sambaPwdMustChange,sambaLMPassword,sambaPwdLastSet,sambaNTPassword
        by dn="cn=admin,dc=def,dc=mg,dc=gov,dc=br" write
        by anonymous auth
        by self write
        by * none

The user ldap is done, but samba user is not created.

See some logs:

Jan 18 16:09:01 defensoria slapd[6210]: conn=2455 fd=50 ACCEPT from IP=10.65.8.95:54507 (IP=0.0.0.0:389)

So its bad.

root@replica:/etc/ldap# smbclient -L 10.65.8.95 -U xbox
Enter xbox's password:
session setup failed: NT_STATUS_LOGON_FAILURE

Thanks !

Rodrigo Faria Tavares