Sir,

Good Day!

Below is my smb.conf and slapd.conf file

################ smb.conf ################################ [global] workgroup = FCB.NET realm = FCB.NET netbios aliases = smbldap.fcb.net server string = FCB File Sharing log file = /var/log/samba/log.%m max log size = 500 log level = 2 encrypt passwords = yes passwd program = /usr/local/sbin/smbldap-passwd -o %u socket options = TCP_NODELAY interfaces = eth0 local master = yes preferred master = yes passdb backend = ldapsam domain logons = yes keepalive = 10 os level = 64 ldap passwd sync = Yes idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 valid users = isd

add user script = /usr/local/sbin/smbldap-useradd -a -m "%u" delete user script = /usr/local/sbin/smbldap-userdel -r "%u" add user to group script = /usr/local/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/local/sbin/smbldap-groupmod -g "%g" "%u" add group script = /usr/local/sbin/smbldap-groupadd -p '%g' delete group script = /usr/local/sbin/smbldap-groupdel '%g' add machine script = /usr/local/sbin/smbldap-useradd -w -d /dev/null -c 'Machine Account' -s /bin/false -g 'Domain Computers' '%u'

passdb backend = ldapsam:ldaps://127.0.0.1/ ldap ssl = on ldap passwd sync = yes ldap admin dn = cn=Manager,dc=fcb,dc=net ldap delete dn = yes ldap suffix = dc=fcb,dc=net #ldap machine suffix = ou=Computers #ldap users suffix = dc=fcb,dc=net #ldap group suffix = ou=Groups

wins support = yes dos charset = 850 dns proxy = no unix charset = ISO8859-1 logon script = %U.bat

[netlogon] comment = Domain Logon Service path = /home/netlogon browseable = No

[ISD] comment = Information Systems Division path = /home/isd valid users = @isd read only = No create mask = 0660 directory mask = 0770

[profiles] path = /home/samba/profiles valid users = %U, "@Domain Admins" force user = %U read only = No create mask = 0600 directory mask = 0700 guest ok = Yes profile acls = Yes browseable = No csc policy = disable

########################## slapd.conf ##########################################

include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/samba.schema

allow bind_v2

pidfile /usr/local/var/run/slapd.pid argsfile /usr/local/var/run/slapd.args

database bdb directory /var/lib/ldap

suffix "dc=fcb.net,dc=." rootdn "cn=Manager,dc=fcb.net,dc=."

#inserted at 5pm #limits dn="cn=Manager,dc=fcb,dc=net" #size.soft=-1 #size.hard=soft

index objectClass,uidNumber,gidNumber eq index cn,sn,uid,displayName eq,pres,sub index memberUid,mail,givenname eq,subinitial index sambaSID,sambaPrimaryGroupSID,sambaDomainName eq

rootpw {SSHA}9c6LGBMLZeqDoEQfDT0lBIlvTw0GYu3k

access to attrs=userPassword,sambaLMPassword,sambaNTPassword,shadowLastChange by dn.children="dc=fcb.net,dc=." write by self write by anonymous auth by * none

access to * by dn.children="dc=fcb.net,dc=." write by * read

########## E N D############

Thanks,

Emil Sicad

Buchan Milne wrote:

On Wednesday 26 November 2008 09:31:38 Emil Sicad - ISD wrote:

...

Good day to all,

Im new to LDAP, I've been working with SAMBA-LDAP implem. and i have these messages logs:

Nov 25 17:56:59 smbldap slapd[9974]: sql_select option missing Nov 25 17:56:59 smbldap slapd[9974]: auxpropfunc error no mechanism available Nov 25 17:56:59 smbldap ldap: slapd startup succeededs Nov 25 17:57:07 smbldap smbd[9987]: [2008/11/25 17:57:07, 0] lib/smbldap.c:smbldap_connect_system(850) Nov 25 17:57:07 smbldap smbd[9987]: failed to bind to server with dn= cn=Manager,dc=fcb.net,dc=. Error: Can't contact LDAP server Nov 25 17:57:07 smbldap smbd[9987]: (unknown) Nov 25 17:57:23 smbldap smbd[9987]: [2008/11/25 17:57:23, 0] lib/smbldap.c:smbldap_search_suffix(1155) Nov 25 17:57:23 smbldap smbd[9987]: smbldap_search_suffix: Problem during the LDAP search: (unknown) (Timed out)

Question

1. Is my ldap working fine?

Can't tell, your ldap logging may not be high enough.

...

2. Why can't samba bind to Ldap?

You didn't include any of your samba (ldap-related) configuration, and that would really be more relevant on a samba list.

Regards, Buchan