Authenticating Windows to openLDAP server on Ubuntu 9.10

[xpam]

Thanks a lot for the information, specially about windows 7


Regards,

[BarryDocks]

Hi there,

really struggling to get this to work, have already tried unsuccessfully on 9.04 with this tutorial http://ubuntuforums.org/showthread.php?t=1184288

I get as far as:

root@ubuntu:~# ldapsearch -xLLL -b "dc=example,dc=com"
No such object (32)

any suggestions?

[GoTerpsGo]

Did you ever fix this? Could you please clue me in if you did?

When I try to populate I get this:

adding new entry: dc=school,dc=local
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, <DATA> line 466.
adding new entry: ou=Users,dc=school,dc=local
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, <GEN1> line 12.
adding new entry: ou=Groups,dc=school,dc=local
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, <GEN1> line 17.
adding new entry: ou=Computers,dc=school,dc=local
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, <GEN1> line 22.
adding new entry: ou=Idmap,dc=school,dc=local
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, <GEN1> line 27.
adding new entry: uid=root,ou=Users,dc=school,dc=local
failed to add entry: objectClass: value #3 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 55.
adding new entry: uid=nobody,ou=Users,dc=school,dc=local
failed to add entry: objectClass: value #3 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 83.
adding new entry: cn=Domain Admins,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 95.
adding new entry: cn=Domain Users,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 106.
adding new entry: cn=Domain Guests,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 117.
adding new entry: cn=Domain Computers,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 128.
adding new entry: cn=Administrators,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 173.
adding new entry: cn=Account Operators,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 195.
adding new entry: cn=Print Operators,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 206.
adding new entry: cn=Backup Operators,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 217.
adding new entry: cn=Replicators,ou=Groups,dc=school,dc=local
failed to add entry: objectClass: value #1 invalid per syntax at /usr/sbin/smbldap-populate line 499, <GEN1> line 228.
adding new entry: sambaDomainName=school,dc=school,dc=local
failed to add entry: invalid DN at /usr/sbin/smbldap-populate line 499, <GEN1> line 236.

[sergio_6]

I have a problem when I do:

ldapsearch -xLLL -b "dc=example,dc=com"

It says:

sergio@desktop:~$ ldapsearch -xLLL -b "dc=example,dc=com"
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)


And I dont know how to fix it because i am a noob in Linux. Any help please?

regards,
Sergio

[sergio_6]

I have solved!!! sorry to cause troubles.

I didnt start the daemon so i cant run. I am trying the default configuration so dc=example dc=com i changed it to dc=example dc=local


about the post of a mate before mine i wanna tell him if he did firstly

/etc/init.d/slapd start

and after that

ldapsearch -xLLL -b "dc=example,dc=com"

If you dont type /etc/init.d/slapd start first you will have problems.

I hope it helps you and sorry about my English.

Regards,
Sergio

[sergio_6]

I have another problem and I cant find the answer.....

When I tried to do:

net getlocalSID


it says that net isnt in the system and that i have to install it from samba-client-bin or from samba4. I tried to install it from samba-client-bin or something like this and it gave me a SID, but it gives me errors too.... Can you tell me why I dont have NET?. O'll try to do again all the guide (again xD)...., little by litttle I am advancing...


thanks for your help

Regards,
Sergio.

[VlaDeMaN]

hey everyone,

im having issues test binding a windows 7 x64 ultimate SP1 to a newly created scientific linux 6 box running samba 3.5.4. i posted in the ubuntu forums cause you guys seem to know your stuff.

well, i modified the registry settings for Lanman:

HKLM\system\currentcontrolset\lanmanworkstation\pa rameters:

DNSNameResolutionRequired = 0
DomainCompatibilityMode = 1

HKLM\system\currentcontrolset\services\netlogon\pa rameters

RequireSignOrSeal = 1
RequireStrongKey = 1

WINS servers are added

primary DNS is manually set to the DC

Local Security Policy for LAN manager Authentication Level is Send LM & NTLM - use NTLMv2 if negotiated

i keep getting this error.



the name has not been registered before and the error also comes if i change the name too.

ive searched quite a bit, and nothing seems to help

thanks in advance!

[lance bermudez]

Hey do you guy have a guid that works with the new ubuntu 11.04? I have tried some but Got lost check out my post http://ubuntuforums.org/showthread.p...6#post11003686

[s33d3r]

Hi there... Nice Tutorial

I have a bit problem...
I am trying to configure open LDAP on Ubuntu 11.10
Everything goes perfect but in configuring samba i am getting a bit of problem.

after making the necessary changes in smb.conf when i m starting restart following the command
/init.d/samba restart i am getting an error message stating
-bash: /etc/init.d/samba: No such file or directory

I am not able to get the solution for this error

moving ahead in finding out the sid value again i m getting one error stating

[2011/11/22 01:31:30.277551, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:30.278168, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:30.278519, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:30.278800, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:31.279795, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:31.279904, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:31.280420, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:31.280465, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:32.281898, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:32.282008, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:32.282038, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:32.282063, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:33.282843, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:33.283065, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:33.283099, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:33.283125, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:34.283858, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:34.283967, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:34.283997, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:34.284023, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:35.285074, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:35.285184, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:35.285214, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:35.285240, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:36.285982, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:36.286090, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:36.286119, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:36.286145, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:37.286932, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:37.287042, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:37.287072, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:37.287098, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:38.288056, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:38.288165, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:38.288194, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:38.288220, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:39.289014, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:39.289118, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:39.289147, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:39.289173, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:40.290114, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:40.290223, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:40.290253, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:40.290279, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:41.291119, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:41.291221, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:41.291251, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:41.291277, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:42.294646, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:42.294805, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:42.294847, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:42.294874, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:43.296122, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:43.296228, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:43.296257, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:43.296283, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:44.296907, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:44.297011, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:44.297041, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:44.297067, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:45.298138, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:45.298246, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:45.298276, 0] passdb/secrets.c:806(fetch_ldap_pw)
fetch_ldap_pw: neither ldap secret retrieved!
[2011/11/22 01:31:45.298303, 0] lib/smbldap.c:1108(smbldap_connect_system)
ldap_connect_system: Failed to retrieve password from secrets.tdb
[2011/11/22 01:31:45.298397, 0] passdb/secrets.c:73(secrets_init)
Failed to open /var/lib/samba/secrets.tdb
[2011/11/22 01:31:45.298426, 0] lib/util.c:1468(smb_panic)
PANIC (pid 6334): could not open secrets db
[2011/11/22 01:31:45.480993, 0] lib/util.c:1572(log_stack_trace)
BACKTRACE: 11 stack frames:
#0 net(log_stack_trace+0x1a) [0x7fcde1a2f03a]
#1 net(smb_panic+0x21) [0x7fcde1a2f111]
#2 net(get_global_sam_sid+0x688) [0x7fcde1950e98]
#3 net(pdb_init_ldapsam+0x69f) [0x7fcde19e8daf]
#4 net(make_pdb_method_name+0xe9) [0x7fcde19d9709]
#5 net(+0x1f7acc) [0x7fcde19d9acc]
#6 net(initialize_password_db+0x14) [0x7fcde19dc6b4]
#7 net(+0xdc7f0) [0x7fcde18be7f0]
#8 net(main+0x830) [0x7fcde18be510]
#9 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7fcddedd230d]
#10 net(+0xdc6f5) [0x7fcde18be6f5]
[2011/11/22 01:31:45.481636, 0] lib/util.c:1473(smb_panic)
smb_panic(): calling panic action [/usr/share/samba/panic-action 6334]
[2011/11/22 01:31:45.569713, 0] lib/util.c:1481(smb_panic)
smb_panic(): action returned status 0
[2011/11/22 01:31:45.570471, 0] lib/fault.c:312(dump_core)
Can not dump core: corepath not set up


Plzz Help me out

[vinterkind]

Hi There,

first off, this is a great guide! really useful, i'm not so great with linux servers but its helped a lot.

only one question, when i try and join the domain with a windows 7 client, i get an "access denied" error, and it says that the join attempt was unsuccessful, this could be down to the computer account already existing or the credentials being incorrect.

i assume the credentials are not incorrect, as i've used my sysadmin account that i created at the start. i did try using the root account as well at one point (i know, i shouldn't!) and i went into my Webmin config and there was 2 computer accounts (i tried changing the computer name to see if this would help at all) and i deleted both of those entries.


Any ideas? cos i've got all windows 7 clients and i need to get them working!!

Thanks in advance

Tom

Hi Tom,

have you ever solved this problem ? I've got the same error. I checked on the packages, and they've provided me with SAM Response - user unknown. I tried to join Win7 with user root.

But exactly the same user could provide me with the information I get from running net rpc info.

My System: ubuntu 11.10 with Samba 3.4.7

cheers