Problemas LDAP
Sebastian Antunez Noguera
santunez en gmail.com
Jue Oct 4 14:45:01 CLT 2007
Estimados, recurro a ustedes nuevamente para solicitar ayuda en lo siguiente
Instalamos un servidor RHEL5 con openldap, que cumpla la misión de servidor
controlador de dominio.
Los equipos se ingresan sin problema al dominio, pero en el momento de
realizar un acceso me da el tipico mensaje de Windows que no se puede
iniciar sesion....
Al revisar el log /var/log/messages, me aparece el siguiente mensaje
Oct 4 11:15:40 dominio smbd[3298]: [2007/10/04 11:15:40, 0]
auth/auth_util.c:create_builtin_users(751)
Oct 4 11:15:40 dominio smbd[3298]: create_builtin_users: Failed to create
Users
Adjunto configuracion smb.conf para ver si me pueden dar una ayuda
#======================= LDAP Setting =====================================
admin users = root @"Domain Admins"
passdb backend = ldapsam:ldap://localhost
ldap suffix = dc=dominio,dc=cl
ldap user suffix = ou=People
ldap group suffix = ou=Group
ldap machine suffix = ou=Computers
ldap admin dn = cn=root,dc=dominio,dc=cl
ldap passwd sync = yes
add machine script = /usr/sbin/smbldap-useradd -w %u
#ldap ssl = start tls
add user script = /usr/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
ldap replication sleep = 1000
#======================= Global Settings
=====================================
[global]
workgroup = DOMAIN
server string = DOMAIN CONTROLLER
netbios name = DOMAIN
security = user
load printers = yes
encrypt passwords = yes
os level = 65
domain master = yes
preferred master = yes
domain logons = yes
log file = /var/log/samba/%m.log
max log size = 50
dns proxy = no
#============================ Share Definitions
==============================
[homes]
comment = Home Directories
browseable = no
writable = yes
guest ok = no
writable = no
printable = yes
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = root
browseable = No
Gracias
Sebastian
Más información sobre la lista de distribución Linux