erro ao tentar adicionar W2K em Dominio SAMBA com LDAP

Respondendo a todos:

Versao do SAMBA: 3.0.5
Versao do LDAP: 2.1.22


meu SMB.conf - GLOBAL Sector

-------------------------------------------------------------------
[global]

workgroup = MYGROUP
server string = Samba PDC-Ldap Server
passdb backend = ldapsam:ldap://127.0.0.1/
ldap admin dn = cn=Manager,dc=mydomain,dc=org
ldap suffix = dc=mydomain,dc=org
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
ldap passwd sync = yes
ldap ssl = off
username map = /etc/samba/smbusers
delete user script = /usr/local/sbin/smbldap-userdel "%u"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = user
encrypt passwords = yes
passwd program =/usr/local/sbin/smbldap-passwd %u
passwd chat = *new*password* %n\n *new*password:* %n\ *successfully*
username map = /etc/samba/smbusers
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
os level = 35
domain master = yes
preferred master = yes
domain logons = yes
local master = yes
logon script = %U.bat
logon path = \\%L\Profiles\%U
wins support = yes
dns proxy = no
----------------------------------------------------------------------------------

search no ldap para o uid de um usuario:

---------------------------------------------------------------

# extended LDIF
#
# LDAPv3
# base <dc=mydomain,dc=org> with scope sub
# filter: uid=danilo
# requesting: ALL
#

# danilo, Users, mydomain.org
dn: uid=danilo,ou=Users,dc=mydomain,dc=org
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSAMAccount
cn: Danilo Montagna
sn: danilo
uid: danilo
uidNumber: 1001
gidNumber: 513
homeDirectory: /home/danilo
loginShell: /bin/bash
gecos: Danilo Montagna
description: Danilo Montagna
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
displayName: Danilo Montagna
sambaSID: S-1-5-21-476519084-1075918099-3570581004-3002
sambaPrimaryGroupSID: S-1-5-21-476519084-1075918099-3570581004-513
sambaProfilePath: \\PDCSRV\profiles\danilo
sambaHomePath: \\PDCSRV\home\danilo
sambaHomeDrive: H:
sambaPwdCanChange: 1093226803
sambaAcctFlags: [U]
sambaPwdLastSet: 1093486704
sambaPwdMustChange: 1097374704

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
--------------------------------------------------------------------


alguma ideia.. ainda acho que o problema é so a autenticacao.. pois se eu vou no authconfig do redhat e seto para "USE LDAP Authentication" ninguem mais consegue logar na maquina.. inclusive o root.

só para efeito de conhecimento..

acabei de atualizar para o samba 3.0.6 e continua tudo na mesma..

alguem aqui que tenha isso funcionando (SAMBA + LDAP) .. tem como me passar o how to que usou ?

sim.. o backend é exatamente como essa linha ae que vc postou..

quando eu executo o comando que vc passou.. aparece isso aqui..

[root@pdcsrv openldap]# smbclient -L pdcsrv -U danilo
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

e no /var/log/messahes.. isso aqui..

[2004/08/22 22:54:17, 0] auth/auth_sam.c:check_sam_security(260)
Aug 22 22:54:17 pdcsrv smbd[7828]: check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER'

sim.. o backend éfdhdffdhdhf exatamente como essa linha ae que vc postou..

quando eu executo o comando que vc passou.. aparece isso aqui..

[root@pdcsrv openldap]# smbclient -L pdcsrv -U danilo
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

e no /var/log/messahes.. isso aqui..

[2004/08/22 22:54:17, 0] auth/auth_sam.c:check_sam_security(260)
Aug 22 22:54:17 pdcsrv smbd[7828]: check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER'