Samba LDAP and LAM

metallica1973 · 03-07-2007, 08:18 PM

I have set up everything from LDAP to Samba to LDAP Account Manager but I am having trouble logging in to LAM. I followed the steps exactly from opensourcehowto.org. I can get to the LAM login but I cannot get in no matter what I do. I decided to follow the previous steps to see if I can find out what I did wrong and I think that I located the problem. There is a step that tells me to fill out /etc/samba/smb.conf and then after type

PHP Code:



net getlocalsid

when I do that I get this error

PHP Code:



ldap_connect_system: Failed to retrieve password from secrets.tdb
[2007/03/07 21:27:37, 0] passdb/secrets.c:fetch_ldap_pw(636)
  fetch_ldap_pw: neither ldap secret retrieved!
[2007/03/07 21:27:37, 0] lib/smbldap.c:smbldap_connect_system(936)
  ldap_connect_system: Failed to retrieve password from secrets.tdb
[2007/03/07 21:27:38, 0] passdb/secrets.c:fetch_ldap_pw(636)
  fetch_ldap_pw: neither ldap secret retrieved!
[2007/03/07 21:27:38, 0] lib/smbldap.c:smbldap_connect_system(936)
  ldap_connect_system: Failed to retrieve password from secrets.tdb
[2007/03/07 21:27:39, 0] passdb/secrets.c:fetch_ldap_pw(636)
  fetch_ldap_pw: neither ldap secret retrieved!
[2007/03/07 21:27:39, 0] lib/smbldap.c:smbldap_connect_system(936)
  ldap_connect_system: Failed to retrieve password from secrets.tdb
[2007/03/07 21:27:40, 0] passdb/secrets.c:fetch_ldap_pw(636)
  fetch_ldap_pw: neither ldap secret retrieved!
[2007/03/07 21:27:40, 0] lib/smbldap.c:smbldap_connect_system(936)
  ldap_connect_system: Failed to retrieve password from secrets.tdb
SID for domain TOYSRUS is: S-1-5-21-14982349-1679223988-3172744225

help!

metallica1973 · 03-08-2007, 07:54 AM

never mind, I figured it out. I made a typo in slapd.conf and in smb.conf. Under lam.conf

PHP Code:



database bdb
suffix "dc=fedora,dc=directory,dc=server"
rootdn "uid=root,dc=fedora,dc=directory,dc=server"
rootpw {SSHA}HLuLNn9wv8r9Qkgvh9qNWWZUupfro0+1

and in smb.conf

PHP Code:



[global]
ldap user suffix = ou=people,dc=fedora,dc=directory,dc=server
ldap machine suffix = ou=machines,dc=fedora,dc=directory,dc=server
ldap group suffix = ou=group,dc=fedora,dc=directory,dc=server
ldap suffix = dc=fedora,dc=directory,dc=server
ldap admin dn ="uid=root,dc=fedora,dc=directory,dc=server"
encrypt passwords = yes
passdb backend = ldapsam:ldap://127.0.0.1
wins support = true
ldap delete dn = no
ldap passwd sync = yes
os level = 50
security = user
ldap replication sleep = 1000

I had under slapd.conf

[php]rootdn "cn=root,dc=fedora,dc=directory,dc=server"

under smb.conf

PHP Code:



ldap admin dn ="cn=root,dc=fedora,dc=directory,dc=server"

I change it back to what it should have been from the example above and that dug me out of my whole!

metallica1973 · 03-10-2007, 09:30 AM

I have finally figured out what had happened! I had a corrupt file under /var/lib/ldap/ so I deleted everything inside of that folder and i recreate my LDAP database.I will walk through the steps that I did to get LDAP, Samba, and LAM to work!

1 - Install LDAP,APACHE,and LAM and all of the module that are needed to work with LDAP Account Manager 1.2.0

http://lam.sourceforge.net/documentation/install.htm

* note I had spent months trying to figure out why I could not login into LAM and it ultimately turned out be bad files that was under /var/lib/ldap/

2 - Start with LDAP and be very careful of any typos in your configurations. I spents hours of not understanding why stuff did not work correctly. I recommend purging the /var/lib/ldap/ directory after the installation of Openldap to start off with a clean slate. I also recommend starting off without security to make it easier to get LDAP,Samba, and LAM going. *note - after creating your

PHP Code:



rootdn "uid=root,dc=fedora,dc=directory,dc=server"

from slapd.conf and

PHP Code:



ldap admin dn = "uid=root,dc=fedora,dc=directory,dc=server"

in /etc/samba.smb.conf, you will need to redo your samba password, smbpasswd -w Password. If you already made it then when redo it using the same password.(All of this is in reference to the part about finding out what your domain name and SID number is)
,
http://www.opensourcehowto.org/how-t...ba-as-pdc.html

3 - Ultimately log into LAM to test! kudos to MAT_PAUL and his website