My server info:
SUSE 11.3 , authenticated against LDAP, I am able to log in using LDAP credentials.
I did run smbpasswd -w password

After I configured the smb.conf file, I try to do this on the Terminal to make sure it will work in Windows machines but I got this error:

user@mybox:~> smbclient -L mybox.mydomain.com
Enter user's password: (I enter the user password here)
Connection to mybox.mydomain.com failed (Error NT_STATUS_CONNECTION_REFUSED)

so I went to /var/log/samba.log to check the error file, I got this :

Connection to LDAP server failed for the 1 try!
[2010/12/10 18:08:50.919813, 1] lib/smbldap.c:1330(another_ldap_try)
Connection to LDAP server failed for the 2 try!
[2010/12/10 18:08:52.133624, 1] lib/smbldap.c:1330(another_ldap_try)
Connection to LDAP server failed for the 3 try!

and it kept going on and on until I stop it.

Here is my smb.conf file, please take a look to see what I've done wrong here. I tried to to take out WORKGROUP in GLOBAL but there were error like " Work group name x.x.x.com is too long, so I put in WORKGROUP = etc.

[global]
workgroup = mybox
passdb backend = ldapsam:ldap://ldap.my domain.com:11389/
ldap suffix = dc=my domain,dc=com
name resolve order = wins bcast hosts
ldap machine suffix = ou=Computers
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap admin dn = "cn=sambaLabs2,ou=roles,dc=domain name,dc=com"
ldap ssl = start tls
server string = "my File Server"
security = user
log file = /var/log/samba.log
log level = 1
Max log size = 50
wins support = yes
wins server = my wins servers here
winbind enum users = no
winbind enum groups = no
unix extensions = no
wide links = yes
hosts deny = ALL
hosts allow = 192.168.
interfaces = lo eth0
bind interfaces only = true
browseable = No
read only = No
usershare allow guests = No

load printers = yes
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User


[homes]
comment = home directories
browseable = No
valid users = %S
read only = No
writable = yes
create mask = 0660
directory mask = 0770
inherit acls = Yes
inherit permissions = yes


[sharefolder]
path = /sharefolder
valid users = @users,%S
inherit acls = Yes
inherit permissions = yes

[printers]
path = /var/spool/samba
browsable = no
public = yes


[print$]
comment = Printer Drivers
path = /etc/samba/drivers
browsable = yes
guest ok = no
read only = yes
write list = root
force group = ntadmin
create mask = 0664
directory mask = 0775


Thank you in advance.

Hi,

I'm not sure if this is relevant, as you're using LDAP, and I've never used it, but I have fallen down numerous times by forgetting to run "smbuseradd -a USERNAME".

Also, does the machine which "ldap.mydomain.com" resolves to:
a) resolve correctly? (use "host ldap.mydomain.com")
b) have its firewall set up correctly? (try "nmap ldap.mydomain.com" from your client and "nmap localhost" from the server. Check the output of these commands see if port 11389 is open from both places)

Also, I'm assuming that you have altered the domain name for your post, but I noticed that a line from your config file read
"passdb backend = ldapsam:ldap://ldap.my domain.com:11389/". There is a random space between the two. Just thought I'd mention it on the offchance that this is a type in your config file.

Anything else I can help with, just shout me!

X-T