SAMBA using external LDAP server
 

Hi all

Currently I have a server running samba 2.3 and openldap in Debian wheezy. Everything is working ok, authentication for Linux and Windows and samba shares.

I've configured a new LDAP server with openldap and GoSA. Linux machines can authenticate, passwords can expire and be changed so it is working fine at this point since desktops ldap config is pointing to the new LDAP server

The problem is with the windows clients. They are already in the Domain (is a PDC). I have changed the ldap values in samba.conf and restarted the service but samba is still authenticating with the old information (cached somewhere?). Samba is not updating users, passwords and groups from the new *external* LDAP. I can see the old users/groups when I run smbldap-userlist or smbldap-grouplist.

When I log on in a windows client it authenticates with the user/password from the old LDAP but when I try to access to a shared samba resource then it accepts the user/password from the new LDAP. Is this normal?

I have modified also ldap.conf file in the samba server to point the new LDAP server. Is there something I need to change apart from smb.conf and/or ldap.conf?

Many thanks for your help

Hello

You can try by removing samba cache files /var/cache/samba

Or by trying

testparm -v|grep cache

Thanks