[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: samba ldap
Kaushal Shriyan wrote:
> On Wed, Oct 28, 2009 at 11:55 PM, Zdenek Styblik <stybla@turnovfree.net> wrote:
>> Kaushal Shriyan wrote:
>>> On Wed, Oct 28, 2009 at 11:37 PM, Zdenek Styblik <stybla@turnovfree.net> wrote:
>>>> Kaushal Shriyan wrote:
>>>>> On Wed, Oct 28, 2009 at 5:17 AM, Brett Maxfield
>>>>> <brett.maxfield@gmail.com> wrote:
>>>>>> The log from samba says ldap: where's your test command says ldaps: maybe
>>>>>> try ldap: from test command in case you only listen for ssl?
>>>>>>
>>>>>> On 27/10/2009, at 7:28 PM, Kaushal Shriyan <kaushalshriyan@gmail.com> wrote:
>>>>>>
>>>>>>> Hi,
>>>>>>>
>>>>>>> I am following https://help.ubuntu.com/8.10/serverguide/C/samba-ldap.html
>>>>>>> and ldap works perfectly fine.
>>>>>>> I have issues with connecting to ldap from samba.
>>>>>>>
>>>>>>> I get
>>>>>>>
>>>>>>> [2009/10/27 12:37:28, 1] lib/smbldap.c:another_ldap_try(1153)
>>>>>>> Connection to LDAP server failed for the 9 try!
>>>>>>> [2009/10/27 12:37:29, 2] lib/smbldap.c:smbldap_open_connection(786)
>>>>>>> smbldap_open_connection: connection opened
>>>>>>> [2009/10/27 12:37:29, 2] lib/smbldap.c:smbldap_connect_system(982)
>>>>>>> failed to bind to server ldap://localhost/ with
>>>>>>> dn="cn=admin,dc=mt,dc=webaroo,dc=com" Error: Can't contact LDAP server
>>>>>>> (unknown)
>>>>>>>
>>>>>>> I have ldapserver running on the same server as samba server is
>>>>>>> running. when i run ldapsearch -x -H ldaps://localhost. I am able to
>>>>>>> see the user details.
>>>>>>> Please let me know if anyone needs configs and additional information.
>>>>>>> Also when i run smbldap-populate, i get
>>>>>>> http://paste.ubuntu.com/302630/
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> Kaushal
>>>>> Hi,
>>>>>
>>>>> Below are my configs.
>>>>>
>>>>> http://pastebin.com/dcb24c87 ---> ldap.conf
>>>>> http://pastebin.com/d721f0d4d ---> slapd.conf
>>>>> http://pastebin.com/d102cbfc5 --->samba.conf
>>>>> http://pastebin.com/d4a02b874 --> smbldap.conf
>>>>> http://pastebin.com/d716fddc0 ---> smbldap_bind.conf
>>>>>
>>>>> I am running both ldap and samba server on the same host running on
>>>>> ubuntu 8.04 Hardy server. I am following
>>>>> https://help.ubuntu.com/8.10/serverguide/C/samba-ldap.html. I get the
>>>>> below issue when i run smbldap-populate I get
>>>>> http://pastebin.com/d30ed0db6.
>>>>>
>>>>> Please let me know if anyone needs more information.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Kaushal
>>>> As three of already pointed out, the error is probably in ldap X ldaps.
>>>> I recommend you to read smbldap.conf carefully.
>>>>
>>>> --- snip ---
>>>> masterLDAP="127.0.0.1"
>>>>
>>>> #
>>>> # Use TLS for LDAP
>>>> #
>>>> # If set to 1, this option will use start_tls for connection
>>>> #
>>>> # (you should also used the port 636)
>>>> #
>>>> # If not defined, parameter is set to "1"
>>>> #
>>>> ldapTLS="0"
>>>> #
>>>> ldapSSL="1"
>>>> ------------
>>>>
>>>> It should be obvious (yes, set ldapSSL=0; set ldapTLS=1).
>>>>
>>>> btw your configs don't show whether is LDAP listening - is it port 389,
>>>> or 636? Or better, it would be great to show parameters passed to # slapd;
>>> Hi Zdenek Styblik
>>>
>>> My slapd is running on port 636. so is it ldapSSL=1; set ldapTLS=0 ?
>>>
>>> Please suggest/guide.
>>>
>>> Thanks,
>>>
>>> Kaushal
>> Try ldapSSL=0 + ldapTLS=1; as ldapSSL would be required for slapd
>> listening at 389, imho.
>> Check the log, if:
>>> failed to bind to server ldap://localhost/ with
>> got changed to:
>>> .... bind to server ldaps://localhost/ ....
>> Zdenek
>>
>> --
>> Zdenek Styblik
>> Net/Linux admin
>> OS TurnovFree.net
>> email: stybla@turnovfree.net
>> jabber: stybla@jabber.turnovfree.net
>>
>
> Hi Zdenek,
>
> I changed as suggested by you
> I get http://pastebin.com/d26f0e671
>
> Any further ideas.
>
> Thanks,
>
> Kaushal
And if you set both ldapSSL + ldapTLS = 0?
Also, some logs from samba, or ldap would be great. This output is just
non-saying, sorry.
Zdenek
--
Zdenek Styblik
Net/Linux admin
OS TurnovFree.net
email: stybla@turnovfree.net
jabber: stybla@jabber.turnovfree.net