Bonjour a tous,
J’essaie d’installer OpenLdap en contrôleur de domaine couplé avec Samba, cependant j’ai un problème.
En effet lorsque j’essaie d’ajouter un groupe j’ai le message d’erreur suivant :
J’ai cherché un peu partout, j’ai regarder des exemples de smbldap.conf et je ne trouve pas la solution a mon problème …
En espérant que vous pourrez m’aider … 
Je vous mets en dessous les fichier de config :
smbldap.conf :
[quote]# $Source: /opt/cvs/samba/smbldap-tools/configure.pl,v
smbldap-tools.conf : Q & D configuration file for smbldap-tools
This code was developped by IDEALX (IDEALX.org/) and
contributors (their names can be found in the CONTRIBUTORS file).
Copyright © 2001-2002 IDEALX
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
USA.
Purpose :
. be the configuration file for all smbldap-tools scripts
##############################################################################
General Configuration
##############################################################################
Put your own SID. To obtain this number do: “net getlocalsid”.
If not defined, parameter is taking from “net getlocalsid” return
SID=“S-1-5-21-1832087512-763905416-3676029977”
Domain name the Samba server is in charged.
If not defined, parameter is taking from smb.conf configuration file
Ex: sambaDomain=“IDEALX-NT”
sambaDomain=“longwy”
##############################################################################
LDAP Configuration
##############################################################################
Notes: to use to dual ldap servers backend for Samba, you must patch
Samba with the dual-head patch from IDEALX. If not using this patch
just use the same server for slaveLDAP and masterLDAP.
Those two servers declarations can also be used when you have
. one master LDAP server where all writing operations must be done
. one slave LDAP server where all reading operations must be done
(typically a replication directory)
Slave LDAP server
Ex: slaveLDAP=127.0.0.1
If not defined, parameter is set to “127.0.0.1”
slaveLDAP=“192.168.0.200”
Slave LDAP port
If not defined, parameter is set to “389”
slavePort=“389”
Master LDAP server: needed for write operations
Ex: masterLDAP=127.0.0.1
If not defined, parameter is set to “127.0.0.1”
masterLDAP=“192.168.0.200”
Master LDAP port
If not defined, parameter is set to “389”
masterPort=“389”
Use TLS for LDAP
If set to 1, this option will use start_tls for connection
(you should also used the port 389)
If not defined, parameter is set to “1”
ldapTLS=“0”
How to verify the server’s certificate (none, optional or require)
see “man Net::LDAP” in start_tls section for more details
verify=""
CA certificate
see “man Net::LDAP” in start_tls section for more details
cafile=""
certificate to use to connect to the ldap server
see “man Net::LDAP” in start_tls section for more details
clientcert=""
key certificate to use to connect to the ldap server
see “man Net::LDAP” in start_tls section for more details
clientkey=""
LDAP Suffix
Ex: suffix=dc=IDEALX,dc=ORG
suffix=“dc=longwy,dc=local”
Where are stored Users
Ex: usersdn=“ou=Users,dc=IDEALX,dc=ORG”
Warning: if ‘suffix’ is not set here, you must set the full dn for usersdn
usersdn=“ou=Users,${suffix}”
Where are stored Computers
Ex: computersdn=“ou=Computers,dc=IDEALX,dc=ORG”
Warning: if ‘suffix’ is not set here, you must set the full dn for computersdn
computersdn=“ou=Computers,${suffix}”
Where are stored Groups
Ex: groupsdn=“ou=Groups,dc=IDEALX,dc=ORG”
Warning: if ‘suffix’ is not set here, you must set the full dn for groupsdn
groupsdn=“ou=Groups,${suffix}”
Where are stored Idmap entries (used if samba is a domain member server)
Ex: groupsdn=“ou=Idmap,dc=IDEALX,dc=ORG”
Warning: if ‘suffix’ is not set here, you must set the full dn for idmapdn
idmapdn=“ou=Idmap,${suffix}”
Where to store next uidNumber and gidNumber available for new users and groups
If not defined, entries are stored in sambaDomainName object.
Ex: sambaUnixIdPooldn=“sambaDomainName=${sambaDomain},${suffix}”
Ex: sambaUnixIdPooldn=“cn=NextFreeUnixId,${suffix}”
sambaUnixIdPooldn=“sambaDomainName=longwy,${suffix}”
Default scope Used
scope=“sub”
Unix password encryption (CRYPT, MD5, SMD5, SSHA, SHA, CLEARTEXT)
hash_encrypt=“MD5”
if hash_encrypt is set to CRYPT, you may set a salt format.
default is “%s”, but many systems will generate MD5 hashed
passwords if you use “$1$%.8s”. This parameter is optional!
crypt_salt_format=""
##############################################################################
Unix Accounts Configuration
##############################################################################
Login defs
Default Login Shell
Ex: userLoginShell="/bin/bash"
userLoginShell="/bin/bash"
Home directory
Ex: userHome="/home/%U"
userHome="/home/%U"
Default mode used for user homeDirectory
userHomeDirectoryMode=“700”
Gecos
userGecos=“System User”
Default User (POSIX and Samba) GID
defaultUserGid=“513”
Default Computer (Samba) GID
defaultComputerGid=“515”
Skel dir
skeletonDir="/etc/skel"
Default password validation time (time in days) Comment the next line if
you don’t want password to be enable for defaultMaxPasswordAge days (be
careful to the sambaPwdMustChange attribute’s value)
defaultMaxPasswordAge=“45”
##############################################################################
SAMBA Configuration
##############################################################################
The UNC path to home drives location (%U username substitution)
Just set it to a null string if you want to use the smb.conf ‘logon home’
directive and/or disable roaming profiles
Ex: userSmbHome="\PDC-SMB3%U"
userSmbHome="\SRVPDC%U"
The UNC path to profiles locations (%U username substitution)
Just set it to a null string if you want to use the smb.conf ‘logon path’
directive and/or disable roaming profiles
Ex: userProfile="\PDC-SMB3\profiles%U"
userProfile="\SRVPDC\profiles%U"
The default Home Drive Letter mapping
(will be automatically mapped at logon time if home directory exist)
Ex: userHomeDrive=“H:”
userHomeDrive=“H:”
The default user netlogon script name (%U username substitution)
if not used, will be automatically username.cmd
make sure script file is edited under dos
Ex: userScript=“startup.cmd” # make sure script file is edited under dos
userScript=“logon.bat”
Domain appended to the users “mail”-attribute
when smbldap-useradd -M is used
Ex: mailDomain=“idealx.com”
mailDomain=""
##############################################################################
SMBLDAP-TOOLS Configuration (default are ok for a RedHat)
##############################################################################
Allows not to use smbpasswd (if with_smbpasswd == 0 in smbldap_conf.pm) but
prefer Crypt::SmbHash library
with_smbpasswd=“0"
smbpasswd=”/usr/bin/smbpasswd"
Allows not to use slappasswd (if with_slappasswd == 0 in smbldap_conf.pm)
but prefer Crypt:: libraries
with_slappasswd=“0"
slappasswd=”/usr/sbin/slappasswd"
comment out the following line to get rid of the default banner
no_banner=“1”
[/quote]
smbldap_bind.conf :
[quote]############################
Credential Configuration
############################
Notes: you can specify two differents configuration if you use a
master ldap for writing access and a slave ldap server for reading access
By default, we will use the same DN (so it will work for standard Samba
release)
slaveDN="cn=admin,dc=longwy,dc=local"
slavePw="monmdp"
masterDN="cn=admin,dc=longwy,dc=local"
masterPw=“monmdp”
[/quote]
smb.conf :
[quote][global]
workgroup = longwy
netbios name = SRVPDC
security = user
server string = Samba Server %v
encrypt passwords = Yes
ldap passwd sync = yes
passwd program = /usr/sbin/smbldap-passwd -u "%u"
passwd chat = "Changing *\nNew password*" %n\n "*Retype new password*" %n\n"
log level = 3
syslog = 3
log file = /var/log/samba/log.%U
max log size = 100000
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
Dos charset = CP932
Unix charset = UTF-8
domain logons = Yes
domain master = Yes
local master = Yes
logon home = \SRVPDC%U
logon path = \SRVPDC\profiles%U
logon script = logon.bat
logon drive = H:
os level = 65
preferred master = Yes
dns proxy = no
wins support = yes
passdb backend = ldapsam:ldap://192.168.0.200/
ldap admin dn = cn=admin,dc=longwy,dc=local
ldap suffix = dc=longwy,dc=local
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -t 0 -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m “%u” "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x “%u” "%g"
set primary group script = /usr/sbin/smbldap-usermod -g ‘%g’ ‘%u’
ldap ssl = no
create mask = 0640
directory mask = 0750
guest account = nobody
map to guest = Bad User
[homes]
comment = Dossiers personnels
browseable = no
writable = yes
guest ok = no
valid users = %U, longwy%U
[netlogon]
path = /home/netlogon/%G
browseable = No
read only = yes
guest ok = no
[profiles]
comment = profils itinerants
path = /home/profiles
browseable = no
writable = yes
guest ok = no
create mask = 0700
directory mask = 0700
valid users = %U, longwy%U
[public]
comment = Dossier public
path = /home/public
writable = yes
public = yes
create mask = 0777
directory mask = 0777
[/quote]
Personne pour donner un coup de main ? 
