Hola a todos.
Estoy experimentando con el montaje de un PDC con LDAP y Samba.
Aparentemente está instalado y los daemos correspondientes corriendo, pero
algo no va bien.
Me ocurre lo siguiente. Esto, por ejemplo, sale bien:
smbclient -L localhost
Password:
Anonymous login successful
Domain=[CENTRO] OS=[Unix] Server=[Samba 3.0.33-3.7.el5]
Sharename Type Comment
--------- ---- -------
Comun Disk Carpeta general del centro
Profesores Disk Carpeta general de profesores
Alumnos Disk Carpeta general de alumnos
apps Disk Aplicaciones
netlogon Disk Network Logon Service
profiles Disk Profile Share
profdata Disk Profile Data Share
print$ Disk Printer Drivers
IPC$ IPC IPC Service (Samba 3.0.33-3.7.el5)
Anonymous login successful
Domain=[CENTRO] OS=[Unix] Server=[Samba 3.0.33-3.7.el5]
Server Comment
--------- -------
LINUXSRV Samba 3.0.33-3.7.el5
Workgroup Master
--------- -------
CENTRO LINUXSRV
Pero si lo hago lo mismo con root:
smbclient -L localhost -U root%xxxxxxxx
session setup failed: NT_STATUS_LOGON_FAILURE
La password es correcta, porque es la misma que utilizo para acceder al
sistema, la he puesto y repuesto con smbpassw -w xxxxxxxx ... ya no sé qué
más mirar.
También ocurre que ...
getent passwd | grep root
root:x:0:0:root:/root:/bin/bash
operator:x:11:0:operator:/root:/sbin/nologin
root:x:0:0:root:/root:/bin/bash
operator:x:11:0:operator:/root:/sbin/nologin
Entiendo que debería salir una vez nada más, no entiendo por qué sale dos.
Para rematar, desde un equipo Windows XP es imposible añadir dicho equipo al
dominio, me da error de usuario / contraseña.
Agracederé enormemente cualquier ayuda al respecto.
Mis ficheros de configuración son.
*smb.conf:*
[global]
unix charset = LOCALE
workgroup = CENTRO
netbios name = LinuxSrv
admin users = Administrador @"Domain Admins"
interfaces = eth0, lo
bind interfaces only = Yes
passdb backend = ldapsam:ldap://127.0.0.1
enable privileges = Yes
username map = /etc/samba/smbusers
log level = 5
syslog = 0
log file = /var/log/samba/%m
max log size = 50
smb ports = 139
name resolve order = wins bcast hosts
time server = Yes
printcap name = CUPS
show add printer wizard = No
logon script = scripts\logon.bat
logon path = \\%L\profiles\%U
logon drive = X:
domain logons = Yes
preferred master = Yes
wins support = Yes
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
ldap suffix = dc=centro,dc=lan
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=Group
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=Administrador,dc=centro,dc=lan
idmap backend = ldap:ldap://127.0.0.1
idmap uid = 10000-20000
idmap gid = 10000-20000
map acl inherit = Yes
printing = cups
ldap passwd sync = yes
security = user
[homes]
comment = Carpetas particulares de usuario
valid users = %S
read only = No
browseable = No
[Comun]
comment = Carpeta general del centro
path = /data/comun
read only = No
[Profesores]
comment = Carpeta general de profesores
path = /data/profesores
read only = No
[Alumnos]
comment = Carpeta general de alumnos
path = /data/alumnos
read only = No
*/etc/openldap/slapd.conf*
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba.schema
allow bind_v2
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
database bdb
suffix "dc=centro,dc=lan"
rootdn "cn=Administrador,dc=centro,dc=lan"
rootpw {SSHA}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
directory /var/lib/ldap/autenticar
index objectClass eq
index cn,sn,uid,displayName pres,sub,eq
index uidNumber eq
index gidNumber eq
index memberUID eq
index sambaSID eq,sub
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
*/etc/openldap/ldap.conf*
URI ldap://127.0.0.1/
host 127.0.0.1
BASE dc=centro,dc=lan
TLS_CACERTDIR /etc/openldap/cacerts
*/etc/ldap.conf*
host 127.0.0.1
base dc=centro,dc=lan
timelimit 120
bind_timelimit 120
bind_policy soft
idle_timelimit 3600
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon
uri ldap://127.0.0.1/
ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5
*/etc/nsswitch.conf*
passwd: files ldap
shadow: files ldap
group: files ldap
hosts: files dns
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files
netgroup: files ldap
publickey: nisplus
automount: files ldap
aliases: files nisplus
Gracias anticipadas y un cordial saludo,
Arturo Limon