[Fedora-directory-users] Problem with Samba - Fedora-ds Integration (HOWTO:SAMBA)

[Tom.Tran at noaa.gov]

I followed the document until I get the following error:

#/opt/fedora-ds/slapd-miapogo/ldif2ldap "cn=Directory Manager" fds80000
 /tmp/sambaGroups.ldif

This command returns:
   adding new entry cn=Domain Admins,ou=Groups,dc=sefsc,dc=noaa,dc=gov
   adding new entry cn=Domain Users,ou=Groups,dc=sefsc,dc=noaa,dc=gov
   adding new entry cn=Domain Guests,ou=Groups,dc=sefsc,dc=noaa,dc=gov
   adding new entry cn=Domain 
Computers,ou=Groups,dc=sefsc,dc=noaa,dc=gov

I then run the following command:

# net groupmap add rid=512 ntgroup='Domain Admins' unixgroup='Domain 
Admins'

This command returns:
[2005/08/19 09:48:37, 0] 
passdb/pdb_ldap.c:ldapsam_add_group_mapping_entry(2330)
ldapsam_add_group_mapping_entry: failed to add group 2512 error: 
Insufficient 'write' privilege to teh 'sambaSID' attribute of 
entry 'cn=domain admins,ou=groups,dc=sefsc,dc=noaa,dc=gov'.
(Insufficient access)
adding entry for group Domain Admins failed!

I am a novice on this subject and have no idea how to fix it.  Please 
help!

Tom Tran

----- Original Message -----
From: <Tom.Tran at noaa.gov>
Date: Wednesday, August 17, 2005 3:15 pm
Subject: Samba - Fedora-ds Integration (HOWTO:SAMBA)

> Hi,
> 
> I have problems with following the instruction in the HOWTO:SAMBA 
> document. I have RedHat 4.1.18, samba-3.0.10, and 
> fedora-ds-7.1-2.RHEL4.  I don't have ldap or openldap installed 
> because 
> I am using fedora-ds 
> instead.  I tested samba and fedora-ds, both seemed to work fine.  
> I 
> also made sure that samba's daemons 
> (smbd, nmbd, winbindd), and fedora-ds were started
> 
> I followed the steps in the HOWTO:SAMBA doc, when  I reached the 
> step "Populating FDS with PDC 
> Entry" and ran the command:
>    # net getlocalsid
> I got the message:
>   lib/smbldap.c:smbldap_search_domain_info(1392)
>   Adding domain info to SEFSC failed with NT_STATUS_UNSUCCESSFUL
>   SID for domain MIAPOGO is : S-1-5-21-2139381707-154793685-
> 3088283579
> Here is my /etc/samba/smb.conf
> ------------------------------
> # Global parameters
> [global]
> workgroup = SEFSC
> netbios name = MIAPOGO
> server string = Samba %u on (%L)
> log file = /var/log/samba/%m.log
> max log size = 50
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> printcap name = /etc/printcap
> dns proxy = No
> idmap uid = 16777216-33554431
> idmap gid = 16777216-33554431
> cups options = raw
> 
> security = user
> passdb backend = ldapsam:ldap://miapogo.sefsc.noaa.gov
> ldap suffix = dc=sefsc,dc=noaa,dc=gov
> ldap user suffix = ou=People
> ldap machine suffix = ou=Computers
> ldap group suffix = ou=Groups
> 
> os level = 33
> domain logons = yes
> domain master = yes
> local master = yes
> preferred master = yes
> 
> wins support = yes
> 
> logon home = \\%L\%u\profiles
> logon path = \\%L\profiles\%u
> logon drive = H:
> 
> template shell = /bin/false
> winbind use default domain = yes
> 
> [netlogon]
> path = /var/lib/samba/netlogon
> read only = yes
> browseable = no
> 
> [profiles]
> path = /var/lib/samba/profiles
> read only = no
> create mask = 0600
> directory mask = 0700
> 
> [homes]
> comment = Home Directories
> read only = No
> browseable = No
> 
> [printers]
> comment = All Printers
> path = /var/spool/samba
> printable = Yes
> browseable = No
> --------------------------
> 
> Tom Tran
> 
> 
>