[Fedora-directory-users] Problems configuring Samba PDC + FDS error "No privileges assigned to SID"

[Me]

Thanks. That got me past that part, I can obtain the correct output
from "net groupmap list" but now I get "Username not found!" when I
run the following command:

pdbedit -U S-1-5-21-3420770344-727635258-2597706457-500 -u Administrator -r

smbldap_search_domain_info: Searching
for:[(&(objectClass=sambaDomain)(sambaDomainName=DOMAIN))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
smbldap_search_domain_info: Searching
for:[(&(objectClass=sambaDomain)(sambaDomainName=DOMAIN))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
Username not found!

Yet ldapsearch shows:

ldapsearch -b dc=test,dc=com -x 'Administrator'

# extended LDIF
#
# LDAPv3
# base <dc=test,dc=com> with scope subtree
# filter: (objectclass=*)
# requesting: Administrator
#

# test.com
dn: dc=test,dc=com

# Directory Administrators, test.com
dn: cn=Directory Administrators, dc=test,dc=com

# Groups, test.com
dn: ou=Groups, dc=test,dc=com

# People, test.com
dn: ou=People, dc=test,dc=com

# Special Users, test.com
dn: ou=Special Users,dc=test,dc=com

# Accounting Managers, groups, test.com
dn: cn=Accounting Managers,ou=groups,dc=test,dc=com

# HR Managers, groups, test.com
dn: cn=HR Managers,ou=groups,dc=test,dc=com

# QA Managers, groups, test.com
dn: cn=QA Managers,ou=groups,dc=test,dc=com

# PD Managers, groups, test.com
dn: cn=PD Managers,ou=groups,dc=test,dc=com

# DOMAIN, test.com
dn: sambaDomainName=DOMAIN,dc=test,dc=com

# Domain Admins, Groups, test.com
dn: cn=Domain Admins,ou=Groups,dc=test,dc=com

# Domain Users, Groups, test.com
dn: cn=Domain Users,ou=Groups,dc=test,dc=com

# Domain Guests, Groups, test.com
dn: cn=Domain Guests,ou=Groups,dc=test,dc=com

# Domain Computers, Groups, test.com
dn: cn=Domain Computers,ou=Groups,dc=test,dc=com

# IS, Groups, test.com
dn: cn=IS,ou=Groups,dc=test,dc=com

# Administrator, People, test.com
dn: uid=Administrator,ou=People,dc=test,dc=com

# search result
search: 2
result: 0 Success

# numResponses: 17
# numEntries: 16

I am sure that this is something I am doing wrong again but I can't find it.

On Jan 7, 2008 5:06 AM, Jonathan Barber <j.barber at dundee.ac.uk> wrote:
> On Fri, Jan 04, 2008 at 03:37:32PM -0500, Me wrote:
> > I am having trouble getting samba-3.0.24-11 setup as a PDC with an
> > ldap backend using FDS on a FC6 test box.  I have installed the
> > 1.0.4-1 version of the directory server accepting the defaults except
> > for the server name with out any problems.  I can query the directory
> > server and it is populated with the proper objects.  I am using the
> > instructions in the Howto:Samba documentation on the FDS Wiki site
> > <http://directory.fedoraproject.org/wiki/Howto:Samba>.  I am able to
> > perform all of the tasks without any problems until I get to the part
> > of the install that has me run the following command:
> >
> > net groupmap list
>
> [snip]
>
> Your smb.conf has the config:
> >    ldap group suffix = ou=Group
>
> But the ldif you provided has:
> > dn: ou=Groups, dc=test,dc=com
>
> Note the additional "s".
>
> Cheers.
> --
> Jonathan Barber
> High Performance Computing Analyst
> Tel. +44 (0) 1382 386389
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>