[K12OSN] re: smbldap-installer can not bind to ldap server

[Matt Oquist]

> From: Barry R Cisna <brcisna at eazylivin.net>
> Subject: [K12OSN] smbldap-installer can not bind to ldap server
> To: k12osn at redhat.com
>
> Matt Omquist

"Oquist", no "m". :)

> 1. When i do the /home setup per MaOmq homepage, to be mounted via nfs
> when i do the "mount -a" i get permission denied.

How did you export /home on your NFS server? What is the output of
$ cat /etc/exports
on the NFS server box?

What is the IP address of your NFS client box (the one where you
'mount -a')?

> 2. In webmin Ldap module i have in the module config: /etc/ldap.conf for
> ldap client. For ROOT ldap client password the default is set to
> /etc/ldap.secrets,,, This doe not exist. Where should i derive the Root
> ldap password from? (file name),So,, when i do a "validate Ldap server "
> button,I get the following error message.
> " Connecting to LDAP server ..
> .. connection failed : Failed to bind to LDAP server 127.0.0.1 as
> cn=nssldap,ou=DSA,dc=xyz,dc=net : No password, did you mean noauth or
> anonymous ?

You want this bind DN:
cn=Manager,dc=xyz,dc=net

I recommend edsadmin for a GUI tool; it's painlessly simple to install
and use. Just log in with:
cn=Manager,dc=xyz,dc=net
<your password>
<your server name/IP>

...and it works.

> Does the above syntax look correct for the Root Ldap base, etc?

Your syntax is fine, but your actual data is not.

> Also when trying to join a windows xp client to this samba domain i get
> simply "Domain does not exist " error. Nothing shows up in samba logs on

Have you rebooted the Samba/LDAP server after you configured it? PAM
needs to be reinitialized, and the easiest way to do this is to
reboot. Then, after you've rebooted, make sure samba is running. One
way to test samba (and make sure it's actually responding, and that
you can authenticate) is to use smbclient:
$ smbclient -U root -L //<your server name/IP>

If that works, then try from a Windows box:
Run->\\<your server name/IP>

Log in as root with your pw, and it should work.


--
Open Source Software Engineering Consultant
http://majen.net/