Impossible d'ouvrir une session (SAMBA-LDAP)

Impossible d'ouvrir une session (SAMBA-LDAP) - Installation - Linux et OS Alternatifs

Marsh Posté le 02-11-2012 à 13:18:58    

Bonjour à tous,
Je viens de mettre en place un serveur de domaine avec samba et ldap.
- samba 3.5.6
- slapd 2.4.23
J'arrive à joindre les postes au domaine mais à l'ouverture de session j'ai ce message sous windows 7
Aucun serveur d'accès n'est actuellement disponible pour traiter la demande d'ouverture de session.
Sous Windows XP j'ai ce message: le système n'a pas pu ouvrir une session car le domaine DOMAINE-SER n'est pas disponible.
Quelqu'un peut il me donner un coup de main?
Merci

Reply

Marsh Posté le 02-11-2012 à 13:18:58   

Reply

Marsh Posté le 03-11-2012 à 19:25:56    

WINS ?

Reply

Marsh Posté le 05-11-2012 à 11:19:19    

le wins est bien renseigné.

Reply

Marsh Posté le 05-11-2012 à 11:31:12    

nmbd tourne bien ?
tu as des erreurs dans smb.log dans le journal windows ?

Reply

Marsh Posté le 05-11-2012 à 12:08:44    

Voici le contenu de mes logs smb quand je tente une ouverture de session:
[2012/11/05 10:08:45.095840,  3] smbd/server.c:259(remove_child_pid)
  smbd/server.c:259 Unclean shutdown of pid 32060
[2012/11/05 10:08:45.095939,  1] smbd/server.c:267(remove_child_pid)
  Scheduled cleanup of brl and lock database after unclean shutdown

Reply

Marsh Posté le 05-11-2012 à 12:32:09    

essaye d'augmenter la verbosité des logs, et donne les logs complets.
 
 
$ ps aux | egrep '(smb|nmb)'

Reply

Marsh Posté le 05-11-2012 à 12:50:45    

Voici l'état des process
p:/etc# ps aux |egrep '(smb|nmb)'
root       460  0.0  0.0   3312   792 pts/0    S+   10:42   0:00 egrep (smb|nmb)
root      3403  0.0  0.0   9224  1764 ?        Ss   Oct24   0:05 /usr/sbin/nmbd -D
root      3407  0.0  0.0  16580  3240 ?        Ss   Oct24   0:00 /usr/sbin/smbd -D
root      3419  0.0  0.0  16568  1292 ?        S    Oct24   0:00 /usr/sbin/smbd -D
root     16186  0.0  0.0   9660  1800 ?        Ss   Nov02   0:07 /usr/sbin/nmbd -D
root     16191  0.0  0.0  17244  3776 ?        Ss   Nov02   0:00 /usr/sbin/smbd -D
root     16197  0.0  0.0  17244  1736 ?        S    Nov02   0:00 /usr/sbin/smbd -D
root     16862  0.0  0.0   7292  1660 ?        Ss   Oct31   0:16 /usr/sbin/nmbd -D
root     16864  0.0  0.0  13304  3040 ?        Ss   Oct31   0:00 /usr/sbin/smbd -D
root     16870  0.0  0.0  13192  1016 ?        S    Oct31   0:00 /usr/sbin/smbd -D
root     17171  0.0  0.0   9660  1772 ?        Ss   Nov01   0:59 /usr/sbin/nmbd -D
root     17176  0.0  0.0  17188  3728 ?        Ss   Nov01   0:00 /usr/sbin/smbd -D
root     17182  0.0  0.0  17188  1516 ?        S    Nov01   0:00 /usr/sbin/smbd -D
root     26096  0.0  0.0   9196  1752 ?        Ss   Oct30   0:47 /usr/sbin/nmbd -D
root     26101  0.0  0.0  16472  3384 ?        Ss   Oct30   0:00 /usr/sbin/smbd -D
root     26107  0.0  0.0  16472  1240 ?        S    Oct30   0:00 /usr/sbin/smbd -D
root     26993  0.0  0.0  17268  3384 ?        S    06:09   0:00 /usr/sbin/smbd -D
root     27475  0.0  0.1  17504  4228 ?        S    06:38   0:01 /usr/sbin/smbd -D
root     27543  0.0  0.1  17280  4100 ?        S    06:39   0:00 /usr/sbin/smbd -D
root     27578  0.0  0.0  17380  3964 ?        S    06:40   0:00 /usr/sbin/smbd -D
1020     27858  0.0  0.1  17764  4572 ?        S    06:56   0:01 /usr/sbin/smbd -D
root     28898  0.0  0.0  17380  3664 ?        S    07:49   0:00 /usr/sbin/smbd -D
root     30341  0.0  0.0  16856  3192 ?        S    08:55   0:00 /usr/sbin/smbd -D
root     30520  0.0  0.0  16856  3192 ?        S    09:03   0:00 /usr/sbin/smbd -D
root     32455  0.0  0.0  16816  3196 ?        S    10:21   0:00 /usr/sbin/smbd -D
root     32502  0.0  0.0  17512  3888 ?        S    10:23   0:00 /usr/sbin/smbd -D
root     32564  0.0  0.1  17504  4148 ?        S    10:26   0:00 /usr/sbin/smbd -D
1021     32734  0.0  0.0  17432  3236 ?        S    10:35   0:00 /usr/sbin/smbd -D
 
après redemarrage de samba et slapd et retentative d'ouverture de session j'ai ceci:
p:/etc# tail -f /var/log/samba/log.smbd
  Error = Address already in use
[2012/11/05 10:47:57.827633,  0] smbd/server.c:500(smbd_open_one_socket)
  smbd_open_once_socket: open_socket_in: Address already in use
[2012/11/05 10:47:57.827729,  2] lib/util_sock.c:880(open_socket_in)
  bind failed on port 139 socket_addr = 0.0.0.0.
  Error = Address already in use
[2012/11/05 10:47:57.827819,  0] smbd/server.c:500(smbd_open_one_socket)
  smbd_open_once_socket: open_socket_in: Address already in use
[2012/11/05 10:47:57.828131,  2] smbd/server.c:721(smbd_parent_loop)
  waiting for connections
[2012/11/05 10:50:09.015053,  3] smbd/server.c:259(remove_child_pid)
  smbd/server.c:259 Unclean shutdown of pid 638
[2012/11/05 10:50:09.015127,  1] smbd/server.c:267(remove_child_pid)
  Scheduled cleanup of brl and lock database after unclean shutdown
[2012/11/05 10:50:29.016377,  1] smbd/server.c:240(cleanup_timeout_fn)
  Cleaning up brl and lock database after unclean shutdown
[2012/11/05 10:50:29.016647,  2] lib/messages_local.c:289(message_notify)
  message to process 16197 failed - No such process
[2012/11/05 10:50:29.016726,  2] lib/messages_local.c:379(messaging_tdb_send)
  pid 16197 doesn't exist - deleting messages record
[2012/11/05 10:50:29.016802,  2] lib/messages.c:127(traverse_fn)
  pid 16197 doesn't exist - deleting connections -1 []
[2012/11/05 10:50:29.017037,  2] lib/messages_local.c:289(message_notify)
  message to process 16186 failed - No such process
[2012/11/05 10:50:29.017088,  2] lib/messages_local.c:379(messaging_tdb_send)
  pid 16186 doesn't exist - deleting messages record
[2012/11/05 10:50:29.017140,  2] lib/messages.c:127(traverse_fn)
  pid 16186 doesn't exist - deleting connections -1 []
 

Reply

Marsh Posté le 05-11-2012 à 13:20:22    

[2012/11/05 10:47:57.827729,  2] lib/util_sock.c:880(open_socket_in)
  bind failed on port 139 socket_addr = 0.0.0.0.
  Error = Address already in use  
 
Essaye
 
# /etc/init.d/samba stop; killall -9 smbd; killall -9 nmbd
# /etc/init.d/samba start

Reply

Marsh Posté le 05-11-2012 à 13:29:09    

j'ai toujours la même erreur:
p:/etc# tail -f /var/log/samba/log.smbd
  Error = Address already in use
[2012/11/05 11:28:52.666675,  0] smbd/server.c:500(smbd_open_one_socket)
  smbd_open_once_socket: open_socket_in: Address already in use
[2012/11/05 11:28:52.666870,  2] lib/util_sock.c:880(open_socket_in)
  bind failed on port 139 socket_addr = 0.0.0.0.
  Error = Address already in use
[2012/11/05 11:28:52.667058,  0] smbd/server.c:500(smbd_open_one_socket)
  smbd_open_once_socket: open_socket_in: Address already in use
[2012/11/05 11:28:52.667437,  2] smbd/server.c:721(smbd_parent_loop)
  waiting for connections

Reply

Marsh Posté le 05-11-2012 à 14:13:47    

# ps aux | egrep '(smb|nmb)'

Reply

Marsh Posté le 05-11-2012 à 14:13:47   

Reply

Marsh Posté le 05-11-2012 à 14:13:57    

montre aussi ton smb.conf

Reply

Marsh Posté le 05-11-2012 à 16:01:21    

p:/etc# ps aux |egrep '(smb|nmb)'
root      1472  0.0  0.0   9660  1796 ?        Ss   11:28   0:01 /usr/sbin/nmbd -D
root      1477  0.0  0.0  17244  3552 ?        Ss   11:28   0:00 /usr/sbin/smbd -D
root      1483  0.0  0.0  17244  1756 ?        S    11:28   0:00 /usr/sbin/smbd -D
root      3775  0.0  0.0   3316   828 pts/0    S+   13:54   0:00 egrep (smb|nmb)
 
 
voici mon smb.conf:
 
[global]
 display charset = ISO8859-1
 unix charset = ISO8859-1
 dos charset = 850
 
 workgroup = domain-rictel
 realm = domain-rictel
 netbios name = svr01-anrmp
 server string = Serveur de Domaine ANRMP PDC
 
 security = USER
 passdb backend = ldapsam:ldap://127.0.0.1/
 passwd program = /usr/bin/smbpasswd %u
 username map = /etc/samba/smbusers
 unix password sync = Yes
 
 log level = 3
 syslog = 3
 log file = /var/log/samba/log.%m
 max log size = 1000
 
 announce version = 5.0
 name resolve order = wins lmhosts bcast
 server signing = Yes
 keepalive = 5
 socket options = TCP_NODELAY SO_SNDBUF=819200 SO_RCVBUF=819200
 
 ldap admin dn = cn=admin,dc=domain-rictel
 ldap delete dn = Yes
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap machine suffix = ou=Computers
 ldap suffix = dc=domain-rictel
 ldap ssl = no
 ldap user suffix = ou=Users
 idmap backend = dc=domain-rictel
 idmap uid = 500-10000000
 idmap gid = 500-10000000
 add user script = /usr/sbin/smbldap-useradd -a -m -G "Domain Users" "%u"
 add group script = /usr/sbin/smbldap-groupadd -p "%g"
 add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
 delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
 set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
 add machine script = /usr/sbin/smbldap-useradd -i "%u"
 
 logon script = %u.bat
 logon path = \\%L\profiles\%u
 logon drive = H:
 logon home = \\%L\homes\%u
 domain logons = Yes
 
 os level = 95
 preferred master = Yes
 domain master = Yes
 
 eventlog list = Security, Application, Syslog, Apache
 message command = /bin/sh -c '/usr/bin/linpopup
 panic action = /usr/share/samba/panic-action %d
 
 #winbind separator = \
 winbind cache time = 300
 hide unreadable = Yes
 #interfaces = 192.168. 10.0 127.0.0.1
 
[homes]
 comment = Home Directories
 path = /home/%u
 read only = No
 locking = No
 share modes = No
 
[netlogon]
 comment = Network Logon Service
 path = /home/netlogon
 locking = No
 share modes = No
 
[profiles]
 comment = User Profiles
 path = /home/profiles
 read only = No
 create mask = 0660
 directory mask = 0770
 profile acls = Yes
 browseable = No
 locking = No
 
[printers]
 comment = All Printers
 path = /var/spool/samba
 printable = Yes
 browseable = No
 locking = No
 share modes = No
 
[pdf-documents]
 comment = Converted PDF Documents
 path = /home/pdf-documents
 read only = No
 
[pdf-printer]
 comment = PDF Printer Service
 path = /tmp
 guest ok = Yes
 printable = Yes
 use client driver = Yes
 
[Group Policy Object gpo]
 comment = Strategies de groupe
 path = /home/gpo
 invalid users = root
 valid users = @"Domain Admins"
 browseable = No
 root preexec = /etc/samba/script/createGPO --win_user=%U --win_group=%G --ip=%I --os_type=%a --win_host=%m --share=/home/gpo
 
[Partage]
 comment = Partage
 path = /home/lolo/Partage
 read only = No
 guest ok = Yes
 
[Account Operators]
 comment = Account Operators
 path = /home/groups/Account-Operators
 read only = No
 locking = No
 share modes = No
 valid users = @"Account Operators"
 
 
[Administrators]
 comment = Administrators
 path = /home/groups/Administrators
 read only = No
 locking = No
 share modes = No
 valid users = @"Administrators"
 
[Domain Admins]
 comment = Domain Admins
 path = /home/groups/Domain-Admins
 read only = No
 locking = No
 share modes = No
 valid users = @"Domain Admins"
 
[Domain Users]
 comment = Domain Users
 path = /home/groups/Domain-Users
 read only = No
 locking = No
 share modes = No
 valid users = @"Domain Users"
 
[Domain Guests]
 comment = Domain Guests
 path = /home/groups/Domain-Guests
 read only = No
 locking = No
 share modes = No
 valid users = lolo
 
[Print Operators]
 comment = Print Operators
 path = /home/groups/Print-Operators
 read only = No
 locking = No
 share modes = No
 valid users = @"Print Operators"
 
[Backup Operators]
 comment = Backup Operators
 path = /home/groups/Backup-Operators
 read only = No
 locking = No
 share modes = No
 valid users = @"Backup Operators"
 
[Replicators]
 comment = Replicators
 path = /home/groups/Replicators
 read only = No
 locking = No
 share modes = No
 valid users = @"Replicators"

Reply

Marsh Posté le 05-11-2012 à 16:59:04    

Aussi faut il signaler que mes logs slap me donne ceci:
 
 
slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:30 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:30 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:30 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:30 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:30 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:30 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (gidNumber) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaGroupType) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed
Nov  5 14:51:31 svr01 slapd[1416]: <= bdb_equality_candidates: (sambaSID) not indexed

Reply

Marsh Posté le 05-11-2012 à 17:06:56    

ton serveur est bien integré à ton domaine (entrée SERVEUR$) ?

Reply

Marsh Posté le 05-11-2012 à 17:22:36    

Pouvez vous être un peu plus explicite ?
Je ne comprends pas très bien ?

Reply

Marsh Posté le 05-11-2012 à 17:26:26    

dans ton annuaire ldap as-tu une entrée svr01-anrmp$ ?

Reply

Marsh Posté le 05-11-2012 à 17:26:31    

dans l'ou computers

Reply

Marsh Posté le 05-11-2012 à 17:36:52    

non
Faut il y ajouter ce computer ???

Reply

Marsh Posté le 05-11-2012 à 17:42:32    

s'il n'y est pas je ne pense pas que ça fonctionne

Reply

Marsh Posté le 05-11-2012 à 18:01:43    

le computer svr01-anrmp vient être créé dans le LDAP. Dans l'interface graphique il apparait bien. Mais mon problème demeure le même.
Les autres postes tests sont dans le ldap, j'ai 3 postes tests et les trois renvoie le même message d'erreur.

Reply

Marsh Posté le 05-11-2012 à 18:17:19    

Tu as essayé un serveur samba sans ldap, puis ajouté le support LDAP ?
 
Tu as suivi une doc ?

Reply

Marsh Posté le 05-11-2012 à 19:21:59    

Reply

Marsh Posté le 05-11-2012 à 21:48:29    

montre ton annuaire ldap  
# slapcat
 
montre ta conf ldap

Reply

Marsh Posté le 06-11-2012 à 08:42:21    

Mon slapcat est volumineux. Je vous le colle tout de même. Etant sous squeeze, j'ai pas de fichier slapd.conf.
 
dn:
objectClass: top
objectClass: dcObject
objectClass: organization
o: domain-rictel
dc: domain-rictel
structuralObjectClass: organization
entryUUID: 16abcfe6-b85c-1031-8c31-0fea7f518975
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101103859Z
entryCSN: 20121101103859.068260Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101103859Z
 
dn:
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: e1NTSEF9WEc0YnVqcG1SMlBHbllrRCtPYWhNc2FUUUdlbEttVXk=
structuralObjectClass: organizationalRole
entryUUID: 16ac1672-b85c-1031-8c32-0fea7f518975
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101103859Z
entryCSN: 20121101103859.070076Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101103859Z
 
dn: dc=domain-rictel
objectClass: top
objectClass: dcObject
objectClass: organization
o: domain-rictel
dc: domain-rictel
structuralObjectClass: organization
entryUUID: 7947f9b8-b85c-1031-8f21-ff4acaa1b799
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101104144Z
entryCSN: 20121101104144.508410Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101104144Z
 
dn: cn=admin,dc=domain-rictel
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: e1NTSEF9QUdIeU5TSWtWdExSb1VHU0xMWmxjS1BqWVhmSHFrUHo=
structuralObjectClass: organizationalRole
entryUUID: 79480e8a-b85c-1031-8f22-ff4acaa1b799
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101104144Z
entryCSN: 20121101104144.508954Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101104144Z
 
dn: sambaDomainName=domain-rictel,dc=domain-rictel
sambaAlgorithmicRidBase: 1000
sambaNextUserRid: 1000
structuralObjectClass: sambaDomain
entryUUID: 72cac6aa-b862-1031-80b2-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112430Z
sambaMinPwdLength: 5
sambaPwdHistoryLength: 0
sambaLogonToChgPwd: 0
sambaMaxPwdAge: -1
sambaMinPwdAge: 0
sambaLockoutDuration: 30
sambaLockoutObservationWindow: 30
sambaLockoutThreshold: 0
sambaForceLogoff: -1
sambaRefuseMachinePwdChange: 0
gidNumber: 1000
sambaDomainName: domain-rictel
sambaSID: S-1-5-21-759090094-1980646407-2271802389
objectClass: top
objectClass: sambaDomain
objectClass: sambaUnixIdPool
uidNumber: 1016
sambaNextRid: 1008
entryCSN: 20121105145750.833856Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121105145750Z
 
dn: ou=Users,dc=domain-rictel
objectClass: top
objectClass: organizationalUnit
ou: Users
structuralObjectClass: organizationalUnit
entryUUID: f137006c-b862-1031-80b3-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.704148Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: ou=Groups,dc=domain-rictel
objectClass: top
objectClass: organizationalUnit
ou: Groups
structuralObjectClass: organizationalUnit
entryUUID: f138ba92-b862-1031-80b4-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.715468Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: ou=Computers,dc=domain-rictel
objectClass: top
objectClass: organizationalUnit
ou: Computers
structuralObjectClass: organizationalUnit
entryUUID: f13903da-b862-1031-80b5-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.717344Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: ou=Idmap,dc=domain-rictel
objectClass: top
objectClass: organizationalUnit
ou: Idmap
structuralObjectClass: organizationalUnit
entryUUID: f139478c-b862-1031-80b6-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.719078Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: uid=root,ou=Users,dc=domain-rictel
cn: root
sn: root
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
gidNumber: 0
uid: root
uidNumber: 0
homeDirectory: /home/root
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaHomePath: \\%L\homes\%u
sambaHomeDrive: H:
sambaProfilePath: \\%L\profiles\%u
sambaPrimaryGroupSID: S-1-5-21-759090094-1980646407-2271802389-512
sambaSID: S-1-5-21-759090094-1980646407-2271802389-500
loginShell: /bin/false
gecos: Netbios Domain Administrator
structuralObjectClass: inetOrgPerson
entryUUID: f139c22a-b862-1031-80b7-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
sambaLMPassword: F0CA152EC73A973287EEB66D08E08770
sambaAcctFlags: [U]
sambaNTPassword: 46ED86D79F4E6FCA24EDA6FD0213A03B
sambaPwdLastSet: 1351769305
sambaPwdMustChange: 1355657305
userPassword:: e1NTSEF9U3UyUTBqSGxLTUdmMjBMQ3VzMGVZcUkwTUh4bGNtWko=
shadowLastChange: 15645
shadowMax: 45
entryCSN: 20121101112825.124949Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112825Z
 
dn: uid=nobody,ou=Users,dc=domain-rictel
cn: nobody
sn: nobody
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
gidNumber: 65534
uid: nobody
uidNumber: 65534
homeDirectory: /nonexistent
sambaPwdLastSet: 0
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaPwdMustChange: 2147483647
sambaHomePath: \\%L\homes\%u
sambaHomeDrive: H:
sambaProfilePath: \\%L\profiles\%u
sambaPrimaryGroupSID: S-1-5-21-759090094-1980646407-2271802389-514
sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaAcctFlags: [NUD        ]
sambaSID: S-1-5-21-759090094-1980646407-2271802389-2998
loginShell: /bin/sh
structuralObjectClass: inetOrgPerson
entryUUID: f13a2d14-b862-1031-80b8-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.724953Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Domain Admins,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 512
cn: Domain Admins
memberUid: root
description: Netbios Domain Administrators
sambaSID: S-1-5-21-759090094-1980646407-2271802389-512
sambaGroupType: 2
displayName: Domain Admins
structuralObjectClass: posixGroup
entryUUID: f13a8a0c-b862-1031-80b9-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.727334Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Domain Users,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 513
cn: Domain Users
description: Netbios Domain Users
sambaSID: S-1-5-21-759090094-1980646407-2271802389-513
sambaGroupType: 2
displayName: Domain Users
structuralObjectClass: posixGroup
entryUUID: f13ae10a-b862-1031-80ba-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121102082208.067978Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121102082208Z
 
dn: cn=Domain Guests,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 514
cn: Domain Guests
description: Netbios Domain Guests Users
sambaSID: S-1-5-21-759090094-1980646407-2271802389-514
sambaGroupType: 2
displayName: Domain Guests
structuralObjectClass: posixGroup
entryUUID: f13b2868-b862-1031-80bb-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.731387Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Domain Computers,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 515
cn: Domain Computers
description: Netbios Domain Computers accounts
sambaSID: S-1-5-21-759090094-1980646407-2271802389-515
sambaGroupType: 2
displayName: Domain Computers
structuralObjectClass: posixGroup
entryUUID: f13b7b1a-b862-1031-80bc-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.733505Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Administrators,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 544
cn: Administrators
description: Netbios Domain Members can fully administer the computer/sambaDom
 ainName
sambaSID: S-1-5-32-544
sambaGroupType: 5
displayName: Administrators
structuralObjectClass: posixGroup
entryUUID: f13bc7b4-b862-1031-80bd-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.735465Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Account Operators,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 548
cn: Account Operators
description: Netbios Domain Users to manipulate users accounts
sambaSID: S-1-5-32-548
sambaGroupType: 5
displayName: Account Operators
structuralObjectClass: posixGroup
entryUUID: f13c1de0-b862-1031-80be-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.737671Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Print Operators,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 550
cn: Print Operators
description: Netbios Domain Print Operators
sambaSID: S-1-5-32-550
sambaGroupType: 5
displayName: Print Operators
structuralObjectClass: posixGroup
entryUUID: f13c63cc-b862-1031-80bf-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.739462Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Backup Operators,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 551
cn: Backup Operators
description: Netbios Domain Members can bypass file security to back up files
sambaSID: S-1-5-32-551
sambaGroupType: 5
displayName: Backup Operators
structuralObjectClass: posixGroup
entryUUID: f13cb750-b862-1031-80c0-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.741600Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: cn=Replicators,ou=Groups,dc=domain-rictel
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 552
cn: Replicators
description: Netbios Domain Supports file replication in a sambaDomainName
sambaSID: S-1-5-32-552
sambaGroupType: 5
displayName: Replicators
structuralObjectClass: posixGroup
entryUUID: f13cfd8c-b862-1031-80c1-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112802Z
entryCSN: 20121101112802.743397Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121101112802Z
 
dn: uid=Administrateur,ou=Users,dc=domain-rictel
cn: Administrateur
sn: Administrateur
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
gidNumber: 0
uid: Administrateur
uidNumber: 0
homeDirectory: /home/Administrateur
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaHomePath: \\%L\homes\%u
sambaHomeDrive: H:
sambaProfilePath: \\%L\profiles\%u
sambaPrimaryGroupSID: S-1-5-21-759090094-1980646407-2271802389-512
loginShell: /bin/false
gecos: Netbios Domain Administrator
structuralObjectClass: inetOrgPerson
entryUUID: 360b7c72-b863-1031-80c2-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101112958Z
sambaLMPassword: F0CA152EC73A973287EEB66D08E08770
sambaAcctFlags: [U]
sambaNTPassword: 46ED86D79F4E6FCA24EDA6FD0213A03B
sambaPwdLastSet: 1351769415
sambaPwdMustChange: 1355657415
userPassword:: e1NTSEF9aWJlSXF5MFBjTHZFWXpEU09GV2dMS2YxL0VOeFVHVkg=
shadowLastChange: 15645
shadowMax: 45
sambaSID: S-1-5-21-759090094-1980646407-2271802389-501
entryCSN: 20121102132437.670879Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121102132437Z
 
dn: uid=SERGE,ou=Users,dc=domain-rictel
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: SERGE
sn: SERGE
givenName: SERGE
uid: SERGE
uidNumber: 1003
gidNumber: 513
homeDirectory: /home/SERGE
loginShell: /bin/bash
gecos: Roger KONAN
structuralObjectClass: inetOrgPerson
entryUUID: 5d2185b8-b863-1031-80c3-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101113103Z
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaPwdCanChange: 0
displayName: SERGE
sambaLogonScript: %u.bat
sambaProfilePath: \\%L\profiles\%u
sambaHomePath: \\%L\homes\%u
sambaHomeDrive: H:
sambaNTPassword: 325E559956FC8AC5973F9028286D1C3B
sambaPwdLastSet: 1351769486
sambaPwdMustChange: 1355657486
shadowLastChange: 15645
shadowMax: 45
userPassword:: e1NTSEF9Q1E2aTN5Ti9SSDE4VzB6c1BhckZTM0t6bitUMnVpV1g=
sambaAcctFlags: [U          ]
sambaDomainName: domain-rictel
sambaUserWorkstations: ANRMP-FLAKPO,ANRMP-XP
sambaKickoffTime: 1388880000
shadowExpire: 15710
sambaSID: S-1-5-21-759090094-1980646407-2271802389-516
sambaPrimaryGroupSID: S-1-5-21-759090094-1980646407-2271802389-516
entryCSN: 20121105055628.459996Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121105055628Z
 
dn: uid=lolo,ou=Users,dc=domain-rictel
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: lolo
sn: lolo
givenName: lolo
uid: lolo
uidNumber: 1004
gidNumber: 513
homeDirectory: /home/lolo
loginShell: /bin/bash
gecos: lolo
structuralObjectClass: inetOrgPerson
entryUUID: 0a624fe4-b866-1031-80c4-7fc45f080a2f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121101115013Z
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
displayName: lolo
sambaSID: S-1-5-21-759090094-1980646407-2271802389-3008
sambaPrimaryGroupSID: S-1-5-21-759090094-1980646407-2271802389-513
sambaLogonScript: %u.bat
sambaProfilePath: \\%L\profiles\%u
sambaHomePath: \\%L\homes\%u
sambaHomeDrive: H:
sambaPwdMustChange: 1355658618
shadowMax: 45
sambaNTPassword: 55C001ECE9F7B1946C3B397D49B34D79
sambaPwdLastSet: 1351844516
sambaAcctFlags: [U          ]
shadowLastChange: 15646
userPassword:: e1NTSEF9WCtnRHNDRUQ0WHZ5dFZNSGNhckpTbmVUT3pzaWJjNW0=
sambaDomainName: domain-rictel
entryCSN: 20121102082208.070603Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121102082208Z
 
dn: uid=ANRMP-LKOFFI$,ou=Computers,dc=domain-rictel
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
cn: ANRMP-LKOFFI$
uid: ANRMP-LKOFFI$
uidNumber: 1006
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
gecos: Computer
structuralObjectClass: account
entryUUID: c583369a-b905-1031-94d2-f9f19c95ed9f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121102065337Z
sambaSID: S-1-5-21-759090094-1980646407-2271802389-1002
displayName: ANRMP-LKOFFI$
sambaAcctFlags: [W          ]
sambaNTPassword: 45274BCD5321A65961F4876EADAECCF0
sambaPwdLastSet: 1352107079
entryCSN: 20121105091759.937782Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121105091759Z
 
dn: uid=ANRMP-XP$,ou=Computers,dc=domain-rictel
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
cn: ANRMP-XP$
uid: ANRMP-XP$
uidNumber: 1007
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
gecos: Computer
structuralObjectClass: account
entryUUID: 19cd8ade-b90b-1031-94d3-f9f19c95ed9f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121102073146Z
sambaSID: S-1-5-21-759090094-1980646407-2271802389-1001
displayName: ANRMP-XP$
sambaAcctFlags: [W          ]
sambaNTPassword: 14BE935D866AF2E9041B0BABB539F680
sambaPwdLastSet: 1351846981
entryCSN: 20121102090301.294088Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121102090301Z
 
dn: uid=ANRMP-FLAKPO$,ou=Computers,dc=domain-rictel
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
cn: ANRMP-FLAKPO$
uid: ANRMP-FLAKPO$
uidNumber: 1012
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
gecos: Computer
structuralObjectClass: account
entryUUID: 709b5b5e-b918-1031-94d8-f9f19c95ed9f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121102090715Z
sambaSID: S-1-5-21-759090094-1980646407-2271802389-1005
displayName: ANRMP-FLAKPO$
sambaNTPassword: EB1E761A1A0B55545CDE95AEA135CCB6
sambaPwdLastSet: 1351847781
sambaAcctFlags: [W          ]
entryCSN: 20121102091621.445910Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121102091621Z
 
dn: uid=svr01-anrmp$,ou=Computers,dc=domain-rictel
objectClass: top
objectClass: account
objectClass: posixAccount
cn: svr01-anrmp$
uid: svr01-anrmp$
uidNumber: 1013
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
gecos: Computer
structuralObjectClass: account
entryUUID: 61319330-bba3-1031-9647-b917e1645e8f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121105144651Z
entryCSN: 20121105144651.852431Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121105144651Z
 
dn: uid=domain-rictel$,ou=Computers,dc=domain-rictel
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
cn: SERGE$
uid: SERGE$
uidNumber: 1015
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
gecos: Computer
structuralObjectClass: account
entryUUID: e122da44-bba4-1031-9649-b917e1645e8f
creatorsName: cn=admin,dc=domain-rictel
createTimestamp: 20121105145736Z
sambaSID: S-1-5-21-759090094-1980646407-2271802389-1008
displayName: SERGE$
sambaNTPassword: F8239E6EB8587C4B3701EF5447A73DEC
sambaPwdLastSet: 1352127470
sambaAcctFlags: [W          ]
entryCSN: 20121105145750.847711Z#000000#000#000000
modifiersName: cn=admin,dc=domain-rictel
modifyTimestamp: 20121105145750Z
 

Reply

Marsh Posté le 06-11-2012 à 11:24:09    

en regardant dans mes logs j'ai ceci dans auth.log
 
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: could not connect to any LDAP server as cn=admin,dc=domain-rictel - Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1: Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: could not connect to any LDAP server as cn=admin,dc=domain-rictel - Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1/: Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: could not search LDAP server - Server is unavailable
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: could not connect to any LDAP server as cn=admin,dc=domain-rictel - Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1: Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: could not connect to any LDAP server as cn=admin,dc=domain-rictel - Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1/: Can't contact LDAP server
Nov  6 09:19:59 svr01-anrmp slapd[25058]: nss_ldap: could not search LDAP server - Server is unavailable

Reply

Marsh Posté le 06-11-2012 à 12:17:32    

testparm me ramène des warning:
p:~# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section "[homes]"
WARNING: The "share modes" option is deprecated
Processing section "[netlogon]"
WARNING: The "share modes" option is deprecated
Processing section "[profiles]"
Processing section "[printers]"
WARNING: The "share modes" option is deprecated
Processing section "[pdf-documents]"
Processing section "[pdf-printer]"
Processing section "[Group Policy Object gpo]"
Processing section "[Partage]"
Processing section "[Account Operators]"
WARNING: The "share modes" option is deprecated
Processing section "[Administrators]"
WARNING: The "share modes" option is deprecated
Processing section "[Domain Admins]"
WARNING: The "share modes" option is deprecated
Processing section "[Domain Users]"
WARNING: The "share modes" option is deprecated
Processing section "[Domain Guests]"
WARNING: The "share modes" option is deprecated
Processing section "[Print Operators]"
WARNING: The "share modes" option is deprecated
Processing section "[Backup Operators]"
WARNING: The "share modes" option is deprecated
Processing section "[Replicators]"
WARNING: The "share modes" option is deprecated
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

Reply

Marsh Posté le 06-11-2012 à 17:25:41    

ton ldap ne semble pas accessible
 
quid ?

Reply

Marsh Posté le    

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed