Previous Tutorial :

1. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 1, Installing Base System & Configuring Samba
2. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 2, Configuring OpenLDAP
3. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 3, Configuring smbldap-tools & LDAP Account Manager
4. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 4, Configuring Dynamic DHCP & DNS Server
5. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 5, Testing Samba & Configuring Client

ERROR MESSAGE AND HOW TO SOLVE THE PROBLEM

Samba PDC+OpenLDAP is one of the longest tutorial. These are maybe a typo or incomplete configuration, although I’ve checked and proof read for the typo. Please let me know if you found something problem while trying the tutorial. I’ll be really appreciate to the suggestion to make it as usable as it should be.

Following are some error messages that might be found when doing the configuration. The collection came from my notes while installing and  configuring Samba PDC+OpenLDAP for the first time.

1. Missing Perl Library for LDAP while trying to run smbldap-tools

   smbldap-useradd -m -a root
   

   Can’t locate Net/LDAP.pm in @INC (@INC contains: /usr/sbin/
   /usr/lib/perl5/5.10.0/x86_64-linux-thread-multi /usr/lib/perl5/5.10.0
   /usr/lib/perl5 /site_perl/5.10.0/x86_64-linux-thread-multi
   /usr/lib/perl5/site_perl/5.10.0 /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi
   /usr/lib/perl5 /vendor_perl/5.10.0 /usr/lib/perl5/vendor_perl .) at
   /usr/sbin//smbldap_tools.pm line 26.
   BEGIN failed–compilation aborted at /usr/sbin//smbldap_tools.pm line 26.
   Compilation failed in require at /usr/sbin/smbldap-useradd line 30.
   BEGIN failed–compilation aborted at /usr/sbin/smbldap-useradd line 30.

   Solution : Install perl-ldap with zypper or YAST

2. Missing Perl library for UTF-8
   

   Can’t locate Unicode/MapUTF8.pm in @INC (@INC contains: /usr/sbin/
   /usr/lib/perl5/5.10.0/x86_64-linux-thread-multi /usr/lib/perl5/5.10.0
   /usr/lib/perl5 /site_perl/5.10.0/x86_64-linux-thread-multi
   /usr/lib/perl5/site_perl/5.10.0 /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi
   /usr/lib/perl5 /vendor_perl/5.10.0 /usr/lib/perl5/vendor_perl .) at /usr/sbin//smbldap_tools.pm line 28,
   line 275.
   BEGIN failed–compilation aborted at /usr/sbin//smbldap_tools.pm line 28, line 275.
   Compilation failed in require at /usr/sbin/smbldap-useradd line 30, line 275.
   BEGIN failed–compilation aborted at /usr/sbin/smbldap-useradd line 30, line 275.

   Solution : Install perl-Unicode-MapUTF8 with zypper or YAST

3. Error while running smbldap-useradd -m -a root command
   

   server:/home/vavai/Desktop/openldap-vavai # smbldap-useradd -m -a root
   Error: modifications require authentication at /usr/sbin//smbldap_tools.pm line
   1187, line 466.

   Solution : Check /etc/smbldap-tools/smbldap_bind.conf, domain name (dc=domainname,dc=net) should be correct

   server:/home/vavai/Desktop/openldap-vavai # smbldap-useradd -m -a root
   Error: Insufficient access at /usr/sbin//smbldap_tools.pm line 1187, line 466.

   Solution : Check /etc/smbldap-tools/smbldap_bind.conf, make sure it has valid credentials for LDAP (cn=Manager,
   dc=domainname,dc=net)

4. Error message on running smbpasswd -a

   smbpasswd -a
   

   WARNING: Your ‘passdb backend’ configuration includes multiple backends. This
   is deprecated since Samba 3.0.23. Please check WHATSNEW.txt or the section ‘Passdb
   Changes’ from the ChangeNotes as part of the Samba HOWTO collection. Only the first
   backend (ldapsam:”ldap://server.vavai.net”) is used. The rest is ignored.
   add_new_domain_info: failed to add domain dn= sambaDomainName=VAVAI,dc=vavai,dc=net with: Insufficient access
   no write access to parent
   smbldap_search_domain_info: Adding domain info for VAVAI failed with NT_STATUS_UNSUCCESSFUL

   Solution : Check your password, use the credential user : Manager with ldap password

5. Error message : Connection Refused

   smbclient -L localhost -N
   

   Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)

   Solution : Check your /etc/hosts and make sure you have valid permission on /data/samba/profiles(or any share folder for samba profiles)

6. Error message : Error looking for next uid in sambaDomainName

   smbldap-useradd -m -a root
   

   Error looking for next uid in sambaDomainName=VAVAI.NET,dc=vavai,dc=net:
   No such object at /usr/sbin //smbldap_tools.pm line 1174, line 466.

   Solution : Change the following line sambaUnixIdPooldn on  /etc/smbldap-tools to be like below :

   sambaUnixIdPooldn="sambaDomainName=VAVAI.NET,ou=Domains,${suffix}"
   

If you have another error message, let’s discuss it on comment form. I’ll be glad to add the list of error message to help anyone implementing Samba PDC+OpenLDAP on openSUSE sucessfully.

Note : Forgive me for any misspelling and/or grammar.

Previous Tutorial :

1. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 1, Installing Base System & Configuring Samba
2. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 2, Configuring OpenLDAP
3. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 3, Configuring smbldap-tools & LDAP Account Manager
4. Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 – Part 4, Configuring Dynamic DHCP & DNS Server

TESTING  SAMBA CONFIGURATION

1. Check Samba configuration with the following command:

   testparm
   

   It should be display the following response :

   Load smb config files from /etc/samba/smb.conf
   Processing section “[homes]”
   Processing section “[printers]”
   Processing section “[netlogon]”
   Processing section “[profiles]”
   Processing section “[share]”
   Loaded services file OK.
   Server role: ROLE_DOMAIN_PDC
   Press enter to see a dump of your service definitions

   If you find any error message, try to look at the Samba configuration as we have setup on first tutorial.

2. Give the proper permission for user profile folder. Adjust the folder to be match with your Samba profiles (see /etc/samba/smb.conf on profiles folder share) :

   chmod 1777 /data/samba/profiles
   

3. Test whether Samba has been setup successfully or no.

   smbclient -L localhost -N
   

   Just press  ENTER if Samba asking for user name and password. You should have the following response (the result may vary , depends on your Samba and your network configuration) :

   added interface ip=192.168.1.254 bcast=192.168.1.255 nmask=255.255.255.0
   Anonymous login successful
   Domain=[VAVAI.NET] OS=[Unix] Server=[Samba 3.0.12-5-SUSE]

   Sharename Type Comment
   ——— —- ——-
   profiles Disk Roaming Profiles
   share Disk share
   IPC$ IPC IPC Service (Samba 3.0.12-5-SUSE)
   ADMIN$ IPC IPC Service (Samba 3.0.12-5-SUSE)
   Anonymous login successful
   Domain=[VAVAI.NET] OS=[Unix] Server=[Samba 3.0.12-5-SUSE]

   Server Comment
   ——— ——-
   SERVER Samba 3.0.12-5-SUSE

   Workgroup Master
   ——— ——-
   VAVAI.NET SERVER

   If you find the following error :

   Error connecting to 127.0.0.1 (Connection refused)
   Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)

   Change the ”/etc/hosts” as follows:

   # IP-Address  Full-Qualified-Hostname  Short-Hostname
   #
   127.0.0.1       localhost server.vavai.net
   127.0.0.2       server.vavai.net server
   192.168.1.254   server.vavai.net server vavai.net
   

   Reboot your computer and then try  “smbclient -L localhost -N” again.

SETUP OPENLDAP

1. Edit  ”/etc/nsswitch.conf” and change or add the following code :

   passwd: files ldap
   group: files ldap
   

2. Check account and LDAP data. You must see minimum 2 account : Admin and nobody:

   getent passwd
   

   Response:
   +::0:0:::
   Admin:x:998:512:Netbios Domain Administrator:/home/Admin:/bin/false
   nobody:x:999:514:nobody:/dev/null:/bin/false
   

3. If you find the above respon, continue with setting up  PAM

   pam-config -a --mkhomedir --mkhomedir-skel=/etc/skel --mkhomedir-umask=0022
   

4. Edit ”/etc/pam.d/common-session” and change the following line:

   session optional        pam_mkhomedir.so        umask=0022 skel=/etc/skel
   

   to:

   session required        pam_mkhomedir.so        umask=0022 skel=/etc/skel
   

5. Run all service and configure them to be activated on boot

   service named restart
   service dhcpd restart
   service ldap restart
   service smb restart
   service nmb restart
   service mysql restart
   service apache2 restart
   chkconfig named on
   chkconfig dhcpd on
   chkconfig smb on
   chkconfig nmb on
   chkconfig ldap on
   chkconfig mysql on
   chkconfig apache2 on
   

CLIENT SETUP

smbldap-useradd -a -m username
smbldap-passwd username

smbldap-useradd -w computername$

Next Tutorial  : Tutorial Samba PDC + OpenLDAP on openSUSE Part  6, Problem Solving