Bugzilla – Bug 153756
ldapsmb unable to locate Administrator dn in secrets.tdb
Last modified: 2006-03-10 10:54:00 UTC
Though ldapsmb (v. 1.33) correctly autodetects the Admin DN, if fails to locate the corresponding password in /etc/samba/secrets.tdb -------snip--------- angrenost:/usr/sbin # ldapsmb -v -l -u --debug 10 ldapsmb:parse_smbconf(1935) parsing [/root/.ldapsmbrc] ldapsmb:parse_smbconf(1935) parsing [testparm] ldapsmb:parse_conf_file(1928) autodetected "ldap server": "192.168.1.215" ldapsmb:parse_conf_file(1928) autodetected "ldap port": "389" ldapsmb:set_on_find(1928) autodetected "ldap admin dn": "cn=Administrator,dc=tol-lamfirith,dc=org" ldapsmb:set_on_find(1928) autodetected "ldap group suffix": ou=groups ldapsmb:set_on_find(1928) autodetected "ldap machine suffix": ou=people ldapsmb:set_on_find(1928) autodetected "ldap suffix": dc=tol-lamfirith,dc=org ldapsmb:set_on_find(1928) autodetected "ldap user suffix": ou=people ldapsmb:find_adminpwd_in_tdb(19 strange dn: "cn=Administrator,dc=tol-lamfirith,dc=org" ldapsmb:find_adminpwd_in_tdb(19 sorry. could not find your password in "secrets.tdb" ldapsmb:find_adminpwd_in_tdb(19 either you set it in [/usr/sbin/ldapsmb] or you use "smbpasswd -w pwd" if you are running [/usr/sbin/ldapsmb] in local mode. ldapsmb:find_adminpwd_in_tdb(19 exiting. Use of uninitialized value in string eq at /usr/sbin/ldapsmb line 241. ldapsmb:check_ldap_pwd(1935) sorry. you're not root. please set up your password in /root/.ldapsmbrc or directly in /usr/sbin/ldapsmb -------snip---------- The workaround for this is to modify line 128 of /usr/sbin/ldapsmb to include the correct DN (as provided in /etc/samba/smb.conf) like so: my $ADMIN_DN = "cn=Administrator,dc=tol-lamfirith,dc=org";
Could you please retry with ldapsmb v. 1.34 and check if that failure is still there? You can find a packaged version for SuSE Linux 10.0 here: ftp://ftp.suse.com/pub/projects/samba/3.0/i386/10.0/ldapsmb-1.34-16.1.4.i586.rpm
Same result with 1.34. ----------snip-------------- angrenost:~ # rpm -qa|grep ldapsmb ldapsmb-1.34-16.1.4 angrenost:~ # md5sum /usr/sbin/ldapsmb 8ad86c5fa11020c413ecae4c628af530 /usr/sbin/ldapsmb angrenost:~ # ldapsmb -l -u --debug 10 ldapsmb:parse_smbconf(2040) parsing [/root/.ldapsmbrc] ldapsmb:parse_smbconf(2040) parsing [testparm] ldapsmb:parse_conf_file(2033) autodetected "ldap server": "192.168.1.215" ldapsmb:parse_conf_file(2033) autodetected "ldap port": "389" ldapsmb:set_on_find(2033) autodetected "ldap admin dn": "cn=Administrator,dc=tol-lamfirith,dc=org" ldapsmb:set_on_find(2033) autodetected "ldap group suffix": ou=groups ldapsmb:set_on_find(2033) autodetected "ldap machine suffix": ou=people ldapsmb:set_on_find(2033) autodetected "ldap suffix": dc=tol-lamfirith,dc=org ldapsmb:set_on_find(2033) autodetected "ldap ssl": start tls ldapsmb:set_on_find(2033) autodetected "ldap user suffix": ou=people ldapsmb:find_adminpwd_in_tdb(20 strange dn: "cn=Administrator,dc=tol-lamfirith,dc=org" ldapsmb:find_adminpwd_in_tdb(20 sorry. could not find your password in "secrets.tdb" ldapsmb:find_adminpwd_in_tdb(20 either you set it in [/usr/sbin/ldapsmb] or you use "smbpasswd -w pwd" if you are running [/usr/sbin/ldapsmb] in local mode. ldapsmb:find_adminpwd_in_tdb(20 exiting. Use of uninitialized value in string eq at /usr/sbin/ldapsmb line 292. ldapsmb:check_ldap_pwd(2040) sorry. you're not root. please set up your password in /root/.ldapsmbrc or directly in /usr/sbin/ldapsmb --------snip----------------
Hm, cannot reproduce, could you send me your secrets.tdb via private mail? You may want to overwrite your old password with smbpasswd -w.
Created attachment 70779 [details] remove quotas from parameters
Ok, got the fix; there will be new packages later. As a workaround just remove the quotes (") around your admin dn. Thanks for the good feedback!
Does it actually fix it?
At least fixed upstream.
Hello, sorry, I was out of town, hence my late response. I have verified that the workaround of removing the quotes from the ldap admin dn parameter in /etc/samba/smb.conf works with a virgin /usr/sbin/ldapsmb v1.33 The patched ldapsmb (patch applied to v1.33 /usr/sbin/ldapsmb from Comment #4) also fixes the problem (with the original quoted ldap admin dn paramter in /etc/samba/smb.conf).
Thanks for the feedback, new tarballs can be found here: http://www.hhrm.de/~gd/ This will get integrated into the SuSE packages next.