SAMBA 4.7 with ldap backend

[sunadmin]

Hi,

I have installed samba and integrated with LDAP but while joining in windows client its giving me error "incorrect user name and password"

Please help me how I can solve this problem.

Also if you have any ready doc to setup SAMBA PDC with back end LDAP authentication

Looking support on this.

Linux CenOS 7.2


Regards,
Bhupendra

[avij]

Does this also occur with the currently supported release, 7.5?

[sunadmin]

I'm not sure whether its support or not?

Our requirement: we need such a setup which can authenticate centrally in all device like windows, linux server , application and all network appliance.

So we decided to setup LDAP in backend and for windows authentication we planned to setup samba AD and other linux and application will integrate to the direct LDAP and also we will install RADIUS to authenticate Network devices and RADIUS will integrate with LDAP back end.


Thanks and Regards,

[TrevorH]

CentOS 7.2 is more than 3 years old and you need to update to the latest which is 7.5. Just run yum update then reboot into the new kernel and libraries. 7.2 has not been supported since the release of 7.3 in November 2016.

[sunadmin]

Updated to latest kernel

[root@ad ~]# cat /etc/redhat-release
CentOS Linux release 7.5.1804 (Core)
[root@ad ~]# uname -a
Linux ad.smso.com 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@ad ~]#

Still not able to join samba domain win 2012 R2 server
Showing below error while join domain
=======================================================

[2018/11/02 01:33:06.731358, 1, pid=1135, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
WARNING: The "syslog" option is deprecated
[2018/11/02 01:33:06.731844, 0, pid=1135, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:784(lpcfg_map_parameter)
Unknown parameter encountered: "share modes"
[2018/11/02 01:33:06.731914, 0, pid=1135, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1844(lpcfg_do_service_parameter)
Ignoring unknown parameter "share modes"
[2018/11/02 01:33:06.732038, 1, pid=1135, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/11/02 01:33:06.745352, 0, pid=1135, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1605(get_primary_group_sid)
Failed to find a Unix account for admin
[2018/11/02 01:33:06.745521, 1, pid=1135, effective(0, 0), real(0, 0)] ../source3/auth/server_info_sam.c:85(make_server_info_sam)
User admin in passdb, but getpwnam() fails!
[2018/11/02 01:33:06.745547, 0, pid=1135, effective(0, 0), real(0, 0)] ../source3/auth/check_samsec.c:493(check_sam_security)
check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER'
[2018/11/02 01:33:06.765355, 1, pid=1137, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
WARNING: The "syslog" option is deprecated
[2018/11/02 01:33:06.765543, 0, pid=1137, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:784(lpcfg_map_parameter)
Unknown parameter encountered: "share modes"
[2018/11/02 01:33:06.765557, 0, pid=1137, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1844(lpcfg_do_service_parameter)
Ignoring unknown parameter "share modes"
[2018/11/02 01:33:06.765616, 1, pid=1137, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/11/02 01:33:07.030035, 1, pid=1139, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1823(lpcfg_do_global_parameter)
WARNING: The "syslog" option is deprecated
[2018/11/02 01:33:07.030436, 0, pid=1139, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:784(lpcfg_map_parameter)
Unknown parameter encountered: "share modes"
[2018/11/02 01:33:07.030473, 0, pid=1139, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1844(lpcfg_do_service_parameter)
Ignoring unknown parameter "share modes"
[2018/11/02 01:33:07.030578, 1, pid=1139, effective(0, 0), real(0, 0)] ../lib/param/loadparm.c:1856(lpcfg_do_service_parameter)
WARNING: The "profile acls" option is deprecated
[2018/11/02 01:33:07.039128, 0, pid=1139, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1605(get_primary_group_sid)
Failed to find a Unix account for admin
[2018/11/02 01:33:07.039477, 1, pid=1139, effective(0, 0), real(0, 0)] ../source3/auth/server_info_sam.c:85(make_server_info_sam)
User admin in passdb, but getpwnam() fails!
[2018/11/02 01:33:07.039527, 0, pid=1139, effective(0, 0), real(0, 0)] ../source3/auth/check_samsec.c:493(check_sam_security)
check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER'

[aks]

With Windows, LDAP is 1/2 the story. Perhaps look into Kerberos (just a hint).

[tunk]

Did you update everything or just the kernel?
If the latter, then your samba version may be out of date.

[sunadmin]

I have ran the "yum update" and its updated all the packages.