Newsgroup: it.comp.os.linux.iniziare
Titolo: debian + ldap + samba = pdc

ciao a tutti.
vista la spiegazione molto semplice che ho trovato a qst link
 
http://www.areanetworking.it/index_docs.php?title=Installazione_di_Samba_come_PDC_con_LDAP_Backend
ecco che mi metto all'opera. va' quasi tutto bene , tranne che in qst
passaggio 
	" Configurazione degli utenti e database LDAP "
impartito il comando 
	smbldap-populate -k 0
ecco che ottengo
	debian:/etc/init.d# smbldap-populate -k 0
Populating LDAP directory for domain IDEALX-NT (S-1-5-21-4205727931-4131263253-1851132061)
(using builtin directory structure)
erreur LDAP: Can't contact master ldap server (IO::Socket::INET: connect:
Connessione rifiutata) at /usr/share/perl5/
smbldap_tools.pm
 line 282.
direi che il server ldap non e' al 100%
accetto idee.
grazie

 Marco
grazie. mi metto subito all'opera.
ps: l'informatica comincia a piacermi piu' della finanza
bye

 Marco
ancora grazie per le info. devo solo notificare una imprecisione nel
tutoria e [ forse ] su debian. 
arrivati al punto 
	INSTALLAZIONE E CONFIGURAZIONE DEL SERVER LDAP
vengono esposti i passaggi necessari. Eseguiti gli stessi e riavviato il 
server ldap con la sintassi
	/etc/init.d/slapd restart 
ottengo:
	debian:~# /etc/init.d/slapd restart
	Stopping OpenLDAP: slapd.
	Starting OpenLDAP: slapd.
	debian:~#
poi verifico l'attivita' del server ldap
	debian:~# ldapsearch -x
	ldap_bind: Can't contact LDAP server (-1)
	debian:~#
da cui deduco che il server non e' attivo. demoralizzata ho lasciato
perdere , colpevolizzando me stessa. poi ho ripreso la lettura del
trattato ed ho visto le righe 
	Se invece si ottiene un errore di connessione ricontrollare tutte le impostazioni
	e i file di log. Per controllare il funzionamento di slapd può sempre
 	tornare utile fermare il servizio e farlo partire, anziché con gli
 	script standard debian con il comando:
	# slapd -d 256
infatti 
	debian:/etc/init.d# slapd -d 256 &
	[1] 3437
	debian:/etc/init.d# @(#) $OpenLDAP: slapd 2.3.30 (Mar  9 2007 05:43:02) $
        root@windlord:/tmp/buildd/openldap2.3-2.3.30/debian/build/servers/slapd
	/etc/ldap/slapd.conf: line 78: warning: no by clause(s) specified in
	access line (ignored). /etc/ldap/slapd.conf: line 97: warning: no by
	clause(s) specified in access line (ignored). slapd starting
e poi :
  debian:/etc/init.d# ps aux | grep slap
  root    3437  1.2  3.0  14652  3844 pts/0    Sl   20:06 0: 00slapd -d256
  root    3441  0.0  0.5   2876   760 pts/0    R+   20:06   0:00 grep_slap
inoltre :
 	debian:/etc/init.d# ldapsearch -x
	conn=0 fd=11 ACCEPT from IP=
127.0.0.1:1529
 (IP=
0.0.0.0:389
)
	conn=0 op=0 BIND dn="" method=128
	# extended LDIF
	#
	# LDAPv3
	# base <> with scope subtree
	# filter: (objectclass=*)
	# requesting: ALL
	#
	conn=0 op=0 RESULT tag=97 err=0 text=
	conn=0 op=1 SRCH base="dc=ced,dc=local" scope=2 deref=0
	filter="(objectClass=*)"
	# search result
	search: 2
	result: 32 No such object
	# numResponses: 1
	debian:/etc/init.d# conn=0 op=2 UNBIND
	conn=0 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text=
	conn=0 fd=11 closed
domanda: perche' la fantastica debian ha uno script di avvio che non
avvia? oppure sono io troppo stupida ?
appena ho tempo libero continuero' a leggere il documento.
saluti ed ancora grazie. 
ps : possibile che non posso fidarmi neppure dei computer ?

 Marco
grazie di tutto, ce la faro' grazie soprattutto a te!
eccoti il file di conf utilizzato
  GNU nano 2.0.2                       File: slapd.conf
# /etc/ldap/slapd.conf
# Global Directives:
# Features to permit
#allow bind_v2
# Schema and objectClass definitions
include /etc/ldap/schema/core.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/samba.schema
# Schema check allows for forcing entries to
# match schemas for their objectClasses's
schemacheck on
# Where the pid file is put. The init.d script
# will not stop the server if you change this.
pidfile /var/run/slapd/slapd.pid
# List of arguments that were passed to the server
argsfile /var/run/slapd.args
# Read slapd.conf(5) for possible values
loglevel 0
# Where the dynamically loaded modules are stored
modulepath /usr/lib/ldap
moduleload back_bdb
#######################################################################
# Specific Backend Directives for bdb:
# Backend specific directives apply to this backend until another
# 'backend' directive occurs
backend bdb
checkpoint 512 30
#######################################################################
# Specific Backend Directives for 'other':
# Backend specific directives apply to this backend until another
# 'backend' directive occurs
#backend <other>
#######################################################################
# Specific Directives for database #1, of type bdb:
# Database specific directives apply to this databasse until another
# 'database' directive occurs
database bdb
# The base of your directory in database #1
suffix "dc=ced,dc=local"
# Where the database file are physically stored for database #1
directory "/var/lib/ldap"
# Indexing options for database #1
index objectClass eq
index uid,uidNumber,gidNumber,memberUid eq
index cn,mail,surname,givenname eq,subinitial
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
# Save the time that the entry gets modified, for database #1
lastmod on
# Where to store the replica logs for database #1
# replogfile /var/lib/ldap/replog
# The userPassword by default can be changed
# by the entry owning it if they are authenticated.
# Others should not be able to see it, except the
# admin entry below
# These access lines apply to database #1 only
access to attrs=userPassword,sambaNTPassword,sambaLMPassword
by dn="cn=admin,dc=ced,dc=local" write
by anonymous auth
by self write
by * none
# Ensure read access to the base for things like
# supportedSASLMechanisms. Without this you may
# have problems with SASL not knowing what
# mechanisms are available and the like.
# Note that this is covered by the 'access to *'
# ACL below too but if you change that as people
# are wont to do you'll still need this if you
# want SASL (and possible other things) to work
# happily.
access to dn.base="" by * read
# The admin dn has full write access, everyone else
# can read everything.
access to *
by dn="cn=admin,dc=ced,dc=local" write
by * read
++++++++++++++++++++++++++++++++++++++++++++++++++
e' tutto pari pari dagli esempi presi in rete.
ammetto che openldap + samba + linux e' l'argomento piu' complesso
mai affrontato da 6 mesi a sta parte. ps e' 6 mesi che uso linux.
grazie ancora.

 Hai iniziato con Debian, e questo è bene... =P
 no. ho cominciato con slack e mi piacciono entrambe.
bye e grazie