Bug 1266 - "On the fly" Creation of Machine Trust Accounts don't work
Summary: "On the fly" Creation of Machine Trust Accounts don't work
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Domain Control (show other bugs)
Version: 3.0.2a
Hardware: Other other
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact:
Depends on:
Reported: 2004-04-15 04:32 UTC by spurnelle
Modified: 2005-08-24 10:16 UTC (History)
0 users

See Also:

log file of a machine which I try to add on fly (11.85 KB, text/plain)
2004-04-15 04:33 UTC, spurnelle
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description spurnelle 2004-04-15 04:32:59 UTC
I cannot add a machine to my domain, the win2k client says : "cannot add
machine, the user or password is incorrect".  If I read log, I can read that the
smbldap-useradd script work correcly, but the rest don't work.

Samba try to add an new entry, but the entry exist (created by script).
I analysed the samba source and I think that is the 
ldap_count_entries(ldap_state->smbldap_state->ldap_struct, result) function
called by ldapsam_add_sam_account don't work correcly. This method must return
1, and he return 0 or -1, I don't know.

openLDAP 2.1.25
RedHat 8.0
smbldap script from samba-3.0.2a package
Samba 3.0.2a with acl-support and ldap option
Comment 1 spurnelle 2004-04-15 04:33:43 UTC
Created attachment 468 [details]
log file of a machine which I try to add on fly
Comment 2 Gerald (Jerry) Carter (dead mail address) 2004-11-11 13:43:47 UTC
please report issues regarding the smbldap-tools to the 
idealx developers.  Thanks.
Comment 3 spurnelle 2004-11-15 03:00:41 UTC
It's not a smbldap-tools bug, smbldap work fine.

samba don't detect correctly that smbldap-tool create the posixAccount and that
samba tries to add a news LDAP entry whereas this entry already exist.  
Comment 4 Gerald (Jerry) Carter (dead mail address) 2005-02-05 07:59:20 UTC
please retest against 3.0.11 and reopen if necessary.
Comment 5 Gerald (Jerry) Carter (dead mail address) 2005-08-24 10:16:04 UTC
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.