Bug 1266 - "On the fly" Creation of Machine Trust Accounts don't work
Summary: "On the fly" Creation of Machine Trust Accounts don't work
Status: CLOSED FIXED
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Domain Control (show other bugs)
Version: 3.0.2a
Hardware: Other other
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-04-15 04:32 UTC by spurnelle
Modified: 2005-08-24 10:16 UTC (History)
0 users

See Also:

Attachments
log file of a machine which I try to add on fly (11.85 KB, text/plain)
2004-04-15 04:33 UTC, spurnelle 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description spurnelle 2004-04-15 04:32:59 UTC 
I cannot add a machine to my domain, the win2k client says : "cannot add
machine, the user or password is incorrect".  If I read log, I can read that the
smbldap-useradd script work correcly, but the rest don't work.

Samba try to add an new entry, but the entry exist (created by script).
I analysed the samba source and I think that is the 
ldap_count_entries(ldap_state->smbldap_state->ldap_struct, result) function
called by ldapsam_add_sam_account don't work correcly. This method must return
1, and he return 0 or -1, I don't know.

openLDAP 2.1.25
RedHat 8.0
smbldap script from samba-3.0.2a package
Samba 3.0.2a with acl-support and ldap option
Comment 1 spurnelle 2004-04-15 04:33:43 UTC 
Created attachment 468 [details]
log file of a machine which I try to add on fly
Comment 2 Gerald (Jerry) Carter (dead mail address) 2004-11-11 13:43:47 UTC 
please report issues regarding the smbldap-tools to the 
idealx developers.  Thanks.
Comment 3 spurnelle 2004-11-15 03:00:41 UTC 
It's not a smbldap-tools bug, smbldap work fine.

samba don't detect correctly that smbldap-tool create the posixAccount and that
samba tries to add a news LDAP entry whereas this entry already exist.
Comment 4 Gerald (Jerry) Carter (dead mail address) 2005-02-05 07:59:20 UTC 
please retest against 3.0.11 and reopen if necessary.
Comment 5 Gerald (Jerry) Carter (dead mail address) 2005-08-24 10:16:04 UTC 
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.