Bug 5543 - adding machine account requires unix user
adding machine account requires unix user
Status: RESOLVED INVALID
Product: Samba 3.2
Classification: Unclassified
Component: Domain Control
3.2.0
x64 Linux
: P3 normal
: ---
Assigned To: Samba Bugzilla Account
Samba QA Contact
http://ubuntuforums.org/showthread.ph...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-06-13 09:11 UTC by Chris
Modified: 2008-06-14 15:35 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris 2008-06-13 09:11:58 UTC
I configured my samba domain controller to use LDAP authentication. The only way I can get samba to add machine accounts to the LDAP server when I join a domain is to use the "add machine script" option to add the machine account to /etc/passwd with the "useradd" command. As far as I can tell, this shouldn't be necessary, since the client can still login if I remove the machine account from /etc/passwd.
Comment 1 Volker Lendecke 2008-06-13 09:16:44 UTC
Machine accounts have to exist either in /etc/passwd or as posixAccount objects in LDAP, samba requires a numerical uid for machines. It might be possible that your nscd does not recognize ldap changes fast enough during the join process.

Volker
Comment 2 Chris 2008-06-13 09:34:48 UTC
(In reply to comment #1)
> Machine accounts have to exist either in /etc/passwd or as posixAccount objects
> in LDAP, samba requires a numerical uid for machines. It might be possible that
> your nscd does not recognize ldap changes fast enough during the join process.
> 
> Volker
> 

I assumed a uid wasn't necessary since the client seems to work without one. Does samba do something with the machine account when you first join the domain that requires a uid? Will deleting the machine's posixAccount cause any problems?
Comment 3 Volker Lendecke 2008-06-14 15:35:07 UTC
Samba just deeply assumes the posix account to be around. It might work in some cases but will mysteriously break in others.

Volker