« Return to Thread: ldapsam:trusted = yes kills smbd

ldapsam:trusted = yes kills smbd

by Daniel Wilson-4 :: Rate this Message:

Reply to Author | View in Thread

Hi,

we want to use ldapsam:trusted=yes to improve performace as nss_ldap
is killing our ldap server doing enumeration.

once i enable it smbd dies silently...


this is the last part of a ./smbd -d 10 -i

NT user token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
smbldap_search: base =>
[ou=groups,ou=filestore,dc=sunderland,dc=ac,dc=uk], filt
er => [(&(objectClass=posixGroup)(|(memberUid=nobody)
(gidNumber=65533)))], scope
 => [2]
primary group of [nobody] not found
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
get_user_groups_from_local_sam failed
attempting to free (and zero) a server_info structure
attempting to free (and zero) a server_info structure
/tmp/dan lines 520-538/538 (END)

however i do have a group called nobody with gidNumber of 65533 and
nobody as a memberUid, when i run the smbldap_search query i do get a
result!

my nobody user in ldap has a gidNumber of 65533 too!

Help would be appreciated!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Daniel Wilson
Systems Administrator

IT & Communications Service
University of Sunderland
Unit1 Technology Park
Chester Road
Sunderland
SR2 7PT

Tel: 0191 515 2695

This e-mail contains information which is confidential and may be
privileged and is for the exclusive use of the recipient.
It is the responsibility of the recipient to ensure that this message
and its attachments are virus free.
Any views or opinions presented are solely those of the author and do
not necessarily represent those of the University, unless otherwise
specifically
stated.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

 « Return to Thread: ldapsam:trusted = yes kills smbd