[Samba] Samba+LDAP Groups resolving problem

Hi,

I have managed to configure Samba+LDAP+smbldap-tools. Everything works
fine, except one strange problem is appearing.
When I connect with Windows tool UserManagerForDomains or I want to create
a share on a Wndows box I can see the users but no groups.

With UserManagerForDomains is see following:

Users: All the users
Groups: none, just description of Replicators Group and the description
Domain Unix Group

When I try to add a group on share via selecting it I see nothing.

The strange thing is that everything works fine and when I add a group
like DOMAIN\group it works normally.

The only error I found was the LDAP error bdb_equality_candidates:
(sambaGroupType) index_param failed (18) but I can't find any clues.

In the slapd.conf file I use access control policy like in the idealx
manual.


The LDAP log file :

Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH
base="ou=Users,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(uid=*)(objectClass=sambaSamAccount))"
Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH attr=uid sambaSid
displayName description sambaAcctFlags
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=28 SEARCH RESULT tag=101 err=0

nentries=511 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaGro upType=4))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH attr=cn sambaSid
displayName description sambaGroupType
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates:
(sambaGroupType) index_param failed (18)
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SEARCH RESULT tag=101 err=0
nentries=0 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaGro upType=5))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SRCH attr=cn sambaSid
displayName description sambaGroupType
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates:
(sambaGroupType) index_param failed (18)
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=30 SEARCH RESULT tag=101 err=0
nentries=5 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaSID =s-1-5-32-544))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH attr=gidNumber
sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SEARCH RESULT tag=101 err=0

nentries=1 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaSID =s-1-5-32-548))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH attr=gidNumber
sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SEARCH RESULT tag=101 err=0

nentries=1 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaSID =s-1-5-32-550))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SRCH attr=gidNumber
sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=33 SEARCH RESULT tag=101 err=0

nentries=1 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaSID =s-1-5-32-551))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SRCH attr=gidNumber
sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=34 SEARCH RESULT tag=101 err=0

nentries=1 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaSID =s-1-5-32-552))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SRCH attr=gidNumber
sambaSID
sambaGroupType sambaSIDList description displayName cn objectClass
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=35 SEARCH RESULT tag=101 err=0

nentries=1 text=
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH
base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0
filter="(&(objectClass=sambaGroupMapping)(sambaGro upType=2))"
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SRCH attr=cn sambaSid
displayName description sambaGroupType
Oct 20 14:34:32 kope slapd[6707]: <= bdb_equality_candidates:
(sambaGroupType) index_param failed (18)
Oct 20 14:34:32 kope slapd[6707]: conn=1 op=36 SEARCH RESULT tag=101 err=0
nentries=6 text=


Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba