openldap用mysql作后台支持后smbldap-tools的问题

戏园子

用mysql作openldap的后台支持，配置好像是成功了，因为服务都正常启动了，跟踪进程也没有发现错误。
现在有两个问题：
1、 用mysql作后台支持时，slapd.conf中对根容器的定义默认为“o=sql,c=RU”，可以改成“dc=xxx,dc=yyy”吗？
2、 在smbldap-tools进行smbldap-populate的时候，报错。

不知道是我配置上的问题还是smbldap-tools本身仅用于BDB后台库。

请帮忙！

附错误信息：
# smbldap-populate                        
Populating LDAP directory for domain KAIWEN (S-1-5-21-1678692873-1867382243-2491869893)
(using builtin directory structure)

Use of uninitialized value in string ne at /usr/sbin/smbldap-populate line 168.
Use of uninitialized value in concatenation (.) or string at /usr/sbin/smbldap-populate line 173.
adding new entry: o=sql,c=RU
failed to add entry: operation not permitted within namingContext at /usr/sbin/smbldap-populate line 499, <GEN1> line 2.
adding new entry: ou=Users,o=sql,c=RU
failed to add entry: operation not permitted within namingContext at /usr/sbin/smbldap-populate line 499, <GEN1> line 3.
adding new entry: ou=Groups,o=sql,c=RU
failed to add entry: operation not permitted within namingContext at /usr/sbin/smbldap-populate line 499, <GEN1> line 4.
adding new entry: ou=Computers,o=sql,c=RU
failed to add entry: operation not permitted within namingContext at /usr/sbin/smbldap-populate line 499, <GEN1> line 5.
adding new entry: ou=Idmap,o=sql,c=RU
failed to add entry: operation not permitted within namingContext at /usr/sbin/smbldap-populate line 499, <GEN1> line 6.
adding new entry: uid=root,ou=Users,o=sql,c=RU
failed to add entry: operation not permitted within namingContext at /usr/sbin/smbldap-populate line 499, <GEN1> line 7.

# net getlocalsid
[2008/11/01 16:02:05, 0] lib/smbldap.c:smbldap_search_suffix(1155)
  smbldap_search_suffix: Problem during the LDAP search:  (No such object)
SID for domain KAIWEN is: S-1-5-21-1678692873-1867382243-2491869893

[ 本帖最后由 戏园子 于 2008-11-5 09:12 编辑 ]