域控制问题

rcazy

域建好后有些机子能正常登入域.但有些机子时不时出现域上有重名不能使用.查过所有机了,网上所有机器绝对没有重名,请大家指点是什么问题

rcazy

经多次试验和总结问题已解决
关键是步骤问题
而且不是出在服务器上是出在客户端上
是由于XP域列表更新不及时而产生的
方法:先在服务器上stop SMB---->然后重启ＸＰ（在重启后到了登陆窗时，会重近生成域控制列表）---->登入出错------>start SMB---->再登入域成功，重名问题解决！

billwang2005

[root@bill root]# smbpasswd -a root
New SMB password:
Retype new SMB password:
failed to bind to server with dn= cn=Manager,dc=root,dc=com,dc=cn Error: Invalid credentials

Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials)
Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials)
Connection to LDAP Server failed for the 1 try!
ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (unknown) (Invalid credentials)Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials)
Failed to add entry for user root.
Failed to modify password entry for user root
為什麼會出現這樣的錯誤呢？
謝謝關注

billwang2005

smb.conf配置清單
  encrypt passwords = yes
;  smb passwd file = /etc/samba/smbpasswd
passdb backend = ldapsam:ldap://192.168.3.20,guest
ldap suffix = "dc=wahtai,dc=com,dc=cn"
ldap machine suffix = ou=Computers
ldap user suffix = ou=users
ldap group suffix = ou=groups
ldap admin dn = "cn=Manager,dc=root,dc=com,dc=cn"
#ldap user suffix = dc=samba,dc=wahtai
ldap delete dn = no
[root@bill root]# smbpasswd -a root
New SMB password:
Retype new SMB password:
failed to bind to server with dn= cn=Manager,dc=root,dc=com,dc=cn Error: Invalid credentials

Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials)
Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials)
Connection to LDAP Server failed for the 1 try!
ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (unknown) (Invalid credentials)Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials)
Failed to add entry for user root.
Failed to modify password entry for user root
為什麼會出現這樣的錯誤呢？
謝謝關注

rcazy

testpram 看有没有错误出现

billwang2005

Bareword "print_banner" not allowed while "strict subs" in use at /usr/local/sbin/smbldap-populate line 53, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 70, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 132, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 139, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 147, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 151, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 151, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 152, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 152, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 153, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 153, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 154, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 155, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 155, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 157, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 157, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 160, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 161, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 162, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 171, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 171, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 171, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 171, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 190, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 191, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 197, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 210, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 210, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 211, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 223, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 223, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 224, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 228, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 228, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 229, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 231, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 231, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 232, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 236, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 236, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 236, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 264, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 264, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 265, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 269, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 269, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 270, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 272, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 272, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 273, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 277, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 431, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 431, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 432, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 432, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 441, <DATA> line 134.
Global symbol "%config" requires explicit package name at /usr/local/sbin/smbldap-populate line 479, <DATA> line 134.
Execution of /usr/local/sbin/smbldap-populate aborted due to compilation errors.現在又出現這樣的信息，請問該如何解決？

mzzhangj

小弟在实作 SAMBA+OPENLDAP时亦遇到同样问题，请问楼主当时是如何解决这个问题的呢？

t23linwei

楼主  rcazy

请教一下  这个重名的问题有没有最终的解决方法呢   如果公司人很多的情况下 在用这中方法就很麻烦了吧

rcazy

没有完全解决这个问题！现在在分析中！