HOla amigos esty siguiendo paso a paso el tutorial que encontre en esa pagina para centos5, el problema es que cuando llego a la linea smbldap-populate -a admin(en mi caso)

sale esto

Populating LDAP directory for domain ARTEDIGITAL (S-1-5-21-4089261510-2000850612-4174507093)
(using builtin directory structure)

Could not start_tls: Operations error at /usr/sbin//smbldap_tools.pm line 293.
adding new entry: dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 2.
adding new entry: ou=Users,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 3.
adding new entry: ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 4.
adding new entry: ou=Computers,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 5.
adding new entry: ou=Idmap,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 6.
adding new entry: uid=admin,ou=Users,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 7.
adding new entry: uid=nobody,ou=Users,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 8.
adding new entry: cn=Domain Admins,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 9.
adding new entry: cn=Domain Users,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 10.
adding new entry: cn=Domain Guests,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 11.
adding new entry: cn=Domain Computers,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 12.
adding new entry: cn=Administrators,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Bad file descriptor at /usr/sbin/smbldap-populate line 499, <GEN1> line 16.
adding new entry: cn=Account Operators,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Bad file descriptor at /usr/sbin/smbldap-populate line 499, <GEN1> line 18.
adding new entry: cn=Print Operators,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Bad file descriptor at /usr/sbin/smbldap-populate line 499, <GEN1> line 19.
adding new entry: cn=Backup Operators,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Bad file descriptor at /usr/sbin/smbldap-populate line 499, <GEN1> line 20.
adding new entry: cn=Replicators,ou=Groups,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 21.
adding new entry: sambaDomainName=ARTEDIGITAL,dc=artedigital-mx,dc=com
failed to add entry: Can't contact LDAP server at /usr/sbin/smbldap-populate line 499, <GEN1> line 21.

Please provide a password for the domain admin:
Could not start_tls: Operations error at /usr/sbin//smbldap_tools.pm line 293.
Can't contact LDAP server at /usr/sbin//smbldap_tools.pm line 353.

Espero me puedan ayudar, todos los pasos los he seguido como dice el tutorial espero una respuesta pronto amigos gracias

Could not start_tls

Alguna configuracion con el TLS del LDAP.. seguro lo dejaste habilitadoo.. o algo por el estilo

salu2 desde Perú

Jaime M. Tan Nozawa

---

Mi blog de PHP: http://phpexperto.blogspot.com

NO h dejado habilitado nada, de hecho sigo el tutorial paso a paso te dejare mis archivos de configuracion para qe les des una revisada

SMB.CONF

#======================= Global Settings =====================================

[global]

# ----------------------- Netwrok Related Options -------------------------
#
# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
#
# server string is the equivalent of the NT Description field
#
# netbios name can be used to specify a server name not tied to the hostname
#
# Interfaces lets you configure Samba to use multiple interfaces
# If you have multiple network interfaces then you can list the ones
# you want to listen on (never omit localhost)
#
# Hosts Allow/Hosts Deny lets you restrict who can connect, and you can
# specifiy it as a per share option as well
#
workgroup = ARTEDIGITAL
server string = Samba Server Version %v
netbios name = LINUX

; interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
; hosts allow = 127. 192.168.12. 192.168.13.

# --------------------------- Logging Options -----------------------------
# Log File let you specify where to put logs and how to split them up.
#
# Max Log Size let you specify the max size log files should reach

# logs split per machine
; log file = /var/log/samba/%m.log
# max 50KB per log file, then rotate
; max log size = 50

# ----- Parametros LDAP -----

# Quien va a ser el usuario administrador del dominio
admin users = admin @"Domain Admins"
passdb backend = ldapsam:ldap://127.0.0.1

#?Sufijo ldap para todas las entradas siguientes
ldap suffix = dc=artedigital-mx,dc=com

# OU de usuarios netbios
ldap user suffix = ou=People

# OU de Grupos netbios
ldap group suffix = ou=Group

# Cuentas maquinas netbios
ldap machine suffix = ou=Computers

# La cuenta administrador openLDAP
ldap admin dn = cn=admin,dc=artedigital-mx,dc=com

# Sincronizacion de cuentas LDAP, NT y LM
ldap passwd sync = yes

# Agregado de cuentas maquina automáµticamente
#add machine script = /usr/sbin/smbldap-useradd -w %u

# Aqui dejo comentado por si es necesario o a tu criterio usarlo
#ldap ssl = start tls
#add user script = /usr/sbin/smbldap-useradd -m "%u"
#ldap delete dn = Yes
#delete user script = /usr/sbin/smbldap-userdel "%u"
#add group script = /usr/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/sbin/smbldap-groupdel "%g"
#add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
#delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
#set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
#ldap replication sleep = 1000 # Tiempo de replicacion entre servidores

# ----- FIN DE PARAMETROS LDAP
# ----------------------- Standalone Server Options ------------------------
#
# Scurity can be set to user, share(deprecated) or server(deprecated)
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.

security = user
passdb backend = tdbsam
encrypt passwords = yes
os level = 65
dns proxy = no
wins support = yes
log file = /var/log/samba/%m.log
max log size = 50
domain master = yes
preferred master = yes
domain logons = yes

slapd.conf

# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba.schema

# Allow LDAPv2 client connections. This is NOT the default.
allow bind_v2

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org

pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args

# Load dynamic backend modules:
# modulepath /usr/lib/openldap
# moduleload back_bdb.la
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la

# The next three lines allow use of TLS for encrypting connections using a
# dummy test certificate which you can generate by changing to
# /etc/pki/tls/certs, running "make slapd.pem", and fixing permissions on
# slapd.pem so that the ldap user or group can read it. Your client software
# may balk at self-signed certificates, however.
# TLSCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
# TLSCertificateFile /etc/pki/tls/certs/slapd.pem
# TLSCertificateKeyFile /etc/pki/tls/certs/slapd.pem

# Sample security restrictions
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
# Root DSE: allow anyone to read it
# Subschema (sub)entry DSE: allow anyone to read it
# Other DSEs:
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., "access to * by * read"
# rootdn can always read and write EVERYTHING!

#######################################################################
# ldbm and/or bdb database definitions
#######################################################################

database bdb
suffix "dc=artedigital-mx,dc=com"
rootdn "cn=admin,dc=artedigital-mx,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoided. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
# rootpw secret
rootpw {SSHA}NmeOWcjhIAwSBdeSoiAp/aNF0v89ok91


# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /var/lib/ldap/autenticar

# Indices to maintain for this database
#index objectClass eq,pres
#index ou,cn,mail,surname,givenname eq,pres,sub
#index uidNumber,gidNumber,loginShell eq,pres
#index uid,memberUid eq,pres,sub
#index nisMapName,nisMapEntry eq,pres,sub

index objectClass eq
index cn pres,sub,eq
index sn pres,sub,eq
index uid pres,sub,eq
index displayName pres,sub,eq
index uidNumber eq
index gidNumber eq
index memberUID eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
# Replicas of this database
#replogfile /var/lib/ldap/openldap-master-replog
#replica host=ldap-1.example.com:389 starttls=critical
# bindmethod=sasl saslmech=GSSAPI
# authcId=host/ldap-master.example.com@EXAMPLE.COM

lo siento por la repsuesta anterior la acabo de solucionar, el unico problema amigo es que cuando ejecuto net groupmap list no hace nada, como si no tuviera grupos

El problema era smbldap-tools??

No entiendo.. si se soluciono?

Jaime

---

Mi blog de PHP: http://phpexperto.blogspot.com

lo de smbldap-tools ya esta listo, el problema es despues de que me crea todos los grupos. Lo que pasa es que despues de que funciona smbldap-populate y me manda la info de los grupos creados doy el comando net groupmap list y simplemente no pasa nada, no me muestra que haya creado algo o no. Ese es mi a ctual problema

es el mismo problema amigo net groupmap list no despliega ningun resultado y he seguido al pie de la letra el tutorial

Yo tengo el mismo problema cuando ejecuto el comando net groupmap list no me sale muestra nada por panatalla y he seguido el manual al pie de la letra por lo que no se que puede haber pasado, si alguien sabe la solucion se lo agradeceria

Tengo el mismo problema, desde hace un buen tiempo, tanto asi que lo dejo y luego sigo con la configuracio mese despues, pero estoy trabado en el mismo lugar, cuando smbldap-populate -a admin Populating LDAP directory for domain MTD-TEST (S-1-5-21-1535157019-3473642487-957866860) (using builtin directory structure) Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Could not start_tls: unsupported extended operation at /usr/sbin//smbldap_tools.pm line 341. [root@nodo1 ~]# net groupmap list [2009/11/09 23:32:08, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(3107) ldapsam_setsamgrent: LDAP search failed: No such object [2009/11/09 23:32:08, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(3179) ldapsam_enum_group_mapping: Unable to open passdb [root@nodo1 ~]# smbldap-populate -a administrator Populating LDAP directory for domain MTD-TEST (S-1-5-21-1535157019-3473642487-957866860) (using builtin directory structure) Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Use of uninitialized value in string at /usr/sbin//smbldap_tools.pm line 334. Could not start_tls: unsupported extended operation at /usr/sbin//smbldap_tools.pm line 341. AYUDA, si alguien YA!!!! soluciono este problema, GRACIAS

---

http://blogs.clavedigital.com/ncastillo