[samba-jp:18751] WinXP Pro SP2クライアントからSamba+OpenLDAP環境のグローバルグループ参照不可。

[吉原 隆夫]

お世話になります、吉原です。

技術評論社から発売の『Software Design 7月号』の記事を参考にSamba+OpenLDAP環境を（再）構築したのですが、ドメインに参加させたWinXP Pro SP2クライアント上でグローバルグループが参照出
来ません。関連性があるかは不明ですが、同クライアント上でユーザーマネージャも導入しているのですが、こちらで何故かユーザーの追加や各種情報の変更も一切出来ません。

以下に各種情報を記載致しますので何か考えられる原因等御座いましたらご教授宜しくお願い致します。

[root ＠ server ~]# uname -r -m
2.6.16-1.2115_FC4 i686
[root ＠ server ~]# rpm -qa | grep samba
samba-swat-3.0.14a-2
samba-3.0.14a-2
system-config-samba-1.2.31-1
samba-client-3.0.14a-2
samba-common-3.0.14a-2
[root ＠ server ~]# rpm -qa | grep openldap
openldap-devel-2.2.29-1.FC4
openldap-2.2.29-1.FC4
openldap-debuginfo-2.2.29-1.FC4
openldap-servers-2.2.29-1.FC4
openldap-servers-sql-2.2.29-1.FC4
openldap-clients-2.2.29-1.FC4
[root ＠ server ~]# rpm -q smbldap-tools
smbldap-tools-0.9.2-2.fc4

<smb.confの内容>

# Global parameters
[global]
        unix charset = UTF-8
        dos charset = CP932
        display charset = UTF-8
        workgroup = YOSHIHARAS
        netbios name = SERVER
        admin users = Administrator
        security = USER
        enable privileges = yes
        interfaces = 127.0.0.1 eth0
        bind interfaces only = yes
        #username map = /etc/samba/smbusers
        server string = Samba Server %v
        #security = ads
        encrypt passwords = Yes
        #min passwd length = 3
        #pam password change = no
        #obey pam restrictions = No
        ldap passwd sync = Yes
        unix password sync = Yes
        passwd program = /usr/local/sbin/smbldap-passwd -u %u
        passwd chat = "Changing password for*\nNew password*" %n\n "*Retype
new password*" %n\n"
        #passwd chat debug = Yes
        log level = 0
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 100000
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        mangling method = hash2

        logon script = %U.cmd
        logon drive = Z:
        logon home = //SERVER/%U/profiles
        logon path = //SERVER/profiles/%U

        domain logons = Yes
        domain master = Yes
        os level = 33
        preferred master = Yes
        wins support = yes
        template shell = /bin/false
        winbind use default domain = no
        passdb backend = ldapsam:ldap://localhost/
        ldap admin dn = cn=Manager,dc=takao,dc=dyndns,dc=org
        #ldap admin dn = cn=samba,ou=DSA,dc=idealx,dc=org
        ldap suffix = dc=takao,dc=dyndns,dc=org
        ldap group suffix = ou=Group
        ldap user suffix = ou=People
        ldap machine suffix = ou=Computers
        #ldap idmap suffix = ou=Idmap
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        #ldap delete dn = Yes
        delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        #delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u"
"%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod -x
"%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g '%g'
'%u'

        # printers configuration
        printer admin = @"Print Operators"
        load printers = Yes
        create mask = 0640
        directory mask = 0750
        #force create mode = 0640
        #force directory mode = 0750
        nt acl support = No
        printing = cups
        printcap name = cups
        deadtime = 10
        #guest account = nobody
        #map to guest = Bad User
        dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
        show add printer wizard = yes
        ; to maintain capital letters in shortcuts in any of the profile
folders:
        preserve case = yes
        short preserve case = yes
        case sensitive = no

        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431

[homes]
        comment = Home Directories
        browseable = no
        writable = yes
        vfs objects = recycle
        recycle:repository = .recycle
        recycle:keeptree = no
        recycle:versions = yes
        recycle:touch = no
        recycle:maxsize = 0
        recycle:exclude = *.tmp ~$*

[netlogon]
        path = /home/netlogon/
        browseable = No
        read only = yes

[profiles]
        comment = User profiles directory
        path = /profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        browseable = No
        profile acls = Yes

[printers]
        comment = Network Printers
        printer admin = @"Print Operators"
        guest ok = yes
        printable = yes
        path = /home/spool/
        browseable = No
        read only  = Yes
        printable = Yes
        print command = /usr/bin/lpr -P%p -r %s
        lpq command = /usr/bin/lpq -P%p
        lprm command = /usr/bin/lprm -P%p %j
        # print command = /usr/bin/lpr -U%U@%M -P%p -r %s
        # lpq command = /usr/bin/lpq -U%U@%M -P%p
        # lprm command = /usr/bin/lprm -U%U@%M -P%p %j
        # lppause command = /usr/sbin/lpc -U%U@%M hold %p %j
        # lpresume command = /usr/sbin/lpc -U%U@%M release %p %j
        # queuepause command = /usr/sbin/lpc -U%U@%M stop %p
        # queueresume command = /usr/sbin/lpc -U%U@%M start %p

[print$]
        path = /home/printers
        guest ok = No
        browseable = Yes
        read only = Yes
        valid users = @"Print Operators"
        write list = @"Print Operators"
        create mask = 0664
        directory mask = 0775

[public]
        comment = Public Stuff
        path = /home/samba
        writable = yes
        vfs objects = recycle
        recycle:repository = .recycle
        recycle:keeptree = no
        recycle:versions = yes
        recycle:touch = no
        recycle:maxsize = 0
        recycle:exclude = *.tmp ~$*

以上、宜しくお願い致します。

吉原　隆夫
takao.yoshihara ＠ nifty.com