Mandriva Directory Server

Discussion in 'HOWTO-Related Questions' started by Nikitos, Feb 11, 2008.

  1. ViTality

    ViTality New Member

    Why? I want too translate this howto
    Last edited: Mar 24, 2008
  2. falko

    falko Super Moderator ISPConfig Developer

    The problem is that if there's a bug in Olli's tutorial and he updates it, your translated version will still contain the bug, and people who read your translation will start to contact Olli although the bug has already been fixed in the original version. That's why he doesn't want you to translate it.
  3. Nikitos

    Nikitos New Member

    It seems long time - no update.
    Olli, When will you update your guide? :)
    Last edited: Mar 31, 2008
  4. o.meyer

    o.meyer ISPConfig Developer ISPConfig Developer


    I need a second head and additional arms :rolleyes:

    I'll try to update the howto next weekend.

    Best regards,

  5. Nikitos

    Nikitos New Member

    Hello, Olli :)

    If you will have more free time can you add also ntlm auth to squid?
    and try to adding linux comps to domain :rolleyes:
  6. houms

    houms New Member

    thanks for this great howto, I really would love to utilize this, but I am having a problem logging into the system. I am stuck at the end of step six... where you
    then your supposed to
    net -U Administrator rpc rights grant 'DOMAIN\Domain Admins' SeMachineAccountPrivilege
    but I cannot even log into the system anymore to issue this command... No matter if I use
    root account or my own account (houms).... It keeps telling me that the password is incorrect...?
    Any suggestions would be greatly appreciated. Thank you in advance for your assistance.
  7. houms

    houms New Member

    If you cannot log back into the system after step 6 of the howto....
    I figure I let other learn from my mistake...

    check your vi /etc/pam.d/common-auth

    make sure its

    auth sufficient nullok_secure (mine was on required)
    auth sufficient use_first_pass
    auth required

    you can boot in single user mode from the grub menu and login with the root password
    and see if so make that change.. Hope it helps..Thats how I solved it..

    but now I'm getting this:
    # net -U Administrator rpc rights grant 'DOMAIN\Domain Admins' SeMachineAccountPrivilege
    Could not connect to server

    Any ideas? Thanks again for your help
    Last edited: May 2, 2008
  8. o.meyer

    o.meyer ISPConfig Developer ISPConfig Developer

    Hi houms,

    if you are not able to log in into the system after the reboot at the end of step 6 you made a mistake in step 6 (the PAM configuration) - please have a look at these settings on your system.

    Btw, the howto is not up to date at the moment - currently I have no time to update it. The new MDS packages need additional configuration.

    Best regards,

  9. houms

    houms New Member

    Thanks for the response. It is greatly appreciated . Is it better to not follow this tutorial then? If so, any suggestions on whats the best way to setup something similar. basically I would like to install something to replace AD.
    I have looked over my PAM settings and compared them to the writeup and they are the same, yet i cannot login.. not sure what mistake i may have made. any suggestions would be appreciated.
  10. Nikitos

    Nikitos New Member

    MDS 2.2.0 to MDS 2.3.0 upgrade notes

    update mail.schema
    cp /usr/share/doc/python-mmc-base/contrib/ldap/mail.schema /etc/ldap/schema/
    edit /etc/mmc/plugins/samba.ini
    disable = 0
    # Computers Locations
    baseComputersDN = ou=Computers,dc=example,dc=com
    sambaConfFile = /etc/samba/smb.conf
    sambaInitScript = /etc/init.d/samba
    sambaClamavSo = /usr/lib/samba/vfs/
    # Default SAMBA shares location
    defaultSharesPath = /home/samba
    # You can specify authorized paths for share creation
    # Default value is the defaultSharesPath value
    # authorizedSharePaths = /shares, /opt, /srv
    # Default value when adding samba attributes to an user
    # DELETE means the attibute is removed from the user LDAP entry
    sambaPwdMustChange = DELETE
    MDS 2.3.0 to MDS 2.3.1 upgrade notes

    add to /etc/mmc/plugins/network.ini
    bindgroup = bind
  11. houms

    houms New Member

    Nikitos, your the man!! I don't know if your updates are what did it, but it resolved my issues and I am now at step 19.1 (inside the MMC configuring DNS). For anyone having trouble... make sure you make the adjustments that nikitos posted... As of today, this howto + Nikitos suggestions works perfect with debian etch r3-netinstall.

    Thank Ollie for taking the time to put together this wonderful howto...
    Nikitos thanks for the suggestions... Don't know how you knew that but big props.
  12. gama_blind

    gama_blind New Member

    Thanks for your HowTo.
    I have a question.
    for login to http://x.x.x.x/mmc/
    I only need to put user: mmc and password: s3cr3t ? that mmc.ini has.
    # HTTP basic authentication credentials to use for XMLRPC communication
    login = mmc
    password = s3cr3t
    if this ok,, doesnt work for me,,,
    but I can login with root and password system. is correct?

    thx, great job...
  13. Nikitos

    Nikitos New Member

    you shouldn`t use login as mmc. Only samba users:)

    mmc user is user to link webui with mmc-agent
    Last edited: Jun 25, 2008
  14. gama_blind

    gama_blind New Member

    I have another problem, this time is with postfix

    Jun 26 05:19:40 vme postfix/local[4156]: E6B2B24042: to=<[email protected]>, relay=local, delay=0.2
    , delays=0.11/0.03/0/0.07, dsn=5.2.0, status=bounced (maildir delivery failed: create maildir file /home/samba/users/pinfante/Maildirtmp/ Permission denied)
    Jun 26 05:19:40 vme postfix/cleanup[4154]: 17D0524044: message-id=<[email protected]>
    the point is when or how put the permissions?
    thats for when i send email at first time, postfix want to create mail skel. on /home/samba/users/pinfante/Maildir/

     #ls -al /home/samba/users/
    total 20
    drwx------ 5 root     root         4096 2008-06-26 04:46 .
    drwxr-xr-x 8 root     root         4096 2008-06-26 03:17 ..
    drwx------ 2 gvazquez Domain Users 4096 2008-06-26 03:17 gvazquez
    drwx------ 2 pinfante Domain Users 4096 2008-06-26 04:46 pinfante
    drwx------ 2 pnavajas Domain Users 4096 2008-06-26 04:32 pnavajas
    What can i do?:rolleyes:
    as i know i have to put permissions to root or maybe postfix user,but i have to respect user and domain users

    Im not use Dovecot.

    Ok, I try another way with virtual domains, with conf that has folder with-virtual-domains,
    curiously the users that I add via WEB Interface MMC doesnt has the attribute maildrop.
    and the conf for virtual domains has something like this:
     Virtual Domains Control
    virtual_mailbox_domains = ldap:/etc/postfix/
    virtual_mailbox_maps = [b]ldap:/etc/postfix/[/b]
    virtual_alias_maps = ldap:/etc/postfix/, ldap:/etc/postfix/
    virtual_mailbox_base = /
    virtual_alias_domains =
    virtual_minimum_uid = 100
    virtual_uid_maps = ldap:/etc/postfix/
    virtual_gid_maps = ldap:/etc/postfix/
    And ldap:/etc/postfix/
    server_host =
    server_port = 389
    search_base = ou=Users,dc=example,dc=com
    query_filter = (&(objectClass=mailAccount)(mailenable=OK)(mail=%s))
    result_attribute = [b]mailbox[/b]
    version = 3
    expansion_limit = 1
    the result:
    # postmap -q [email protected] ldap:/etc/postfix/


    then I try to change the result_attribute to homedirectory
    the result:
    # postmap -q [email protected] ldap:/etc/postfix/

    thats may be nice, but without the / at the end of homedirectory, when I send a email for firstime, i have a error like this:
    #mail [email protected]
    vme postfix/virtual[7754]: 87CA924047: to=<[email protected]>, relay=virtual, delay=
    0.25, delays=0.17/0.04/0/0.05, dsn=4.2.0, status=deferred (delivery failed to mailbox ///home/samba/users/pinfante: cannot open file: Is a directory)
    somebody knows where can I add the slash at the end of homedirectory,,, just conf files,,, i know that i can add manually with any ldap tools. I want to set default the slash at the end always I add users.

    Thanks a lot for your help.

    I hope mailbox attribute isnt a big mistake.
    Last edited: Jun 27, 2008
  15. gama_blind

    gama_blind New Member

    I answer my own question....
    the next day when I restarted my server, enter to MMC web interface and...
    Apear this:

    When i use MMC with virtual domains, on Mail tab

    add boxes like:
    Mail delivery path:
    Mail server host:

    THATS ALL!!!! this mailbox attribute!

    Sorry for the misunderstanding.
  16. primesoftnz

    primesoftnz Member


    In section 5.4 the command 'chown -R :"Domain Users" /home/samba' gives an error due to the fact that unix groups aren't allowed to have spaces or capital letters in them.

    Does the unix group name have to match the LDAP group "Domain Users" or does the name not matter? If it does matter is there some way of 'mapping' a unix group onto an LDAP group?
  17. Srdan Dukic

    Srdan Dukic New Member


    I have the same problem as above, when I try to set the folder group to "Domain Users" it gives an error saying "Invalid Group". I figure this is because the program trying to set the group does not check the ldap database for groups i.e. it is a problem with the nsswitch.conf file.

    However, that file is exactly the same as the one in the tutorial here. I have also checked that the ldap server is up and running and that there is an entry called "Domain Users" which is a subclass of "Group". So, I'm wondering is there some way of checking whether the changes in the nsswitch.conf file have been implemented? i.e. whether the system is using the ldap database and if not why it is not using it?

    I also checked the /etc/ldap/ldap.conf file and the details seem to be correct as well, with the only two lines being 'host' and 'base'.
  18. Srdan Dukic

    Srdan Dukic New Member

    ok, figured it out. Just had to change a line in the /etc/libnss-ldap.conf file. It turns out that the installation added 'host ldap://' instead of 'uri ldap://'.
  19. falko

    falko Super Moderator ISPConfig Developer

    You can use any IP address or FQDN that's pointing to your server.
    What's the output of
    ls -l /usr/bin/dccproc
  20. odcheck

    odcheck New Member

    This is the output of
    ls -l /usr/bin/dccproc
    ls: /usr/bin/dccproc: Datei oder Verzeichnis nicht gefunden

    The thing regarding the configuration of Outlook etc.. was easy.
    IP or FQDN of Server that's what I've did already but I missed the
    @domainname at the end of the username. ;-)

Share This Page