Bonjour a tous.
L’année dernière pour “m’amuser” j’ai monté un Contrôleur de Domain SAMBA OPENldap.
Cette année je dois justement en faire un PDC avec réplication multimaster.
Bon la n’est pas le problème mais j’ai un petit soucis que je n’arrive pas a résoudre.
J’arrive a accéder a la page de login de mon PDC mais mon Windaube me retourne une erreur.
http://imageshack.us/photo/my-images/834/deb1.png
Au début je pensais que c’était du a la lenteur de mon réseau. Mais j’ai mis toutes mes machines virtuel en VirtualPrivateNetwork 
Sachant que 192.168.1.3 est ma machine Windows.
Quand je regarde les logs on remarque que mon SAMABA me refuse les connexions :
log nmbd
[2012/04/03 01:11:22.613770, 0] lib/access.c:410(check_access)
Denied connection from (192.168.1.3)
[2012/04/03 01:11:22.614093, 1] smbd/process.c:2295(smbd_process)
Connection denied from 192.168.1.3
[2012/04/03 01:11:50.863345, 0] lib/access.c:410(check_access)
Denied connection from (192.168.1.3)
[2012/04/03 01:11:50.863661, 1] smbd/process.c:2295(smbd_process)
Connection denied from 192.168.1.3
[2012/04/03 01:12:30, 0] smbd/server.c:1123(main)
smbd version 3.5.6 started.
Copyright Andrew Tridgell and the Samba Team 1992-2010
[2012/04/03 01:12:30.677554, 0] printing/print_cups.c:108(cups_connect)
Unable to connect to CUPS server localhost:631 - Connexion refusée
[2012/04/03 01:12:30.679940, 0] printing/print_cups.c:108(cups_connect)
Unable to connect to CUPS server localhost:631 - Connexion refusée
log smbd
http://imageshack.us/photo/my-images/404/deb2.png
Fichier smb.conf
[code]### A changer: pas d’espace, ni point === >
workgroup = epsiprojet.fr
A changer, mettre le meme nom que le nom de votre machine === >
netbios name = PDC
server string = Samba-LDAP PDC Server
domain master = Yes
local master = Yes
domain logons = Yes
os level = 40
interfaces = eth0
bind interfaces only = Yes
#passwd program = /usr/sbin/smbldap-passwd ?u %u
ldap passwd sync = Yes
passdb backend = ldapsam:ldap://192.168.1.50/
A changer === >
ldap admin dn = cn=admin,dc=epsiprojet,dc=fr
A changer === >
ldap suffix = dc=epsiprojet,dc=fr
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Machines
add user script = /usr/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p “%g”
#delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m “%u” "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x “%u” "%g"
set primary group script = /usr/sbin/smbldap-usermod -g “%g” "%u"
logon path = \%L\profile%U
logon drive = P:
logon home = \%L%U
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
case sensitive = No
default case = lower
preserve case = yes
short preserve case = Yes
#character set = iso8859-1
#domain admin group = @admin
dns proxy = No
wins support = Yes
ldap ssl = off
A changer si vous n’utilisez pas ce réau === >
hosts allow = 172.20.116.0 255.255.0.0
winbind use default domain = Yes
nt acl support = Yes
msdfs root = Yes
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
FIN DE LA PARTIE GLOBALE
LES PARTAGES
[netlogon]
path = /home/netlogon
writable = No
browseable = No
write list = Administrateur
[profile]
path = /home/export/profile
browseable = No
writeable = Yes
profile acls = yes
create mask = 0700
directory mask = 0700
[homes]
comment = Repertoire Personnel
browseable = No
writeable = Yes
[partage]
comment = Repertoire commun
browseable = Yes
writeable = Yes
public = No
path = /home/partage
[/code]
Fichier smbtools
[code]sambaDomain = epsiprojet
SID="S-1-5-21-904419580-1409684714-593550753"
masterLDAP="192.168.1.50"
masterPort="389"
slaveLDAP="192.168.1.51"
slavePort="389"
ldapTLS="0"
verify="require"
suffix="dc=epsiprojet,dc=fr"
usersdn="ou=Users,${suffix}"
computersdn="ou=Machines,${suffix}"
groupsdn="ou=Groups,${suffix}"
idmapdn=“ou=Idmap,${suffix}”
La ligne ci-dessous est commentee pour eviter une erreur lors de
l’execution de la commande smbldap-populate.
sambaUnixIdPooldn=“cn=NextFreeUnixId,${suffix}”
#sambaUnixIdPooldn="sambaDomainName=dev,${suffix}“
scope=“sub"
hash_encrypt=“SSHA"
crypt_salt_format=”%s"
userLoginShell=”/bin/bash"
userHome=”/home/%U"
userHomeDirectoryMode=“700”
#Nom d’affichage - utiliser smbldap-useradd -c
userGecos="User"
defaultUserGid=“513"
defaultComputerGid=“515"
skeletonDir=”/etc/skel”
#Les mots de passe expirent dans 10ans
defaultMaxPasswordAge=“3650"
with_smbpasswd=“0"
smbpasswd=”/usr/bin/smbpasswd"
with_slappasswd=“0"
slappasswd=”/usr/sbin/slappasswd”
mk_ntpasswd="/usr/local/sbin/mkntpwd"
[/code]
Merci 
).
