[Solved] smb.conf error

[Damir]

Доброго времени суток!
Есть машинка:
Linux samba 2.6.32-33-generic-pae
ubuntu 10.04 LTS

На ней поставил LDAP и Samba:
smbd -V
Version 3.4.7

OpenLDAP: slapd 2.4.21

Настраивал всё по статьям:
https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html
https://help.ubuntu.com/10.04/serverguide/C/samba-ldap.html

Проблема вот в чём:
smbpasswd -w 123
ERROR: 'ldap admin dn' not defined! Please check your smb.conf

Однако, в smb.conf есть параметры:
LDAP Settings
passdb backend = ldapsam:ldap://127.0.0.1
ldap suffix = dc=mydomain,dc=local
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=admin,dc=mydomain,dc=local
ldap passwd sync = yes

Как я понимаю, Samba мне говорит, что в её конфиге не определён админ LDAP'а.
В чём может быть ошибка? Если необходимо, выложу конфиги.
Гугл ничего конкретного не дал.
Заранее благодарен.

[Pascal]

Never mind, I moved the LDAP Settings right below the
# passdb backend = tdbsam
restarted Samba and it worked

---
Что нагуглил я

[Damir]

Конфиг что я привёл находится в самом конце конфигурационного файла.

[Pascal]

Damir, прилепи smb.conf целиком в спойлер

[Damir]

Spoiler for Hiden:

cat /etc/samba/smb.conf | grep -v '^#' | sed '/^$/d'
[global]
   workgroup = SAMBA
   server string = %h server (Samba, Ubuntu)
;   wins server = w.x.y.z
   dns proxy = no
;   name resolve order = lmhosts host wins bcast
;   interfaces = 127.0.0.0/8 eth0
;   bind interfaces only = yes
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   security = user
   encrypt passwords = true
   obey pam restrictions = no
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\s                        successfully* .
   pam password change = yes
   map to guest = bad user
;   domain logons = yes
;   logon path = \\%N\profiles\%U
;   logon drive = H:
;   logon script = logon.cmd
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bi                        n/false %u
; add group script = /usr/sbin/addgroup --force-badname %g
;   printing = bsd
;   printcap name = /etc/printcap
;   printing = cups
;   printcap name = cups
;   include = /home/samba/etc/smb.conf.%m
;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash
;   winbind enum groups = yes
;   winbind enum users = yes
;   usershare max shares = 100
   usershare allow guests = yes
;[homes]
;   comment = Home Directories
;   browseable = no
;   read only = yes
;   create mask = 0700
;   directory mask = 0700
;   valid users = %S
;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   read only = yes
;   share modes = no
;[profiles]
;   comment = Users profiles
;   path = /home/samba/profiles
;   guest ok = no
;   browseable = no
;   create mask = 0600
;   directory mask = 0700
[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
;   write list = root, @lpadmin
;[cdrom]
;   comment = Samba server's CD-ROM
;   read only = yes
;   locking = no
;   path = /cdrom
;   guest ok = yes
;   preexec = /bin/mount /cdrom
;   postexec = /bin/umount /cdrom
 LDAP Settings
   admin users = admin
   passdb backend = ldapsam:ldap://127.0.0.1
ldap suffix = dc=mydomain,dc=local
   ldap user suffix = ou=People
   ldap group suffix = ou=Groups
   ldap machine suffix = ou=Computers
   ldap idmap suffix = ou=Idmap
   ldap admin dn = cn=admin,dc=mydomain,dc=local
   ldap ssl = off
   ldap passwd sync = yes
add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w "%u"

[Pascal]

Перенесите все что связанно с ldap в секцию [global]

Пример:

Spoiler for example:

[global]
workgroup = MIDEARTH
netbios name = FRODO
passdb backend = ldapsam:ldap://localhost
username map = /etc/samba/smbusers
printcap name = cups
add user script = /usr/local/sbin/smbldap-useradd -m '%u'
delete user script = /usr/local/sbin/smbldap-userdel %u
add group script = /usr/local/sbin/smbldap-groupadd -p '%g'
delete group script = /usr/local/sbin/smbldap-groupdel '%g'
add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g'
delete user from group script = /usr/local/sbin/smbldap-groupmod -x '%u' '%g'
set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u'
add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
logon script = scripts\logon.bat
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 35
preferred master = Yes
domain master = Yes
ldap suffix = dc=quenya,dc=org
ldap machine suffix = ou=People
ldap user suffix = ou=People
ldap group suffix = ou=People
ldap idmap suffix = ou=People
ldap admin dn = cn=Manager,dc=quenya,dc=org
ldap ssl = no
ldap passwd sync = Yes
idmap uid = 15000-20000
idmap gid = 15000-20000
printing = cups

[Damir]

Премного благодарен.
Поставил в секцию глобал, но после passdb.
Прокатило:
smbpasswd -w 123
Setting stored password for "cn=admin,dc=mydomain,dc=local" in secrets.tdb