Problems of SuSE 10.0/9.3 clients with new created OU folders in Active Directory

Hello NG,

I have installed Active Directory 2003 with Sevices for Unix 3.5.
All is working fine, but my SuSE 10.0 Clients do not working
with new created ou's for my useraccounts. If I create a ou folder like
Accounts, and configure my ldap.conf like:
binddn cn=dirsearch, cn=Accounts,dc=ldap,dc=smb,
nss_base_passwd cn=Accounts,dc=ldap,dc=smb?sub
nss_base_shadow cn=Accounts,dc=ldap,dc=smb?sub
nss_base_group cn=Groups,dc=ldap,dc=smb?sub

The users and dirsearch, which I copied from ou=Users to ou=Accounts,
do not appeare after the getent passwd command on SuSE.
If the whole is for ou=Users, the AD Users do appeare after
getent passwd and they can login to Active directory.
It seems to me, that the Suse Clients only accept default containers
like Users, Computers.
I configured for ou = Computers and getent passwd provides the whole
content of the Computers container, which I filled with dirsearch and
useraccouns before.
I believe, that the scheme extension of SFU do not include new created ou's,
only the default ones.
Do I need a scheme extension or only configuring well the ldap.conf?
All other Windows Clients accept new OU's, created in Active Directory Users
and
Computers.

Below is my ldap.conf (with Ou=Users, is working) of the SuSE 10 Client.

Thanks a lot and best regards
Andreas


host IP of the AD Server
base dc=ldap,dc=smb
binddn cn=dirsearch,cn=Users,dc=ldap,dc=smb
bindpw secret
scope sub
nss_base_passwd cn=Users,dc=ldap,dc=smb?sub
nss_base_shadow cn=Users,dc=ldap,dc=smb?sub
nss_base_group cn=Groups,dc=ldap,dc=smb?sub
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute uidNumber msSFU30UidNumber
nss_map_attribute gidNumber msSFU30GidNumber
nss_map_attribute loginShell msSFU30LoginShell
nss_map_attribute gecos name
nss_map_attribute userPassword msSFU30Password
nss_map_attribute homeDirectory msSFU30HomeDirectory
nss_map_objectclass posixGroup Group
nss_map_attribute uniqueMember msSFU30PosixMember
nss_map_attribute cn cn
pam_login_attribute sAMAccountName
pam_filter objectclass=user
ldap_version 3
pam_password crypt
pam_member_attribute msSFU30PosixMember
pam_groupdn cn=unixusergroup,dc=ldap,dc=smb
pam_password AD
ssl=start_tls