search for: acctflags

...tell me what can cause this error ? here my workstation ldif entry: dn: uid=nomicro$, ou=computers, dc=dialog-telekom,dc=at logonTime: 0 displayName: nomicro$ lmPassword: 6BCAC9BC98D80DE1AAD3B435B51404EE objectClass: account objectClass: posixAccount objectClass: sambaAccount primaryGroupID: 2007 acctFlags: [DW ] uid: nomicro$ uidNumber: 1000 cn: nomicro$ loginShell: /bin/false logoffTime: 2147483647 gidNumber: 503 kickoffTime: 2147483647 pwdLastSet: 1053686926 rid: 3000 description: Computer homeDirectory: /dev/null pwdCanChange: 0 pwdMustChange: 2147483647 ntPassword: 4DA811CEF46834C8201960...

Hello, I did not have any response of my first mail. Perhaps I did not be enough clear: Since I have installed the latest version of samba (2.2.7), I can't see user of my domain with the Win2K User management console. I have try to change several attribute in my user ( in particular acctFlags ) but I cannot manage with making my system works. Do you have any idea ? Thanks in advance Matthieu Turpault Appendice: - a sample of a user in my LDAP directory - my first post ----------------------------------------------------------- ====================================================...

...ry: /home/administrator loginShell: /bin/bash gecos: User description: User objectClass: top objectClass: account objectClass: posixAccount objectClass: sambaAccount pwdLastSet: 0 logonTime: 0 logoffTime: 2147483647 kickoffTime: 2147483647 pwdCanChange: 0 pwdMustChange: 2147483647 displayName: User acctFlags: [UX] rid: 3004 primaryGroupID: 1401 homeDrive: H: smbHome: \\PDC-SRV\homes profilePath: \\PDC-SRV\profiles\administrator scriptPath: administrator.cmd lmPassword: D97250ED40513A79AAD3B435B51404EE ntPassword: 0386FBABCB8CF77E41C061AEA00E95A4 userPassword: {SSHA}BUcCgooxvfMJziKwhYF4vLXAyR91SGHm dn:...

...I am kinda confused as to how to get some values for ldap. For example, here is an ldif entry: dn: uid=gcarter, ou=people,dc=plainjoe,dc=org logonTime: 0 displayName: Gerald Carter lmPassword: 552902031BEDE9EFAAD3B435B51404EE primaryGroupID: 1201 objectClass: posixAccount objectClass: sambaAccount acctFlags: [UX ] userPassword: {crypt}BpM2ej8Rkzogo uid: gcarter uidNumber: 9000 cn: Gerald Carter loginShell: /bin/bash logoffTime: 2147483647 gidNumber: 100 kickoffTime: 2147483647 pwdLastSet: 1010179230 rid: 19000 homeDirectory: /home/tashtego/gcarter pwdCanChange: 0 pwdMustChange: 2147483647 ntPa...

...Z1BlcnNvbg0= objectclass:: cG9zaXhBY2NvdW50DQ== objectclass:: c2FtYmFBY2NvdW50DQ== dn:: dWlkPXNwdSwgb3U9dXNlcnMsIGRjPXRvdG8sZGM9YmUN logontime:: MA0= displayname:: U3lzdGVtIFVzZXIN lmpassword:: MzBDMDQyOTRCNkM3RDk1MjFBQTgxODM4MUU0RTI4MUIN primarygroupid:: MTIwMQ0= smbhome:: XFxBRE1JTjAxXGhvbWVzDQ== acctflags:: W1VYXQ0= scriptpath:: YWRtLmJhdA0= userpassword: {SSHA}oqF7dWp5XJPUA2ki5zauyCJ2O/UDmcyC mail:: c3RlcGhhbmUucHVybmVsbGVAdGlzY2FsaS5iZQ0= uid:: c3B1DQ== uidnumber:: MTAwMQ0= cn:: c3B1DQ== loginshell:: L2Jpbi9iYXNoDQ== homedrive:: SDoN logofftime:: MjE0NzQ4MzY0Nw0= gidnumber:: MTAwDQ== kickofftime::...

I have a samba 2.2.8a PDC with Openldap backend. Recently XP Pro client users start to keep getting "Your password expires today" message and even after the passwords are changed the same message will just pop up the next login time. All the LDAP user accounts have [UX] as acctFlags value which I believe should mean that the password never expires (yes, bad idea ...) but it does not seem to work. The problem seems to also exist in Samba-3.0.0beta1. For two XP clients which I checked they both have time skew of a few seconds compared with the samba PDC (the samba PDC's tim...

...483647 pwdCanChange: 2147483647 pwdMustChange: 2147483647 displayName: root cn: root smbHome: \\MY_PDC\homes homeDrive: Z: scriptPath: logon.cmd profilePath: \\MT-PDC\profiles\root rid: 1000 primaryGroupID: 1001 lmPassword: 639C041927C79D99AAEJKHRJFHKRJKL ntPassword: 6E1766AB79DDFHGJDHFJJHBJFHBJRHR acctFlags: [UX ] The machine name is also in LDAP like this: dn: uid=MYMACHINE$,ou=Machine,dc=virginiabeach,dc=net objectClass: top objectClass: account objectClass: posixAccount objectClass: shadowAccount objectClass: sambaAccount uid: MYMACHINE$ uidNumber: 11014 gidNumber: 11014 homeDirectory: /d...

...account objectClass: mailRecipient gidNumber: 500 loginShell: /bin/false description: schueler uid: fg13z-15 pwdLastSet: 1028701166 logonTime: 0 logoffTime: 2147483647 kickoffTime: 2147483647 pwdCanChange: 0 pwdMustChange: 2147483647 displayName: fg13z-15 cn: fg13z-15 rid: 3436 primaryGroupID: 2001 acctFlags: [UX ] uidNumber: 5258 mail: fg13z-15@lb-bbs1.emd.ni.schule.de mailLocalAddress: fg13z-15@fileserver.bbs1-emden.schule mailDeliveryOption: accept homeDirectory: /home/schueler/fg13z-15 homeDrive: P: smbHome: \\fileserver\fg13z-15 The ldap-entry of bfs1a-15: dn: cn=bfs1a-15,dc=bbs1-emden,dc...

...ey have not changed! It's almost like I need to some how touch the ldap record for it to work This is really confusing.. Any one have an idea? - Jamie Heres a sample LDIF record dn: uid=mimc08,ou=People,dc=newberg,dc=k12,dc=or,dc=us shadowLastChange: 12370 rid: 11126 primaryGroupID: 11127 acctFlags: [U ] gecos: Millen Mc uidNumber: 5063 userPassword: {crypt}PIsNAk2Yp2XmU gidNumber: 501 objectClass: account objectClass: posixAccount objectClass: sambaAccount objectClass: top objectClass: shadowAccount objectClass: inetorgperson objectClass: apple-user objectClass: extensibleObject obj...

...eDirectory: /home/users/busse userPassword:: xxx shadowLastChange: 12087 uid: Busse pwdLastSet: 1044369387 logonTime: 2147483647 logoffTime: 2147483647 kickoffTime: 2147483647 pwdCanChange: 2147483647 pwdMustChange: 2147483647 cn: Busse rid: 5002 primaryGroupID: 5003 lmPassword: xxx ntPassword: xxx acctFlags: [U ] and one of a machine trust account: dn: cn=pc-155$,ou=computers,o=zq-aekn,c=de objectClass: posixAccount objectClass: shadowAccount objectClass: sambaAccount uidNumber: 3023 gidNumber: 100 homeDirectory: /dev/null uid: pc-155$ pwdLastSet: 1044877124 logonTime: 2147483647 logoffTime...

...ey have not changed! It's almost like I need to some how touch the ldap record for it to work This is really confusing.. Any one have an idea? - Jamie Heres a sample LDIF record dn: uid=mimc08,ou=People,dc=newberg,dc=k12,dc=or,dc=us shadowLastChange: 12370 rid: 11126 primaryGroupID: 11127 acctFlags: [U ] gecos: Millen Mc uidNumber: 5063 userPassword: {crypt}PIsNAk2Yp2XmU gidNumber: 501 objectClass: account objectClass: posixAccount objectClass: sambaAccount objectClass: top objectClass: shadowAccount objectClass: inetorgperson objectClass: apple-user objectClass: extensibleObject obj...

I'm trying to set up my LDAP in preparation to configure my Samba PDC. In the Official Samba-3 HOWTO and Reference Guide it give instructions on howto setup slapd.conf (section 10.4.4.3) After modifying the file it instructs to run /sbin/splapindex -f /splapd.conf When I run this I get the following error: /etc/openldap/schema/samba.schema: line 423: AttributeType not found:

...ldap (...) -------------- I've imported the following in my LDAP : ----------------------------------------------------------- dn: uid=Administrator, ou=People, o=hogent,c=be logonTime: 0 objectClass: sambaAccount objectClass: posixAccount lmPassword: 2ACFE0DCD4F90C9728D41 primaryGroupID: 512 acctFlags: [U ] userPassword:: e1NTSEF9S05lbXBPaVQxZVI uid: Administrator uidNumber: 0 cn: Administrator loginShell: /dev/null logoffTime: 0 gidNumber: 0 kickoffTime: 0 pwdLastSet: 1046643900 rid: 500 gecos: Samba Admin description: Domain Administrator homeDirectory: /home/administrator pwdCanChang...

...er: 1005 sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 description: Computer Account rid: 0 primaryGroupID: 0 lmPassword: 7582BF7F733351347D485E46C8E6306E ntPassword: 7582BF7F733351347D485E46C8E6306E acctFlags: [W ] Looking at smbldap-useradd script code I can see that sambaSAMAccount entrys are only added when -i switch is used (trusted workstation account). ----------- CODE SNIP -------------------- # MACHINE ACCOUNT if (defined($Options{'w'}) or defined($Options{'i'})) {...

Has anyone had any luck adding machine accounts from w2k to a samba 3.0 pdc? I posted the issue last week, as I noticed others were encountering the same problem. The weird thing is I had it working on a box before. But this time I'm using pam_ldap to avoid local unix accounts, and it wont work. I copied the config over from the box that was working, made changes for the different config

...puter) dn: uid=scott$,ou=People, dc=lifesafety, dc=net displayName: NTMachine cn: NTMachine objectClass: sambaAccount pwdLastSet: 0 logonTime: 0 pwdCanChange: 0 pwdMustChange: 0 rid: 2072 primaryGroupID: 2079 lmPassword: 1798EC6B0B0802BAFAF6645E5F76DB8E ntPassword: 6971B307565F4A730E594ED40F5132AF acctFlags: [W ] uid: SCOTT$ logoffTime: 2147483647 kickoffTime: 2147483647 # search result here is its entry in /etc/passwd scott$:x:530:533:NTMachine:/dev/null:/bin/false Note, I did notice that uid: SCOTT$ is capitalized. For some reason when I did the "join Domain" in win2k setup it...

...s cn: juan1 objectClass: sambaAccount objectClass: posixAccount uid: juan1 pwdLastSet: 0 logonTime: 0 logoffTime: 2147483647 kickoffTime: 2147483647 pwdCanChange: 0 pwdMustChange: 2147483647 userPassword: hola lmPassword: 37D5B8AB8069F5B8AB5B8AB8B8AB8069 ntPassword: 5B8AB8B8AB85B8A5B8AB8B8AB82BE319 acctFlags: [UX ] uidNumber: 1020 gidNumber: 1001 loginShell: /bin/bash rid: 3040 primaryGroupID: 513 homeDirectory: /dev/null /etc/samba/smb.conf ==================== ldap server = localhost ldap port = 389 ldap suffix = "ou=smb, dc=Colegio Oficial de Arquitectos de Madrid, dc=es" ldap...

...es=0 etime=0 dn="cn=directory manager" [18/Sep/2003:14:09:43 +0400] conn=979 op=1 SRCH base="dc=iforce,dc=tech-access,dc=com" scope=2 filter="(rid=2012)" attrs="uid rid cn lmPassword ntPassword pwdLastSet logonTime logofftime kickoffTime pwdCanChange pwdMustChange acctFlags displayName smbHome homeDrive scriptPath profilePath description userWorkstations primaryGroupID domain" [18/Sep/2003:14:09:43 +0400] conn=979 op=1 RESULT err=0 tag=101 nentries=0 etime=0 [18/Sep/2003:14:09:43 +0400] conn=979 op=2 UNBIND [18/Sep/2003:14:09:43 +0400] conn=979 op=2 fd=50 closed...

How do you add an "Administrator" account to ldap. I want to leave root in /etc/passwd but have "Administrator" in ldap I have checked Howto Collection and the Samba-Ldap-3 but they contain no information. The Ldap-Howto has a suggestion but then says not to use. Godfrey

...02:51, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [lmPassword] = [] [2003/12/09 14:02:51, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [ntPassword] = ] [2003/12/09 14:02:51, 2] passdb/pdb_ldap.c:get_single_attribute(441) get_single_attribute: [acctFlags] = [[UX ]] [2003/12/09 14:02:51, 4] smbd/password.c:smb_password_ok(475) Here is where it starts to flake out: smb_password_ok: Checking SMB password for user administrator [2003/12/09 14:02:51, 5] smbd/password.c:smb_password_ok(489) smb_password_ok: challenge received [2003/12/09 1...