search for: paswword

Hi, I'm looking for a procedure (on paper first) to provide users on hosts session keys to login to servers providing services like file, print or even access to internet or a sql db. The first step is that user has to authenticate on the local host via password. Paswword and usernames are centrally managed via ldap (or simular). The second step is that the user on host logs in to the CA server, using it's password, it's private key and the hostkey. If success, then it gets a public session key (the private is kept on the CA server) it can use to auth to ss...

Hallo, we run a Redhat samba 3.5.4 PDC with openldap 2.4 as user/passwordbackend. The ldap also contains the posix information for the users to login to some web/mail/etc. servers. I'm faced with the task to implement a 'both worlds' compatible paswword sync process regarding complexity etc. For the posix account password we use a webfrontend, configure to use pam/cracklib checks which works fine. E.g. 'hello' is NOT allowed as password :-) Checking the password change from a windows 7 / XP notebook reveals, that there is not such a comp...

Hi. I was wondering a couple things relating to PAM authentication: 1. I found that expired passwords caused authentication failure, rather than the expected behaviour of forcing a paswword change. After perusing the auth-pam.c file (as it appears in openssh-3.4p1), I found that the reason is that the case for the relevant return value (PAM_AUTHTOKEN_REQD) from pam_acct_mgmt is wrapped with "#if 0 ... #endif"; does this mean that handling for it is essentially there, and...

...ompt appears. /etc/nsswitch.conf says: passwd: files winbind shadow: files group: files winbind When I login as root (root is samba user, according to pdbedit -L) the prompt appears immediately. Also when I login as an user from trusted domain (KEVF_D1\clock and put my windows NT paswword there and it WORKS!) I get no delay, I get immediate prompt. When I remove the 'winbind' words from nsswitch.conf, it disappears. However, it refuses the KEVF_D1\clock user with "User not known to the underlying authentication module" Does anyone know why does this happen? What...

...g for a procedure (on paper first) to provide users on hosts > > session keys to login to servers providing services like file, print > > or even access to internet or a sql db. > > > > The first step is that user has to authenticate on the local host via > > password. Paswword and usernames are centrally managed via ldap (or > > simular). > > > > The second step is that the user on host logs in to the CA server, > > using it's password, it's private key and the hostkey. > > The user dos not do that, the localhost computer does this...

I have implemented samba with LDAP backend, domain logins and roaming profiles and everything is great - except for one thing. Noone can change their passwords from windows - trying to change your password results in windows telling you your not allowed to do that! I did smbldap-show alan and among other information the line: sambaPwdCanChange: 0 appeared. From my understanding if I do

Greetings, We are currently experiencing logon problems with a trusted domain user(s). Example: We have DomainA and DomainB DomainA and DomainB both have workstations joined on their respective domain. DomainA and DomainB both have trust relationships. DomainA trusts DomainB and vise versa. DomainA is where being served by a Samba PDC, while DomainB has a PDC using Windows NT 4.0 Server When

On 25.08.2016 12:24, Rowland Penny via samba wrote: > On Thu, 25 Aug 2016 12:03:30 +0200 > basti via samba <samba at lists.samba.org> wrote: > >> Hello, >> I try to add a BDC to my AD using this Howto >> https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory#Preparing_the_host_for_the_domain_join >> >> host -t A