similar to: WG: Samba LDAP entries for Password Change

Hi all, I have a question regarding the enforced change of passwords in Samba 3.0.28 (coming with Ubuntu Hardy) in connection with a LDAP backend. In particular, I am looking for a documentation how the fields sambaMinPwdAge, sambaMaxPwdAge (from sambaDomain), sambaPwdCanChange and sambaPwdMustChange (from sambaSAMAccount) interact. I would like to have the following: - when a new

Hi there, i got into some trouble after updating my samba installation to 3.0.27a. My installation uses Samba-3.0.27a,OpenLDAP-2.2.13,smbldap-tools-0.9.2 as a PDC NT4-domain.Originally I used the installation-guide from smbldap-tools and everything worked fine. I also limited the access to LDAP as told in the installation-guide with no problems. After updating to 3.0.27a i realized that when

Hi, I run a Fedora 2 box with Samba 3.0.10 as a domain member. The PDC is a Win server with AD. Running winbind, all domain users and groups are visible on the Samba box. To grant a special group of domain users access to parts of a samba share, I would like to - add a *local* group on the samba box (*not* in AD!) and - add some *domain* users to this new group. Unfortunately the trick of

Hi all, after upgrading a FC3 box to FC4 which comes with Samba 3.0.23a rpm's, I have the really strange effect that /only/ "admin users" can print to printers shared by the Samba server. Even a double click on the printer in Win gives an "access denied". The access to "normal" shares (homes etc.) still works fine. Any idea what went wrong? How could I debug

Hi, I have an access problem related to local unix groups on a FC2 box running the samba-3.0.10-1.fc2 rpms. The goal is to have a read-only share with sub-folders accessible only by one user. All users lised in a local unix group "admin" shall have access to all folders. The samba box uses an external active directory machine for authentication. Winbind is running on the machine.

Hi, I am running samba 3.0.7 on a FC 2 box with the following setup (testparm output): <snip> [global] workgroup = XXXXX realm = XXXXX.YYYYY.COM security = ADS log level = 1 log file = /var/log/samba/%m.log max log size = 50 load printers = No os level = 0 preferred master = No local master = No

Hello, we, a public hospital, would like to migrate to samba4 from our samba3.x environment. According to the documentation samba4 does use a internal ldap server. We use openLDAP as directory for samba horde Oracle name resolution zope user authentication, Checkpoint Firewall authentication (only few users ), squid proxy authentication, logon authentication to our linux servers, logon

Hi Harry, Here are the outputs. I've attached them as logs with this email too. root at sam3dc:/tmp/ldifs-gr# ldapmodify -Y external -H ldapi:/// -f olcdbindex.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={1}hdb,cn=config" root at sam3dc:/tmp/ldifs-gr# service slapd stop

Hi, I have an ldap provider and consumer that appear to work correctly, EG, new users are sync'ed and a search on either server (ldapsearch -x -b 'dc=example,dc=com' '(cn=djohn)') returns an oject. However when an XP user attempt to connect to the consumer server the authentication fails: [2011/06/10 16:11:21, 0] lib/util_sock.c:write_data(1059) [2011/06/10 16:11:21, 0]

Hello, I?m currently having a problem where a non-root user can?t change his/her own password using smbpasswd command after the password expiration and would like to know how I could solve this problem. Currently, I have a samba server running on CentOS 6.5 with its passdb backend configured to another LDAP server. The samba version I?m currently using is samba-3.6.9-169 which should be the

Greetings. I have just upgraded to samba 3.0.25a (from 3.0.24 AFAIR). I have also upgraded schema file in openldap's configuration directory. As I have had some more time I have discovered sambaMaxPwdAge and that it may be read with pdbedit in human readable form. Great :-) But what if I would like to force a user to change her password right at next login? I have tried to set

Hi , I would really appreciate some suggestions re the following issue. We have a LDAP based PDC and a member server. We're use libnss_ldap to auth the users. The LDAP PDC is setup with self signed SSL , we're trying make sure the member server connects to the PDC using SSL. Here is the PDC , smb.conf [global] workgroup = SUNTECH netbios name = SERVER01 security = USER local master =

Hi all, after an upgrade of my Ubuntu 8.04 64-bit box to a self-compiled samba 3.4.3 (Lenny backport dpkg), I see strange error messages in my OpenLDAP log: slapd[3388]: do_search: invalid dn (sambaDomainName=,sambaDomainName=<domain>,cn=<...>,dc=<...>,dc=<...>) Samba seems to work, though, but this message makes me somewhat nervous. Any ideas? Thanks, Albrecht.

Hello, i?ve some problems setting the initial password for Windows and Unix User with Samba configured to use LDAP as backend. I?ve attached the configuration files and the errors. Creating a new user with net rpc user add "xyz" is working without problem. Using for example GQ as LDAP browser, i can see the account and also getent passwd is showing the entry. I?ve activated ldap

-----Ursprungliche Nachricht----- Von: Marian Chowanetz [mailto:mchowanetz@emmixx.de] Gesendet: Mittwoch, 14. Juli 2004 10:24 An: 'Jim C.' Betreff: AW: [Samba] Re: sambaAcctFlags automatically DUX when logon thanks for your help, jim. I'd already tried the re-joining with my test-machine. It didn't help. I found out that the idxldapaccounts-tool does not correctly change the

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

Hi all! I work as a computer technician for a small school and have recently upgraded our network to use samba servers. Our main computers are a PDC, a BDC, a file server and a backup server, all using Red Hat Fedora Core 3 as a base. The clients on our network consist of machines with Windows XP and a few with Windows NT. Everything seems to work just fine except for some minor but annoying

Hi, I'm having an issue trying to make a Windows machine sambaserveroin a Samba domain. Samba is running with LDAP backend (OpenLDAP). When I try to join the domain, Windows says that the machine account does not exist. The machine account, however, is successfully created in the LDAP directory after the join fails. When I try to join again, Windows says that the account already exists.

Hi, guys, I'm trying to create a PDC using Samba with an LDAP backend. According to all the guides I read, this should be fairly easy really, but I've done nothing else for the last week and it still doesn't work the way the manual says it should! As far as I can see, everything is set up and working correctly right up to the point when I try and join a machine to the domain.

I have some weird error with one of my samba installation. When modifying samba password using smbpasswd, samba seems trying to add same attribute (instead of delete and add again), pls see the "MOD" from log file (from different domain) : UNSUCESSFULL Mar 15 17:10:53 hurricane slapd[27056]: conn=29489 op=1 MOD dn="uid=pwreka,ou=people,ou=purwakarta,dc=indorama,dc=com" Mar 15