similar to: NT_STATUS_ACCOUNT_LOCKED_OUT

I'm having a very annoying problem I can't figure out. I've been running Samba4 as our office AD/DC for several years. This is a recent problem. Whenever I Remote Desktop into a particular Windows workstation (192.168.0.4) I get the following message in /var/log/samba/log.samba: Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[mark at HPRS] at [Thu, 17 Jan 2019

Ah ha! I believe I've solved this. I checked the Windows credentials repository. There was a 'mark' ID and likely an old password stored there. I deleted that credential, rebooted, and no more lock out message. During the past year, the 'classic' Samba file server was added as a domain member and all domain member workstations then had to use domain credentials for mapping

I sure could use some help on this. Perhaps this problem is due to a recent Windows update? I have determined that whenever I log into the Windows 7 host DBSERVER from any other Windows 7 computer, whether it be a local domain workstation or an external computer, and regarless of whether the client workstation is logged in as 'mark' or any other user, I have the lockout problem. As soon

Need help on this. My account is locked out. Need way to reset. --Mark -----Original Message----- Date: Fri, 13 Apr 2018 14:49:44 -0400 Organization: Ohio Highway Patrol Retirement System To: samba at lists.samba.org Subject: Re: [Samba] How to change Domain password as normal user? On Thu, 5 Apr 2018 16:59:15 +0100 Rowland Penny <rpenny at samba.org> wrote: > > On Thu, 05 Apr 2018

OK, I'm having issues with the problem. To summarize, I'm trying to have a normal user change his password from a domain member. I've tried: passwd, kpasswd and 'samba-tool user password -U $USER --ipaddress=<IPofAD/DC>'. All mechanisms do change the domain password and I can log into Windows and Linux domain members, and website requiring domain authentication.

On Thu, 5 Apr 2018 16:59:15 +0100 Rowland Penny <rpenny at samba.org> wrote: > > On Thu, 05 Apr 2018 11:31:18 -0400 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > OK, I'm having issues with the problem. To summarize, I'm trying to > > have a normal user change his password from a domain member. I've > > tried: passwd, kpasswd

On Sat, 19 Jan 2019 16:26:21 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Sun, 20 Jan 2019 08:06:26 +1300 Andrew Bartlett wrote: > > > > On Sat, 2019-01-19 at 13:37 -0500, Mark Foley via samba wrote: > > > I sure could use some help on this.  Perhaps this problem is due > > > to a recent Windows update? > > >  > > >

On Mon, 16 Apr 2018 14:12:02 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > Still having daily problems. Yesterday, again, I reset the user > password from the AD/DC as the domain administrator: samba-tool user > setpassword mark > > Today, I was unable to log in. The only message in the log.samba file > is: > > [2018/04/16 14:02:12.199145, > 2]

On Sat, 2019-01-19 at 13:37 -0500, Mark Foley via samba wrote: > I sure could use some help on this.  Perhaps this problem is due to a > recent Windows update? >  > Furthermore, when I do actually log into this computer as 'mark' and > enter the correct PW, it > works fine, no Auth errors.  > > Could someone point me in the right direction for research?  Turn up

On Sun, 20 Jan 2019 08:06:26 +1300 Andrew Bartlett wrote: > > On Sat, 2019-01-19 at 13:37 -0500, Mark Foley via samba wrote: > > I sure could use some help on this.  Perhaps this problem is due to a > > recent Windows update? > >  > > Furthermore, when I do actually log into this computer as 'mark' and > > enter the correct PW, it > > works fine,

Still having daily problems. Yesterday, again, I reset the user password from the AD/DC as the domain administrator: samba-tool user setpassword mark Today, I was unable to log in. The only message in the log.samba file is: [2018/04/16 14:02:12.199145, 2] ../source4/auth/ntlm/auth.c:430(auth_check_password_recv) auth_check_password_recv: sam_ignoredomain authentication for user [HPRS\mark]

>From samba-bounces at lists.samba.org Fri Apr 13 09:46:32 2018 X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.99.2 at mail X-Virus-Status: Clean Date: Fri, 13 Apr 2018 09:45:14 -0400 Organization: Ohio Highway Patrol Retirement System To: samba at lists.samba.org User-Agent: Heirloom mailx 12.5 7/5/10 Subject: Re: [Samba] How to change Domain password as normal user? X-BeenThere:

Hi, I am trying to capture from the logs the moment that samba locks an account. (because of too many failed logon attempts) This is samba 4.7.2, with: > log level = 1 auth_audit:3 What we see in the logs is like this: > Auth: [LDAP,simple bind/TLS] user [(null)]\[cn=username,cn=users,dc=samba,dc=company,dc=com] at [Sat, 02 Dec 2017 15:13:45.102695 CET] with [Plaintext] status

According to the documentation, Samba 3 supports account lockouts (ie: bad password attempt 5 times will result in the PDC returning an NT_STATUS_ACCOUNT_LOCKED_OUT message, until the account is manually reset with pdbedit). This syntax I'm using appears to be correct, but I'm not actually getting actual account lockouts: pdbedit -P "bad lockout attempt" -C 5 - and - pdbedit -P

On Sat, 31 Mar 2018 11:42:07 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > On Sat, 31 Mar 2018 12:25:14 +0100 Rowland Penny <rpenny at samba.org> > wrote: > > > > This will then prompt the user for their 'oldpassword' and then the > > new password (twice). There is a gotcha though, as given it will > > only work on a DC, to do the

If anyone is interested ... just in case! :-)... I have tried to write , based on the cdr_mysql.so module, an Sybase module. To compile you can use something like that: export SYBPLATFORM=linux export SYBASE=/opt/sybase cc -I$SYBASE/include -c -o cdr_sybase.o cdr_sybase.c cc -shared -Xlinker -x -o cdr_sybase.so cdr_sybase.o -lsybdb -lm -L$SYBASE/lib (anyone could write the corect Makefile

Folks: I've got several systems attached to a 2003 domain where we use kerberos to authenticate. When I upgraded a system to the latest greatest samba things stopped working. Just to find where it happened in the different versions of samba I downloaded, built, & ran 3.0.23d to 3.0.25c using the same smb.conf file. Turns out the 2.0.23d and 3.0.24 works but from 3.0.25 on it fails.

On Thu, 05 Apr 2018 11:31:18 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > OK, I'm having issues with the problem. To summarize, I'm trying to > have a normal user change his password from a domain member. I've > tried: passwd, kpasswd and 'samba-tool user password -U $USER > --ipaddress=<IPofAD/DC>'. All mechanisms do change the

On Sun, 2 Dec 2018 08:52:19 Rowland Penny wrote: > > On Sat, 1 Dec 2018 20:38:58 -0500 > Nico Kadel-Garcia <nkadel at gmail.com> wrote: > > > On Sat, Dec 1, 2018 at 4:17 PM Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > > > On Sat, 01 Dec 2018 15:23:36 -0500 > > > Mark Foley <mfoley at ohprs.org> wrote:

I've gotten errors like this when it was actually a selinux denial. If you're running selinux, check those logs too. Bill On 1/16/2017 4:09 PM, Mark Foley wrote: > More info ... > > This is the only user having this permission problem. All other Thunderbird/dovecot users are > getting mail file. They all have the same permissions set on their Maildir folder. > > --Mark