samba - Oct 2020 - new dc does not allow login..?

On 26/10/2020 14:43, Joachim Lindenberg wrote:
>
> Hi Rowland,
>
> can I reset the machine password of the DC somehow?
>
> Thanks, Joachim
>
yes, see here: 
https://wiki.samba.org/index.php/Samba_Security_Documentation#Manual_roll-over

Also, please do not send posts directly to me, only to the list.

Rowland

Hi Rowland,
sorry - I am always unsure whether it makes sense to send intermediate
discussion to the full list, especially when it is likely to result in more
questions than answers - imho this is noise not relevant to all. I?d be happy to
summarize the solution afterwards if deemed interesting to others.
I downloaded sources to get to the scripts and located them, but usage is not
really clear to me. I tried
./chgtdcpass -U 'COBRA' --password=adummy
Without any error message, but dsa does not show any update to pwdlastset or
whenchanged. Also tried specifying the working DC via --ipaddressWhat am I
missing?
Thanks, Joachim

-----Urspr?ngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny
via samba
Gesendet: Monday, 26 October 2020 16:00
An: sambalist <samba at lists.samba.org>
Betreff: Re: [Samba] new dc does not allow login..?

On 26/10/2020 14:43, Joachim Lindenberg wrote:
>
> Hi Rowland,
>
> can I reset the machine password of the DC somehow?
>
> Thanks, Joachim
>
yes, see here: 
https://wiki.samba.org/index.php/Samba_Security_Documentation#Manual_roll-over

Also, please do not send posts directly to me, only to the list.

Rowland


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Mon, 2020-10-26 at 16:33 +0100, Joachim Lindenberg via samba
wrote:
> Hi Rowland,
> 
> sorry - I am always unsure whether it makes sense to send
> intermediate discussion to the full list,
Yes, the list etiquette here is always to mail to the full list unless
(for example) you have been asked to send some sensitive information
directly.  That is why the reply-to encourages mails to return to the
list.

That way others can join in the discussion and everyone (now and those
reading the archives in the future) benefits from the outcome.  

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba