empirium
2007-May-24 10:23 UTC
[Samba] problem with synchronize samba and unix password - ldap
I have a such problem. I have samba 3 as a PDC with ldap as a authentication backend. When I use script "smbldap-passwd user", samba password and unix password is changing correct, but when i use Ctr+Alt+Del from windows computer samba is changing corectly its password, and I see that unix password is also changing but I cannot to log to system with that unix password. Somebody knows why? part of smb.conf ldap password sync = Yes #unix password sync = Yes passwd program = /usr/sbin/smbldap-passwd -u %u update encrypted = yes encrypt passwords = yes smbldap.conf hash_encrypt="CRYPT" crypt_salt_format="%s" Thanks in advance luk
adrian sender
2007-May-24 23:18 UTC
[Samba] problem with synchronize samba and unix password - ldap
It could be a problem with you slapd.conf & ACL's, you need something
like
this:
access to attrs=userPassword
by self write
by dn="cn=Manager,dc=domainname,dc=com" write
by * auth
access to attrs=sambaLMPassword,sambaNTPassword
by dn="cn=Manager,dc=domainname,dc=com" write
access to *
by dn="cn=Manager,dc=domainname,dc=com" write
by * read
Samba needs access to this, replace "Manager" with the bind dn that
samba
uses to bind to the ldap database.
Cheers,
Adrian Sender.
>From: empirium <empirium@o2.pl>
>To: samba@lists.samba.org
>Subject: [Samba] problem with synchronize samba and unix password - ldap
>Date: Thu, 24 May 2007 12:26:59 +0200
>I have a such problem.
>I have samba 3 as a PDC with ldap as a authentication backend.
>When I use script "smbldap-passwd user", samba password and unix
password
>is changing correct, but when i use Ctr+Alt+Del from windows computer samba
>is changing corectly its password, and I see that unix password is also
>changing but I cannot to log to system with that unix password.
>Somebody knows why?
>
>part of smb.conf
>
>ldap password sync = Yes
>#unix password sync = Yes
>passwd program = /usr/sbin/smbldap-passwd -u %u
>update encrypted = yes
>encrypt passwords = yes
>
>
>smbldap.conf
>
>hash_encrypt="CRYPT"
>crypt_salt_format="%s"
>
>Thanks in advance
>luk
_________________________________________________________________
Advertisement: Its simple! Sell your car for just $30 at carsales.com.au
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801577%2Fpi%5F1005244%2Fai%5F838588&_t=762955845&_r=tig_may07&_m=EXT