empirium
2007-May-24 10:23 UTC
[Samba] problem with synchronize samba and unix password - ldap
I have a such problem. I have samba 3 as a PDC with ldap as a authentication backend. When I use script "smbldap-passwd user", samba password and unix password is changing correct, but when i use Ctr+Alt+Del from windows computer samba is changing corectly its password, and I see that unix password is also changing but I cannot to log to system with that unix password. Somebody knows why? part of smb.conf ldap password sync = Yes #unix password sync = Yes passwd program = /usr/sbin/smbldap-passwd -u %u update encrypted = yes encrypt passwords = yes smbldap.conf hash_encrypt="CRYPT" crypt_salt_format="%s" Thanks in advance luk
adrian sender
2007-May-24 23:18 UTC
[Samba] problem with synchronize samba and unix password - ldap
It could be a problem with you slapd.conf & ACL's, you need something like this: access to attrs=userPassword by self write by dn="cn=Manager,dc=domainname,dc=com" write by * auth access to attrs=sambaLMPassword,sambaNTPassword by dn="cn=Manager,dc=domainname,dc=com" write access to * by dn="cn=Manager,dc=domainname,dc=com" write by * read Samba needs access to this, replace "Manager" with the bind dn that samba uses to bind to the ldap database. Cheers, Adrian Sender.>From: empirium <empirium@o2.pl> >To: samba@lists.samba.org >Subject: [Samba] problem with synchronize samba and unix password - ldap >Date: Thu, 24 May 2007 12:26:59 +0200 >I have a such problem. >I have samba 3 as a PDC with ldap as a authentication backend. >When I use script "smbldap-passwd user", samba password and unix password >is changing correct, but when i use Ctr+Alt+Del from windows computer samba >is changing corectly its password, and I see that unix password is also >changing but I cannot to log to system with that unix password. >Somebody knows why? > >part of smb.conf > >ldap password sync = Yes >#unix password sync = Yes >passwd program = /usr/sbin/smbldap-passwd -u %u >update encrypted = yes >encrypt passwords = yes > > >smbldap.conf > >hash_encrypt="CRYPT" >crypt_salt_format="%s" > >Thanks in advance >luk_________________________________________________________________ Advertisement: Its simple! Sell your car for just $30 at carsales.com.au http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801577%2Fpi%5F1005244%2Fai%5F838588&_t=762955845&_r=tig_may07&_m=EXT