samba - Sep 2018 - Synchronizing passwords to Samba 4

Thank you.

"syncpasswords" seems useful to push passwords from Samba to
something.

I need to do it the other way : push passwords from OpenLDAP to Samba.

--
Sébastien BEAUDLOT
Université d'Avignon et des Pays de Vaucluse
--

----- Mail original -----
De: "samba" <samba at lists.samba.org>
À: "samba" <samba at lists.samba.org>
Envoyé: Jeudi 27 Septembre 2018 13:05:41
Objet: Re: [Samba] Synchronizing passwords to Samba 4

On Thu, 27 Sep 2018 12:30:38 +0200 (CEST)
Sebastien BEAUDLOT via samba <samba at lists.samba.org> wrote:
> Hi, 
> 
> I'm trying to synchronize user accounts from LDAP to Samba 4 AD
> (using LSC) but it seems that password update through ldap is not
> allowed. 
> 
> I failed to find details about it, but can someone confirm that
> unicodePwd cannot be read / wrote trough a LDAPS connection ? Is
> there any workaround ? 
> 
> Regards. 
> 
No you cannot read the unicode password over the wire, but there is
always samba-tool ;-)

read 'samba-tool user syncpasswords --help'

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Thu, 27 Sep 2018 14:23:58 +0200 (CEST)
Sebastien BEAUDLOT via samba <samba at lists.samba.org> wrote:
> 
> Thank you.
> 
> "syncpasswords" seems useful to push passwords from Samba to
> something. 
> 
> I need to do it the other way : push passwords from OpenLDAP to Samba.
> 
Why ?
why not do the obvious thing and add your users to Samba AD and
configure your other programs to use AD instead of ldap.

What programs do you have that you are using ldap for ?

Rowland

On Thu, 27 Sep 2018 16:50:52 +0200 (CEST)
Sebastien BEAUDLOT <sebastien.beaudlot at univ-avignon.fr> wrote:
> 
> Our LDAP is used by too many programs and websites. Too much manpower
> to change anything in it. Samba AD will be used only to authenticate
> Windows clients.
OK, your loss, but if all you want to do is change the AD users
password and you have access to the users password, then there is
always 'samba-tool user setpassword'

Rowland