Matthew Delfino
2019-Mar-30 19:17 UTC
[Samba] Attempts to Set Max Password Age in Samba Tool Fails
Hey Rowland, Thanks for getting back to me. I just finished my recompile. I even ran a "samba-tool dbcheck --fix". I still I get this error: samba-tool domain passwordsettings set --max-pwd-age=270 ERROR(<class 'TypeError'>): uncaught exception - unorderable types: NoneType() >= int() File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 184, in _run return self.run(*args, **kwargs) File "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 1513, in run if max_pwd_age and max_pwd_age > 0 and min_pwd_age >= max_pwd_age: From: Rowland Penny via samba <samba at lists.samba.org> To: "samba at lists.samba.org" <samba at lists.samba.org> Sent: 3/30/2019 11:27 AM Subject: Re: [Samba] Attempts to Set Max Password Age in Samba Tool Fails On Sat, 30 Mar 2019 11:07:35 -0500 Matthew Delfino <mdelfino.list.samba at knockinc.com> wrote:> > What was your configure line ? > > > Assuming too much info is better than not enough, and hoping the > context might help, here's my *upgrade* process: > > > # cd /usr/local/src > > # wget > https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.gz (or > whatever new version is posted) # tar -zxf samba-4.10.0.tar.gz # rm > samba-4.10.0.tar.gz # ./configure --enable-fhs --prefix=/usr > --sysconfdir=/etc --localstatedir=/var --mandir=/usr/share/man/ > --enable-debug # make # sudo service samba-ad-dc stop > # sudo make install > # sudo shutdown -r now > > > This process has never failed me... Perhaps... until now?I have installed Ubuntu 18.04 (yes I know you are using 16.04) and I am trying to build 4.10.0, but I have just hit a problem, cmocka isn't new enough. Hmmm... What's the earliest version you know works?> When upgrading to 4.10.0, verbiage about moving to Python 3 in the > READ ME lead me to take the extra step of installing the packages > outlined on the samba wiki page entitled, > "Package_Dependencies_Required_to_Build_Samba," section, "Debian / > Ubuntu." Apropos to the comment you left below, note that this page > does not recommend the "python3-crypto" package.The problem is, 4.10.0 is the first version that requires python3, so the full list of required packages isn't really known, I guessed at python3-crypto because python2-crypto is required for the python2 build. On Ubuntu 18.04, python3-crypto is installed by default.> > > That's not me telling you that you're wrong because wiki page - I'm > not that kind of dude. I'm just calling out that, if you're right, > someone with Samba wiki editing powers would be a really cool if > s/he'd add it to the list. ;-)Once I know just what the dependencies are i.e. after I build Samba 4.10.0, I will ;-)> Okay. I just got that "python3-crypto" package on my DCs. I'm going > to start the long process of recompiling and reinstalling now to see > if that helps. I'm going to send this email before doing so in case > you're inclined to reply on the weekend with any insights from this > message. > > > I hope you're having a nice weekend. >I am :-) Rowland Matthew © 2019 KNOCK, inc. All rights reserved. KNOCK is a registered trademark of KNOCK, inc. This message and any attachments contain information, which is confidential and/or privileged. If you are not the intended recipient, please refrain from any disclosure, copying, distribution or use of this information. Please be aware that such actions are prohibited. If you have received this transmission in error, kindly notify the sender by e-mail. Your cooperation is appreciated.
Rowland Penny
2019-Mar-30 20:56 UTC
[Samba] Attempts to Set Max Password Age in Samba Tool Fails
On Sat, 30 Mar 2019 14:17:15 -0500 Matthew Delfino via samba <samba at lists.samba.org> wrote:> Hey Rowland, > > > Thanks for getting back to me. I just finished my recompile. I even > ran a "samba-tool dbcheck --fix". I still I get this error: > > > > samba-tool domain passwordsettings set --max-pwd-age=270 > ERROR(<class 'TypeError'>): uncaught exception - unorderable types: > NoneType() >= int() File > "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 184, > in _run return self.run(*args, **kwargs) File > "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 1513, > in run if max_pwd_age and max_pwd_age > 0 and min_pwd_age >> max_pwd_age: > >OK, I give in, how have you managed to build 4.10.0 on 16.04 ? I am trying to build it on 18.04 and so far I have had to build cmocka and now: ERROR: System library tdb of version 1.3.18 not found, and bundling disabled I get the feeling I will also have to build talloc, tevent etc Rowland
Tim Beale
2019-Mar-31 20:34 UTC
[Samba] Attempts to Set Max Password Age in Samba Tool Fails
Hi, I've raised a bug for this: https://bugzilla.samba.org/show_bug.cgi?id=13873 The problem is the command just doesn't work under Python 3. In the meantime, a work-around is to specify the --min-pwd-age on the command as well. E.g. samba-tool domain passwordsettings set --max-pwd-age=270 --min-pwd-age=default WARNING: The "server schannel" option is deprecated Minimum password age changed! Maximum password age changed! All changes applied successfully Cheers, Tim On 31/03/19 8:17 AM, Matthew Delfino via samba wrote:> Hey Rowland, > > > Thanks for getting back to me. I just finished my recompile. I even ran a "samba-tool dbcheck --fix". I still I get this error: > > > > samba-tool domain passwordsettings set --max-pwd-age=270 > ERROR(<class 'TypeError'>): uncaught exception - unorderable types: NoneType() >= int() > File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 184, in _run > return self.run(*args, **kwargs) > File "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 1513, in run > if max_pwd_age and max_pwd_age > 0 and min_pwd_age >= max_pwd_age: > > > From: Rowland Penny via samba <samba at lists.samba.org> > To: "samba at lists.samba.org" <samba at lists.samba.org> > Sent: 3/30/2019 11:27 AM > Subject: Re: [Samba] Attempts to Set Max Password Age in Samba Tool Fails > > On Sat, 30 Mar 2019 11:07:35 -0500 > Matthew Delfino <mdelfino.list.samba at knockinc.com> wrote: > > >> >> What was your configure line ? >> >> >> Assuming too much info is better than not enough, and hoping the >> context might help, here's my *upgrade* process: >> >> >> # cd /usr/local/src >> >> # wget >> https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.gz (or >> whatever new version is posted) # tar -zxf samba-4.10.0.tar.gz # rm >> samba-4.10.0.tar.gz # ./configure --enable-fhs --prefix=/usr >> --sysconfdir=/etc --localstatedir=/var --mandir=/usr/share/man/ >> --enable-debug # make # sudo service samba-ad-dc stop >> # sudo make install >> # sudo shutdown -r now >> >> >> This process has never failed me... Perhaps... until now? > > I have installed Ubuntu 18.04 (yes I know you are using 16.04) and I am > trying to build 4.10.0, but I have just hit a problem, cmocka isn't > new enough. > > > Hmmm... What's the earliest version you know works? > > > >> When upgrading to 4.10.0, verbiage about moving to Python 3 in the >> READ ME lead me to take the extra step of installing the packages >> outlined on the samba wiki page entitled, >> "Package_Dependencies_Required_to_Build_Samba," section, "Debian / >> Ubuntu." Apropos to the comment you left below, note that this page >> does not recommend the "python3-crypto" package. > > The problem is, 4.10.0 is the first version that requires python3, so > the full list of required packages isn't really known, I guessed at > python3-crypto because python2-crypto is required for the python2 > build. On Ubuntu 18.04, python3-crypto is installed by default. > >> >> >> That's not me telling you that you're wrong because wiki page - I'm >> not that kind of dude. I'm just calling out that, if you're right, >> someone with Samba wiki editing powers would be a really cool if >> s/he'd add it to the list. ;-) > > Once I know just what the dependencies are i.e. after I build Samba > 4.10.0, I will ;-) >> Okay. I just got that "python3-crypto" package on my DCs. I'm going >> to start the long process of recompiling and reinstalling now to see >> if that helps. I'm going to send this email before doing so in case >> you're inclined to reply on the weekend with any insights from this >> message. >> >> >> I hope you're having a nice weekend. >> > > I am :-) > > Rowland > > > > Matthew > > © 2019 KNOCK, inc. All rights reserved. KNOCK is a registered trademark of KNOCK, inc. This message and any attachments contain information, which is confidential and/or privileged. If you are not the intended recipient, please refrain from any disclosure, copying, distribution or use of this information. Please be aware that such actions are prohibited. If you have received this transmission in error, kindly notify the sender by e-mail. Your cooperation is appreciated.
Matthew Delfino
2019-Apr-01 04:09 UTC
[Samba] Attempts to Set Max Password Age in Samba Tool Fails
Thank you, Tim! This worked and it saved my butt. # samba-tool domain passwordsettings set --max-pwd-age=270 --min-pwd-age=default Minimum password age changed! Maximum password age changed! All changes applied successfully! # samba-tool domain passwordsettings show Password informations for domain 'DC=samdom,DC=domain,DC=com' Password complexity: on Store plaintext passwords: off Password history length: 5 Minimum password length: 14 Minimum password age (days): 1 Maximum password age (days): 270 Account lockout duration (mins): 60 Account lockout threshold (attempts): 30 Reset account lockout after (mins): 60 I'm back in business. From: Tim Beale via samba <samba at lists.samba.org> To: Matthew Delfino <mdelfino.list.samba at knockinc.com>, "samba at lists.samba.org" <samba at lists.samba.org> Sent: 3/31/2019 3:34 PM Subject: Re: [Samba] Attempts to Set Max Password Age in Samba Tool Fails Hi, I've raised a bug for this: https://bugzilla.samba.org/show_bug.cgi?id=13873 The problem is the command just doesn't work under Python 3. In the meantime, a work-around is to specify the --min-pwd-age on the command as well. E.g. samba-tool domain passwordsettings set --max-pwd-age=270 --min-pwd-age=default WARNING: The "server schannel" option is deprecated Minimum password age changed! Maximum password age changed! All changes applied successfully Cheers, Tim On 31/03/19 8:17 AM, Matthew Delfino via samba wrote:> Hey Rowland, > > > Thanks for getting back to me. I just finished my recompile. I even ran a "samba-tool dbcheck --fix". I still I get this error: > > > > samba-tool domain passwordsettings set --max-pwd-age=270 > ERROR(<class 'TypeError'>): uncaught exception - unorderable types: NoneType() >= int() > File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 184, in _run > return self.run(*args, **kwargs) > File "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 1513, in run > if max_pwd_age and max_pwd_age > 0 and min_pwd_age >= max_pwd_age: > > > From: Rowland Penny via samba <samba at lists.samba.org> > To: "samba at lists.samba.org" <samba at lists.samba.org> > Sent: 3/30/2019 11:27 AM > Subject: Re: [Samba] Attempts to Set Max Password Age in Samba Tool Fails > > On Sat, 30 Mar 2019 11:07:35 -0500 > Matthew Delfino <mdelfino.list.samba at knockinc.com> wrote: > > >> >> What was your configure line ? >> >> >> Assuming too much info is better than not enough, and hoping the >> context might help, here's my *upgrade* process: >> >> >> # cd /usr/local/src >> >> # wget >> https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.gz (or >> whatever new version is posted) # tar -zxf samba-4.10.0.tar.gz # rm >> samba-4.10.0.tar.gz # ./configure --enable-fhs --prefix=/usr >> --sysconfdir=/etc --localstatedir=/var --mandir=/usr/share/man/ >> --enable-debug # make # sudo service samba-ad-dc stop >> # sudo make install >> # sudo shutdown -r now >> >> >> This process has never failed me... Perhaps... until now? > > I have installed Ubuntu 18.04 (yes I know you are using 16.04) and I am > trying to build 4.10.0, but I have just hit a problem, cmocka isn't > new enough. > > > Hmmm... What's the earliest version you know works? > > > >> When upgrading to 4.10.0, verbiage about moving to Python 3 in the >> READ ME lead me to take the extra step of installing the packages >> outlined on the samba wiki page entitled, >> "Package_Dependencies_Required_to_Build_Samba," section, "Debian / >> Ubuntu." Apropos to the comment you left below, note that this page >> does not recommend the "python3-crypto" package. > > The problem is, 4.10.0 is the first version that requires python3, so > the full list of required packages isn't really known, I guessed at > python3-crypto because python2-crypto is required for the python2 > build. On Ubuntu 18.04, python3-crypto is installed by default. > >> >> >> That's not me telling you that you're wrong because wiki page - I'm >> not that kind of dude. I'm just calling out that, if you're right, >> someone with Samba wiki editing powers would be a really cool if >> s/he'd add it to the list. ;-) > > Once I know just what the dependencies are i.e. after I build Samba > 4.10.0, I will ;-) >> Okay. I just got that "python3-crypto" package on my DCs. I'm going >> to start the long process of recompiling and reinstalling now to see >> if that helps. I'm going to send this email before doing so in case >> you're inclined to reply on the weekend with any insights from this >> message. >> >> >> I hope you're having a nice weekend. >> > > I am :-) > > Rowland > > > > Matthew > > © 2019 KNOCK, inc. All rights reserved. KNOCK is a registered trademark of KNOCK, inc. This message and any attachments contain information, which is confidential and/or privileged. If you are not the intended recipient, please refrain from any disclosure, copying, distribution or use of this information. Please be aware that such actions are prohibited. If you have received this transmission in error, kindly notify the sender by e-mail. Your cooperation is appreciated.-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba © 2019 KNOCK, inc. All rights reserved. KNOCK is a registered trademark of KNOCK, inc. This message and any attachments contain information, which is confidential and/or privileged. If you are not the intended recipient, please refrain from any disclosure, copying, distribution or use of this information. Please be aware that such actions are prohibited. If you have received this transmission in error, kindly notify the sender by e-mail. Your cooperation is appreciated.