search for: 2fldap_priv

...without authentication. I've set up 2 machines, the first as PDC, the second as BDC. I run my scripts on both and while they run fine on the PDC they end with error on the BDC. Here is the minimal example that behave this way: import ldap LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" l = ldap.initialize(LDAP_URI, trace_level=1) entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) print(entries) it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation unavailable without authentication', 'desc': 'Operations error...

...he first as PDC, the second as BDC. >> I run my scripts on both and while they run fine on the PDC they end >> with error on the BDC. >> Here is the minimal example that behave this way: >> >> import ldap >> LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >> >> l = ldap.initialize(LDAP_URI, trace_level=1) >> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >> print(entries) >> >> it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation >> unavailable witho...

...LES_PATH to the directory containing it makes named start: export LDB_MODULES_PATH=/usr/lib/samba/ldb/ named -u named -> startup complete So it wasn't my first suspect "ldap uri": ldapi:///var/lib/samba4/private/ldap_priv/ldapi ldapi://%2Fvar%2Flib%2Fsamba4%2Fprivate%2Fldap_priv%2Fldapi This leaves me with the task to finally get some DNS entries into the samba database :-) Bye, Marcel

...e in >> uppercase. If you are referring to the netbios domain name (aka >> workgroup) then you can find this with wbinfo: >> >> wbinfo --own-domain >> >> Rowland >> > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block be...

...;ve set up 2 machines, the first as PDC, the second as BDC. > I run my scripts on both and while they run fine on the PDC they end > with error on the BDC. > Here is the minimal example that behave this way: > > import ldap > LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" > > l = ldap.initialize(LDAP_URI, trace_level=1) > entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) > print(entries) > > it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation > unavailable without authentication', '...

...bios domain name (aka >>>> workgroup) then you can find this with wbinfo: >>>> >>>> wbinfo --own-domain >>>> >>>> Rowland >>>> >>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>> >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=m...

...ipts on both and while they run fine on the PDC they end >>>> with error on the BDC. >>>> Here is the minimal example that behave this way: >>>> >>>> import ldap >>>> LDAP_URI = >>>> "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >>>> >>>> l = ldap.initialize(LDAP_URI, trace_level=1) >>>> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >>>> print(entries) >>>> >>>> it ends with: ldap.OPERATIONS_ERROR: {'info': ...

Hello, I have a small test network with a Win2k8R2 DC. I've added a samba4 as second DC in this network. The join seems to run smoothly. But, after the join, this command: ldapsearch -LLL -x -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b "dc=test,dc=dom" "(SAMAccountName=Administrateur)" returns some strange results: ? some attributes like unicodePwd and supplementalCredentials are missing ? lots of attributes are base64 encoded, example: ?description:: Q29tcHRlIGTigJl1dGlsaXNhdGV1ciBk4oCZYWRtaW...

On 17/07/2020 19:31, RhineDevil via samba wrote: > And by that I mean, where are the dbs, what should I rm -rf? On Debian just remove /var/lib/samba and /var/cache/samba > By the way how do I obtain current machine netbios name? Depends on which netbios name, if you are referring to the one that is in smb.conf 'netbios name = ?????', that is just the short hostname in uppercase.

...) then you can find this with wbinfo: >>>>>> >>>>>> wbinfo --own-domain >>>>>> >>>>>> Rowland >>>>>> >>>>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>> >>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,...

...ond as BDC. >>> I run my scripts on both and while they run fine on the PDC they end >>> with error on the BDC. >>> Here is the minimal example that behave this way: >>> >>> import ldap >>> LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >>> >>> l = ldap.initialize(LDAP_URI, trace_level=1) >>> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >>> print(entries) >>> >>> it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation &g...

...t;>>>>> >>>>>>>> wbinfo --own-domain >>>>>>>> >>>>>>>> Rowland >>>>>>>> >>>>>>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>>>> >>>>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcSer...

...gt;>>>>> wbinfo --own-domain >>>>>>>>>> >>>>>>>>>> Rowland >>>>>>>>>> >>>>>>>>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>>>>>> >>>>>>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=yp...

...t;> >> I have a small test network with a Win2k8R2 DC. >> >> I've added a samba4 as second DC in this network. >> The join seems to run smoothly. >> >> But, after the join, this command: ldapsearch -LLL -x -H >> ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b >> "dc=test,dc=dom" "(SAMAccountName=Administrateur)" >> returns some strange results: >> ? some attributes like unicodePwd and supplementalCredentials are >> missing >> ? lots of attributes are base64 encoded, example: >> ?d...

...at is just the short hostname in > uppercase. If you are referring to the netbios domain name (aka > workgroup) then you can find this with wbinfo: > > wbinfo --own-domain > > Rowland > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line...

...referring to the netbios domain name (aka > >> workgroup) then you can find this with wbinfo: > >> > >> wbinfo --own-domain > >> > >> Rowland > >> > > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld a...

...>> workgroup) then you can find this with wbinfo: > >>>> > >>>> wbinfo --own-domain > >>>> > >>>> Rowland > >>>> > >>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > >>> > >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=myd...

.../ldap_priv/ldapi DNS SRV: Could not turn DN="var/lib/samba4/private/ldap_priv/ldapi" into a domain This didn't work - but by replacing "/" with "%2F" in the file path fixes the problem: > ldapsearch -U Administrator -H ldapi://%2Fvar%2Flib%2Fsamba4%2Fprivate%2Fldap_priv%2Fldapi Next step: source code: In the samba dlz code the first url format seems to be used, maybe that's the cause of this trouble. There's a config option "url" mentioned there, however I was unable to figure out how to use this option to override the path name. It'd be g...

...wbinfo: > >>>>>> > >>>>>> wbinfo --own-domain > >>>>>> > >>>>>> Rowland > >>>>>> > >>>>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > >>>>> > >>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,...

...s Morcillo wrote: > Hello, > > I have a small test network with a Win2k8R2 DC. > > I've added a samba4 as second DC in this network. > The join seems to run smoothly. > > But, after the join, this command: ldapsearch -LLL -x -H > ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b > "dc=test,dc=dom" "(SAMAccountName=Administrateur)" > returns some strange results: > ? some attributes like unicodePwd and supplementalCredentials are missing > ? lots of attributes are base64 encoded, example: > ?description:: Q29tcHRlIGTigJl1...