search for: 2fvar

...;>>> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>>>>>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > >>>>>>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > >>>>>> Don't use ldap-utils, use ldb-tools and the machine password: > >>>>>> > >>>>>> sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap > >>>>>> > >>...

...owland penny via samba <samba at lists.samba.org>: > On 15/07/2020 13:36, RhineDevil via samba wrote: > > How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > > (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > > Don't use ldap-utils, use ldb-tools and the machine password: > > sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap > > Rowland "ldap client internal error NT_STATUS_UNSUCCESFUL" -------------- next part -----...

...t;samba at lists.samba.org>: > >> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > >>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > >> Don't use ldap-utils, use ldb-tools and the machine password: > >> > >> sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap > >> > >> Rowland > > "ldap client internal error NT_STATUS_UN...

...rg>: > >>>> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>>>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > >>>>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > >>>> Don't use ldap-utils, use ldb-tools and the machine password: > >>>> > >>>> sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap > >>>> > >>>> Rowland > >>&g...

...dapi (IPC) verses ldap (IP). This should theoretically much faster. My LDAP master is on the same host as the Samba PDC. With nss_ldap using "uri ldap://localhost" and Samba using "ldapsam:ldap://localhost/" everything works. But changing nss_ldap to use "uri ldapi://%2fvar%2frun%2fldapi/" breaks Samba. Commands like "ls", "finger", and "id" continue to be able to identify users, but Samba starts reporting "no such user" errors. Leaving nss_ldap using "ldap://localhost/" and changing ldapsam to be "ldapi://...

How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 833 bytes Desc: Firma digitale OpenPGP URL: <http://lists.samba.org/pipermail/samba/attachments/20200715/567e0016/attachment.si...

...modify entry for user adam. Failed to modify password entry for user adam This changes the Samba password but fails to change the user's userPassword (LDAP sync) password. But I can "manually" change the password using the DC's bind DN and password: # ldappasswd -S -H ldapi://%2fvar%2frun%2fldap2.4%2fldapi -vvvvvvvvv -x -W -D "uid=CIFSDC,ou=System,ou=Entities,ou=SAM,o=Morrison Industries,c=US" "cn=Adam Williams,ou=People,ou=Entities,ou=SAM,o=Morrison Industries,c=US" New password: Re-enter new password: Enter LDAP Password: ldap_initialize( ldapi://%...

...o consult samba ldap database without authentication. I've set up 2 machines, the first as PDC, the second as BDC. I run my scripts on both and while they run fine on the PDC they end with error on the BDC. Here is the minimal example that behave this way: import ldap LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" l = ldap.initialize(LDAP_URI, trace_level=1) entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) print(entries) it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation unavailable without authentication', &...

...t lists.samba.org>: >>>> On 15/07/2020 13:36, RhineDevil via samba wrote: >>>>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? >>>>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) >>>> Don't use ldap-utils, use ldb-tools and the machine password: >>>> >>>> sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap >>>> >>>> Rowland >>> "ldap client internal...

...gt;>>>>> On 15/07/2020 13:36, RhineDevil via samba wrote: >>>>>>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? >>>>>>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) >>>>>> Don't use ldap-utils, use ldb-tools and the machine password: >>>>>> >>>>>> sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap >>>>>> >>>>>> Rowland...

...I've set up 2 machines, the first as PDC, the second as BDC. >> I run my scripts on both and while they run fine on the PDC they end >> with error on the BDC. >> Here is the minimal example that behave this way: >> >> import ldap >> LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >> >> l = ldap.initialize(LDAP_URI, trace_level=1) >> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >> print(entries) >> >> it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020:...

...h"). Just setting LDB_MODULES_PATH to the directory containing it makes named start: export LDB_MODULES_PATH=/usr/lib/samba/ldb/ named -u named -> startup complete So it wasn't my first suspect "ldap uri": ldapi:///var/lib/samba4/private/ldap_priv/ldapi ldapi://%2Fvar%2Flib%2Fsamba4%2Fprivate%2Fldap_priv%2Fldapi This leaves me with the task to finally get some DNS entries into the samba database :-) Bye, Marcel

...that is just the short hostname in >> uppercase. If you are referring to the netbios domain name (aka >> workgroup) then you can find this with wbinfo: >> >> wbinfo --own-domain >> >> Rowland >> > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=Sys...

...out authentication. > I've set up 2 machines, the first as PDC, the second as BDC. > I run my scripts on both and while they run fine on the PDC they end > with error on the BDC. > Here is the minimal example that behave this way: > > import ldap > LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" > > l = ldap.initialize(LDAP_URI, trace_level=1) > entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) > print(entries) > > it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation > unavailab...

Is it possible tu specify a LDAP URL like ldapi://%2fvar%2frun%2fldapi/ in the dovecot-ldap.conf file instead host:port? Best regards -- ___________________________________________________________________ Ing. PAOLO BASENGHI :::: Systems & Networking Engineer p.basenghi (at) netribe.it ??????????????????????????????????????????????????????????...

...f you are referring to the netbios domain name (aka >>>> workgroup) then you can find this with wbinfo: >>>> >>>> wbinfo --own-domain >>>> >>>> Rowland >>>> >>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>> >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=Rp...

...>>>> I run my scripts on both and while they run fine on the PDC they end >>>> with error on the BDC. >>>> Here is the minimal example that behave this way: >>>> >>>> import ldap >>>> LDAP_URI = >>>> "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >>>> >>>> l = ldap.initialize(LDAP_URI, trace_level=1) >>>> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >>>> print(entries) >>>> >>>> it ends with: ldap.OP...

...interfaces = lo0, em1 security = user enable privileges = yes username map = /usr/local/etc/smbusers.map log file = /var/log/samba/smb.log debug uid = Yes domain logons = Yes os level = 255 preferred master = Yes domain master = Yes passdb backend = ldapsam:ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap admin dn = cn=samba,ou=serviceAccounts,o=myorg ldap suffix = o=myorg ldap machine suffix = ou=computers ldap user suffix = ou=users ldap group suffix = ou=groups [Public] path = /export/public/%G read only = No create mask = 0755 directo...

Hello, I have a small test network with a Win2k8R2 DC. I've added a samba4 as second DC in this network. The join seems to run smoothly. But, after the join, this command: ldapsearch -LLL -x -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b "dc=test,dc=dom" "(SAMAccountName=Administrateur)" returns some strange results: ? some attributes like unicodePwd and supplementalCredentials are missing ? lots of attributes are base64 encoded, example: ?description:: Q29tcH...

On 17/07/2020 19:31, RhineDevil via samba wrote: > And by that I mean, where are the dbs, what should I rm -rf? On Debian just remove /var/lib/samba and /var/cache/samba > By the way how do I obtain current machine netbios name? Depends on which netbios name, if you are referring to the one that is in smb.conf 'netbios name = ?????', that is just the short hostname in uppercase.