search for: _user_pw

Hi all I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50))

Hi, Thank you for this answer, unfortunately I was not able to re-hash password as they are hashed into LDB database. First I retrieved the hash: ldbsearch -H $sam '(cn=some user)' unicodePwd # record 1 dn: CN=some user,OU=Users Management,DC=ad,DC=example,DC=com unicodePwd:: COwwLgiqqaHRyhy4HxWp4A== This "unicodePwd" attribute comes from a quick search into "user"

...10023 gidNumber: 10007 loginShell: /bin/false unixHomeDirectory: /home/User3 unixUserPassword: ABCD!efgh12345$67890 dn: CN=User3,CN=Users,DC=example,DC=com changetype: modify replace: unicodePwd unicodePwd::$UNICODEPWD" To get $UNICODEPWD, I would do this: UNICODEPWD=$(echo -n "\"$_USER_PW\"" | $_ICONV -f UTF-8 -t UTF-16LE | $_BASE64 -w 0) As you can see the required ldif is different from yours and I told you this over on the samba-technical mailing list. The easiest way for you to add the users will be to write a script that will parse your ldif, using it to obtain t...

...t; To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> Ah but what goes in is not necessarily what you think! I have a bash script to create a user, it has this line: UNICODEPWD=$(echo -n "\"$_USER_PW\"" | iconv -f UTF-8 -t UTF-16LE | base64 -w 0) The user is then created from a ldif and at the bottom of the ldif is this: $_DN changetype: modify replace: unicodePwd unicodePwd::$UNICODEPWD" The whole idea is that it is very difficult to decode the AD users password, on a windo...

I am using AD DC. I already have a domain Samba3 + Openladp, I'm creating this new domain Samba4, but I want to import all users who have already registered in my base Openldap. If it was the same demesne I would use the migration tool, but it's a different domain. -- View this message in context:

Hai, just make a CSV file and import your users. this is the script i used. #!/bin/bash ## example ## display naam in AD wil be : Louis van Belle ( cat /home/samba/backup/users.csv | awk -F ";" '{system("/usr/bin/samba-tool user add "$5" --mail-address="$7" \ --given-name="$4" --surname=\""$3"\"