search for: basedns

hi, I have to activate the thread again ... we keep having preformance problems on the DC, especially on Monday morning when the PCs are switched on and the users log in. some ldap-searches take a very long time, sometimes even over 15 seconds e.g: ldapsrv_SearchRequest: LDAP Query: Duration was 15.74s, SearchRequest by S-1-5-21-xxxxxxxxxx-xxxxxxxxxxxxxx-8585 from ipv4:192.168.35.117:49240

On Mon, 2022-09-19 at 14:04 +0000, Heinz H?lzl via samba wrote: > hello, > I often have the problem of high load on the LDAP processes. > 1-3 LDAP processes cause 100% cpu load for approx. 10 sec. This > happens > regularly in intervals of 2-3 minutes. > How can I find out which client is causing this load and why? > How can I configure the logging to see who/what is causing

On Wed, 8 Feb 2017 18:32:15 +0100 Ole Traupe via samba <samba at lists.samba.org> wrote: > That was weird: didn't see (expect) there to be a discussion right on > the same topic going on at this very moment. > > Ole > > > On 08.02.2017 17:37, Ole Traupe via samba wrote: > > Hi list, > > > > long time no see! :) > > > > I was looking

Hi list, long time no see! :) I was looking for an email reminder script for users whose password will expire. Some of our users are on long travels and will never see the Domain's default notification. I haven't found any complete (and simple) solution online. So I wrote one. In case it helps anyone, you find it below. You should only have to fill in the blanks for the the

Hi, I try to switch from internal DNS to bind9 on an samba-ad-dc (sernet 4.1.23 on debian wheezy). I try to run samba_upgradedns --dns-backend=BIND9_DLZ and get an python error pointing to /usr/lib/python2.7/dist-packages/samba/provision/__init__.py line 271 Reading domain information Traceback (most recent call last): File "/usr/sbin/samba_upgradedns", line 261, in

Hello. If you want. I have already implemented something like this : ############################### # get user rfc2307 attributes # ############################### # get the new uid # userUid=$(s4ldbsearch -H $samDatabase -s base -b CN=$shortDomain,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,$baseDN msSFU30MaxUidNumber | grep 'msSFU30MaxUidNumber:') if [ -z "$userUid"

On 13/11/15 07:00, Achim Gottinger wrote: > > > Am 13.11.2015 um 07:11 schrieb Achim Gottinger: >> Hi, >> >> I try to switch from internal DNS to bind9 on an samba-ad-dc (sernet >> 4.1.23 on debian wheezy). >> I try to run >> >> samba_upgradedns --dns-backend=BIND9_DLZ >> >> and get an python error pointing to >>

Hi ! I'm running a samba domain controler under rhel 5. It's version 3.0.33-3.7.el5. I've also installed a ldap server to store users and groups and so on. When I try a pdbedit -v david, I get the following : Unix username: david NT username: david Account Flags: [U ] User SID: S-1-5-21-215069222-2822928016-2390355089-1016 Finding user

That was weird: didn't see (expect) there to be a discussion right on the same topic going on at this very moment. Ole On 08.02.2017 17:37, Ole Traupe via samba wrote: > Hi list, > > long time no see! :) > > I was looking for an email reminder script for users whose password > will expire. Some of our users are on long travels and will never see > the Domain's

Exactly, and got reminded that I don't have to grep anything but can ask for specific parameters. Been a while that I used ldbsearch. ;) Ole On 08.02.2017 18:46, Rowland Penny via samba wrote: > On Wed, 8 Feb 2017 18:32:15 +0100 > Ole Traupe via samba <samba at lists.samba.org> wrote: > >> That was weird: didn't see (expect) there to be a discussion right on

Hi, We are tying to integrate NextCloud like applications with Samba-AD for authentication purposes. We are receiving the error message, "Cannot Connect to Active Directory". The settings used for establishing connection are as follows: Server Name : dc.example.com UserDN : CN=Administrator,CN=Users,DC=example,DC=com Password = ************ BaseDN = DC=example,DC=com. NextCloud

Right now, I have all of my Samba stuff under ou=corp,dc=mycompany,dc=com. I have it this way because there used to also be ou=furn,dc=mycompany,dc=com with a different domain. Now that I only have one domain, I would like to move everything to dc=mycompany,dc=com. So I copy all of the subentries of ou=corp (ou=computers, ou=people, ou=grooups, and the sambaDomainName entries) to

On Wed, 27 Mar 2019 13:00:42 +0100 Franta Hanzlík <franta at hanzlici.cz> wrote: > Yes, is no difference between '-UAdministrator' and '-U > Administrator'. But it seems, as ldbsearch in 4.9.5 is different than > 4.9.4-. (I was furious with that, because I found lot articles on > net, where -U _username_ was stated. > > My ldbsearch is from pure

On Wed, 30 May 2018 10:33:55 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > So, in AD LDAP lingo, a 'modify' is not atomic, and a 'delete/add' > > > yes? > > Ahem, i meant: > > So, in AD LDAP lingo, a 'replace' is not atomic, and a

Mandi! Rowland penny via samba In chel di` si favelave... > If you go here: http://www.selfadsi.org/extended-ad/user-unlock.htm > It says: So, seems to me that 'Lockout-Duration' is an 'unused option'... -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via

Good afternoon, I've this issue: I have followed the instructions in this thread but, when I try to add quota.ldif I receive this error: Unable to find attribute quota in the schema ERR: (Invalid attribute syntax) "objectclass_attrs: attribute 'mayContain' on entry 'CN=systemQuotas,CN=Schema,CN=Configuration,DC=my_domain,DC=it' contains at least one invalid

Hi, Having set up a few Samba-ldap installations, I always end up with the feeling that OpenLDAP ACLs is what took time. The following patches / scripts might help someone else. I would appreciate some input on the access.conf.pl file so that it is even better tuned. Mr Tournier and the sambateam: Please include the files you find usefull. The attached files are: slapd.conf.pl : A simple

Hi, Ive been trying to work out how to get wbinfo to list members of a specific AD group, rather than list groups a specific user is in. So far I have had no luck... In fact im not sure its possible with wbinfo. Is there another tool which could do this? James -- Sent using Dekko from my Ubuntu device

On 21/08/2020 21:40, vincent at cojot.name wrote: > On Fri, 21 Aug 2020, Rowland penny via samba wrote: > >> This works for me: >> >> rowland at devstation:~$ sudo ldapsearch -H >> ldaps://dc01.samdom.example.com -D 'SAMDOM\Administrator' -w >> 'xxxxxxxxxx' -b 'dc=samdom,dc=example,dc=com' >>

Mandi! Rowland penny via samba In chel di` si favelave... I came back on this, because still some glitches happen. Yesterday I'm locked out. 'pdbedit -vL gaio' say me that account IS locked. But: > yes, Provided you use the right attribute to search on ;-) > Something like this will give you if/when the account was locked out: > ldbsearch -H