search for: dchostname

I think the tool should act consistently. I.e., it can cope with automatically provisioned groups - when they exist in imported domain too, it simply displays a warning "group already exists" and goes on. I think this is the right behaviour that should apply to users too. Peter Dňa 01.11.2015 o 19:54 Rowland Penny napísal(a): > On 01/11/15 18:30, Andrew Bartlett wrote: >> On

...; status is. With respect to this command, would the full syntax be: > > samba-tool user password -U <myuser> --ipaddress=192.168.0.2 > > I've tried that with no syntax error, but haven't pulled the trigger > yet to change the password. I've also tried --ipaddress=dchostname > which also did not give a syntax error. Never tried it with the hostname, but I think the option name gives a big hint ;-) > > Are you reading 'msDS-UserPasswordExpiryTimeComputed' with the > > ldbsearch below ? If so, is the result actually '89' are you using &gt...

...nd authenticate, can I check the status of the integration in any way? Some error messages I was able to find: [2017/03/18 15:33:21.544063, 0] auth/auth_domain.c:331(domain_client_validate) domain_client_validate: unable to validate password for user USERX in domain DOMAINX to Domain controller DCHOSTNAME. Error was NT_STATUS_ACCESS_DENIED. [2017/03/18 15:33:21.554733, 0] rpc_client/cli_netlogon.c:459(rpccli_netlogon_sam_network_logon) rpccli_netlogon_sam_network_logon: credentials chain check failed [2017/03/18 15:33:21.554814, 0] auth/auth_domain.c:331(domain_client_validate) domain_client_v...

On Fri, 30 Mar 2018 20:19:02 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > > On Wed, 28 Mar 2018 20:14:00 +1300 Andrew Bartlett > > <abartlet at samba.org> wrote: > > > > > > On Wed, 2018-03-28 at 03:09 -0400, Mark Foley via samba wrote: > > > > > > > > Actually, that didn't quite work. It did change the

...be: > > > > > > samba-tool user password -U <myuser> --ipaddress=192.168.0.2 > > > > > > I've tried that with no syntax error, but haven't pulled the > > > trigger yet to change the password. I've also tried > > > --ipaddress=dchostname which also did not give a syntax error. > > > > Never tried it with the hostname, but I think the option name gives > > a big hint ;-) > > > > > > Are you reading 'msDS-UserPasswordExpiryTimeComputed' with the > > > > ldbsearch below ? If so,...

...added. Part of this provisioning is the creation of the default AD users and groups. There are only 3 or possibly 4 users created, depending on whether you are using bind9 or not. The standard users are 'Administrator', 'krbtgt' and 'Guest', the optional user is 'dns-DCHOSTNAME'. The user 'Administrator' is dealt with by the classicupgrade, but the others are ignored, probably because it wasn't thought that anybody would have these users in their Samba database. This could be thought of as a bug or as a lack of documentation, or quite possibly both....

...his provisioning is > the creation of the default AD users and groups. There are only 3 or > possibly 4 users created, depending on whether you are using bind9 or > not. The standard users are 'Administrator', 'krbtgt' and 'Guest', the > optional user is 'dns-DCHOSTNAME'. The user 'Administrator' is dealt > with by the classicupgrade, but the others are ignored, probably > because it wasn't thought that anybody would have these users in their > Samba database. > This could be thought of as a bug or as a lack of documentation, or > qu...

...have has this setup for serveral months. Now if I connect to a windows computer I get access denied and it still works on linux via PBIS. If I login to the windows computer with a local account, I can "Run-As" as the Domain account, but I cannot join a computer to the domain. If I type DCHostname\domainaccount it will work on some screens. Even stranger I can still open DNS manager and Active Directory manger from a joined Windows Server. Also the port 445 samba shares are still available. It's like the Domain name has been updated with the dccompuername in some configuration, but th...

...to this command, would the full syntax be: > > > > samba-tool user password -U <myuser> --ipaddress=192.168.0.2 > > > > I've tried that with no syntax error, but haven't pulled the trigger > > yet to change the password. I've also tried --ipaddress=dchostname > > which also did not give a syntax error. > > Never tried it with the hostname, but I think the option name gives a > big hint ;-) > > > > Are you reading 'msDS-UserPasswordExpiryTimeComputed' with the > > > ldbsearch below ? If so, is the result actual...

...the user's expiration status is. With respect to this command, would the full syntax be: samba-tool user password -U <myuser> --ipaddress=192.168.0.2 I've tried that with no syntax error, but haven't pulled the trigger yet to change the password. I've also tried --ipaddress=dchostname which also did not give a syntax error. > > I did successfully change my domain password with kpasswd. I was > > able to log into Linux and Windows workstations, Dovecot client, and > > a web site which uses ntml_auth. I checked the > > msDS-UserPasswordExpiryTimeComputed...

...> > > samba-tool user password -U <myuser> --ipaddress=192.168.0.2 > > > > > > > > I've tried that with no syntax error, but haven't pulled the > > > > trigger yet to change the password. I've also tried > > > > --ipaddress=dchostname which also did not give a syntax error. > > > > > > Never tried it with the hostname, but I think the option name gives > > > a big hint ;-) > > > > > > > > Are you reading 'msDS-UserPasswordExpiryTimeComputed' with the > > > >...