search for: dpapi

Is there a corresponding bug number for the Samba bugzilla so that I can track when this is fixed for vanilla samba? On 26 November 2014 at 20:01, Andrew Bartlett <abartlet at samba.org> wrote: > On Mon, 2014-11-24 at 11:35 +0100, Roberto Su?rez Soto wrote: > > > > Error verifying signature: parse > > error > > --------------ms020506010503000409040509 > >

For anybody interested in tracking when this is resolved for mainline samba4 there is now a bugzilla record here: https://bugzilla.samba.org/show_bug.cgi?id=10980 On 2 December 2014 at 11:52, Kirin van der Veer < kirin.vanderveer at planetinnovation.com.au> wrote: > Is there a corresponding bug number for the Samba bugzilla so that I can > track when this is fixed for vanilla samba?

...Users/howarth/xplor-nih-2.27/vmd/ -I/Users/howarth/xplor-nih-2.27/arch/Darwin_11_x86_64/include -I/Users/howarth/xplor-nih-2.27/CDSlib -I/Users/howarth/xplor-nih-2.27/common de-g++46 -dynamiclib -fdefault-integer-8 -O3 -ffast-math -funroll-loops -g -flat_namespace -undefined suppress -single_module dpApi.o vmd.o vmdInter.o tclStream.o dpStream.o ssStream.o publicVMDInter.o thread.o -o libvmd.dylib -lcrypto collect2: ld terminated with signal 11 [Segmentation fault: 11] make[2]: *** [libvmd.dylib] Error 1 make[1]: *** [lib] Error 2 make: *** [vmd] Error 2 at /usr/bin/ld -dynamic -dylib -arch x8...

After a user changes their password (CTRL-ALT-DEL) in our Samba 4 domain (4.1.12) they lose access to any stored passwords on their Windows PC. I've set the log level in smb.conf to 4 and enabled the GPO to record DPAPI log entries in Windows to get the below log data. My reading of the two is that the Windows PC believes it is failing to reset the access to its DPAPI store (where the saved passwords are kept) - hence the repitition in the samba log and the Windows event log as the client tries over-and-over agai...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...

...Samba AD will rotate expired passwords on smartcard-required accounts --------------------------------------------------------------------- Traditionally in AD, accounts set to be "smart card require for logon" will have a password for NTLM fallback and local profile encryption (Windows DPAPI). This password previously would not expire. Matching Windows behaviour, when the DC in a FL 2016 domain and the msDS-ExpirePasswordsOnSmartCardOnlyAccounts attribute on the domain root is set to TRUE, Samba will now expire these passwords and rotate them shortly before they expire. Note that the...