search for: f3adda9f

...; LDAP (`fAllowPasswordOperationsOverNonSecureConnection`). Above link talks about AD DS vs. AD LDS (where the latter refers to ldap, unclear what the first is). At the same that ldap must be over ssl/tls, as is mentioned here:https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f3adda9f-89e1-4340-a3f2-1f0a6249f1f8?redirectedfrom=MSDN. This also states: The special encoding required for updating the unicodePwd attribute is not used with the userPassword attribute; that is, Vpassword = V. The same restrictions on SSL/TLS- or SASL-protected connections are enforced. The password...

...ordOperationsOverNonSecureConnection`). > Above link talks about AD DS vs. AD LDS (where the latter refers to > ldap, unclear what the first is). At the same that ldap must be over > ssl/tls, as is mentioned > here:https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f3adda9f-89e1-4340-a3f2-1f0a6249f1f8?redirectedfrom=MSDN. > This also states: > > The special encoding required for updating the unicodePwd attribute is > not used with the userPassword attribute; that is, Vpassword = V. The > same restrictions on SSL/TLS- or SASL-protected connections ar...

...rNonSecureConnection`). >> Above link talks about AD DS vs. AD LDS (where the latter refers to >> ldap, unclear what the first is). At the same that ldap must be over >> ssl/tls, as is mentioned >> here:https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f3adda9f-89e1-4340-a3f2-1f0a6249f1f8?redirectedfrom=MSDN. >> This also states: >> >> The special encoding required for updating the unicodePwd attribute >> is not used with the userPassword attribute; that is, Vpassword = V. >> The same restrictions on SSL/TLS- or SASL-prote...

...would software like >> NextCloud expect one to be an alias of the other? > > I have no idea, something they do ? userPassword is not used by AD. What do you mean by "userPassword is not used by AD"? From https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f3adda9f-89e1-4340-a3f2-1f0a6249f1f8: "Active Directory supports modifying passwords on objects via the userPassword attribute" > >> >> I'm not expecting any concrete answers, but it's the state my search >> is in. > > It might help us to see just what is g...

On Mon, 28 Oct 2024 12:17:02 +0100 William David Edwards via samba <samba at lists.samba.org> wrote: > I think I might've found a solution while debugging. > > To understand what I'm doing wrong with `unicodePwd`, I'm trying to > get the LDAP request that LAM does, and compare it to mine. > > As I temporarily switched to an unencrypted connection to be able

...tion`). >>> Above link talks about AD DS vs. AD LDS (where the latter refers to >>> ldap, unclear what the first is). At the same that ldap must be over >>> ssl/tls, as is mentioned >>> here:https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f3adda9f-89e1-4340-a3f2-1f0a6249f1f8?redirectedfrom=MSDN. >>> This also states: >>> >>> The special encoding required for updating the unicodePwd attribute >>> is not used with the userPassword attribute; that is, Vpassword = V. >>> The same restrictions on S...

Kees van Vloten via samba schreef op 2024-10-27 15:37: > Op 27-10-2024 om 15:31 schreef Rowland Penny via samba: >> On Sun, 27 Oct 2024 15:08:14 +0100 >> William Edwards <wedwards at cyberfusion.nl> wrote: >> >>>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba >>>> <samba at lists.samba.org> het volgende geschreven: >>>>