search for: garm

...sible encryption" to use my API. But I do not like this operation. I then use "http://ltb-project.org/wiki/documentation/self-service-password" with the " post hook" Your patch it allows you also to retrieve the user name ? Thank you verry much ! Le 10/06/2016 10:41, garming at catalyst.net.nz a écrit : > Currently the functionality is not implemented in active directory (I also > mistakenly thought it was, until I was corrected). Fortunately, I recently > implemented it as a result of someone else raising it. It is still lacking > some testing and needs...

Hello, Thanks for the feedback Garming!!! 👍 On Wed, Apr 17, 2019 at 12:35 AM Garming Sam <garming at catalyst.net.nz> wrote: > Hi, > > While I think we have most of the 2012 schema problems under control > now, there's still quite a bit of work to get the functional level > things working. In order to actua...

Le 10/06/2016 13:12, garming at catalyst.net.nz a écrit : > That sounds somewhat out of scope of the original parameter. A further parameter can he do this function ? > I would be > happy to explain how the patches could be modified to send the username > (possibly as the first argument to the script). It shou...

...script" could solve my problem. "http://ltb-project.org/wiki/documentation/self-service-password" with " post hook" solves my problem currently. I wish I use it like this : Check password script = /script/scriptpassword.sh %U I will also see what offers me the patch of Garming Sam. Simon https://blog.lesfourmisduweb.org Le 16/06/2016 19:48, Denis Cardon a écrit : > Hi Simon, > > Le 10/06/2016 11:12, blog at lesfourmisduweb.org a écrit : >> >> Yes it could be interesting. >> I want to use it to send the password has an API for other softw...

Thanks Rowland and Garming for your help!! How about "another DC", or 'a second DC' ? Ok. Got it! :D Alternatively, re-joining the domain controller (or joining a new DC and > demoting the old one) probably works because I believe there is code to > handle this case. I re-joined (remove secre...

Hi Yes, active directory Simon Le 10/06/2016 03:37, Garming Sam a écrit : > Hi, > > Are you running Samba active directory? > > > Cheers, > > Garming > > On 10/06/16 00:28, blog at lesfourmisduweb.org wrote: >> Hello >> >> I Can not run a "check password script" in smb.conf >> Somebody can y...

I have used SSHD from openssh-3.7.1p1 on HP-UX 11:11. It works correctly and the entry in the logfile is: Sep 24 07:01:20 garm sshd[6625]: Accepted password for japs from 192.38.97.131 port 2463 Next I have upgraded to openssh-3.7.1p2 and restarted SSHD. It does not accept the password any more and the entries in the logfile are: Sep 24 12:21:38 garm sshd[19542]: User japs not allowed because account is locked Sep 24 12:...

...t was renamed was so that the samba tool time command wasn't confused with the python time module, but this necessarily causes issues with existing installs unfortunately. The fix is mostly simple, just to remove any conflicting files but until then, it will trigger issues like these. Cheers, Garming On 27/10/16 06:20, Rowland Penny via samba wrote: > On Wed, 26 Oct 2016 12:47:16 -0400 > lingpanda101 via samba <samba at lists.samba.org> wrote: > >> On 10/26/2016 12:11 PM, Rowland Penny via samba wrote: >>> On Wed, 26 Oct 2016 11:41:23 -0400 >>> lingpan...

On Wed, 24 Oct 2018 09:45:39 +1300 Garming Sam <garming at catalyst.net.nz> wrote: > > On 23/10/18 9:48 PM, Rowland Penny via samba wrote: > > On Tue, 23 Oct 2018 10:07:29 +1300 > > Garming Sam via samba <samba at lists.samba.org> wrote: > > > >> Hi, > >> > >> On 20/10/18 1...

...oot at dc3:~# samba-tool computer list |grep MINT-TESTE root at dc3:~# root at dc4:~# samba-tool computer list |grep MINT-TESTE MINT-TESTE$ root at dc4:~# Any idea? On Wed, Apr 17, 2019 at 8:12 AM Elias Pereira <empbilly at gmail.com> wrote: > Hello, > > Thanks for the feedback Garming!!! 👍 > > On Wed, Apr 17, 2019 at 12:35 AM Garming Sam <garming at catalyst.net.nz> > wrote: > >> Hi, >> >> While I think we have most of the 2012 schema problems under control >> now, there's still quite a bit of work to get the functional level >...

...at dc3:~# > > root at dc4:~# samba-tool computer list |grep MINT-TESTE > MINT-TESTE$ > root at dc4:~# > > Any idea? > > > > On Wed, Apr 17, 2019 at 8:12 AM Elias Pereira <empbilly at gmail.com> wrote: > >> Hello, >> >> Thanks for the feedback Garming!!! 👍 >> >> On Wed, Apr 17, 2019 at 12:35 AM Garming Sam <garming at catalyst.net.nz> >> wrote: >> >>> Hi, >>> >>> While I think we have most of the 2012 schema problems under control >>> now, there's still quite a bit of work...

On Tue, 23 Oct 2018 10:07:29 +1300 Garming Sam via samba <samba at lists.samba.org> wrote: > Hi, > > On 20/10/18 1:26 AM, Julien Ropé via samba wrote: > > > >  The deployment works, and computers seems to interact with the > > RODCs as they should, but sometimes computers leave the domain > > afte...

...m are currently compatible with active directory. You'd have to do perform some form of migration, but that shouldn't be too difficult with the existing plaintext passwords. Metze has unfortunately been waiting for this to be merged for a while, hopefully I can get this sped up. Cheers, Garming On 17/06/16 09:49, Fonteneau Simon wrote: > interesting ! > Let me take a closer look at that. > > I must send passwords in Office 365 and Google Apps. > Currently, My script works but it requires that Samba is configured > with the "Plain text Password" option. I wa...

...ay in the samba-tool drs showrepl command. > > However there is currently no standard way to delete the leftover of > repsfrom/repsto, others than deleting the repsFrom/repsTo attribute > manually or through scripting (python-ldb is your friend here). > > I had a discussion with Garming a while ago about this issue, and it > was not clear what process was responsible to remove spurious/leftover > repsfrom/repsto attribute. With the old kcc, it was not such an issue > because it was full meshed, however with the new KCC, it would indeed > be good to have some mor...

...culprit was DNS on the new DC. Would you guys recommend waiting for 4.5, or switching to the BIND backend? The only reason that I chose the internal DNS server in the first place was that I thought Kai said the BIND side wasn't getting as much love these days. On Thu, Aug 18, 2016 at 6:38 PM, Garming Sam <garming at catalyst.net.nz> wrote: > On 19/08/16 04:17, Rowland Penny via samba wrote: > > I couldn't find anything that explicitly says that each DC should have > > its own SOA in AD. What I could find was that each AD-integrated zone on > > a DC is expected...

On Sun, Dec 18, 2016 at 5:20 PM, Garming Sam <garming at catalyst.net.nz> wrote: > Hi, > > It seems unlikely that the KCC is the cause of these issues. The KCC is > only responsible for telling who to connect (and when) and doesn't > actually affect any underlying network connectivity. Connectivity > betwee...

That sounds somewhat out of scope of the original parameter. I would be happy to explain how the patches could be modified to send the username (possibly as the first argument to the script). It shouldn't be a particularly difficult change, but I'd have to look a bit closer first. Cheers, Garming > > Yes it could be interesting. > I want to use it to send the password has an API for other software. I > currently use the "Store passwords using reversible encryption" to use > my API. But I do not like this operation. I then use > "http://ltb-project.org/wi...

> Garming asked you to see if you could locate > where the records got put the records by hand Sorry, I can't understand what you mean with "if you could locate where the records got put"... Are you're asking me to create the DNS record by hand with RSAT on SRVAD_OLD, then run sam...

On 01/03/16 21:35, Garming Sam wrote: > Hi Rowland, > > This new segfault seems unrelated to the previous one. It's probably > something like a double free, which typically shouldn't be that hard to > fix. If you try running the tool under valgrind, it should provide > enough information to fix t...

Hi Garming, > As far I know, all this should work as you would expect. Quite recently, > Andrew Bartlett and I went about testing some of the behaviour of the > KDC and confirming behaviour such as RODC ticket forwarding. thanks for the input. It gives me hope to dig deeper! I have some more ti...