search for: indorama

...g samba password using smbpasswd, samba seems trying to add same attribute (instead of delete and add again), pls see the "MOD" from log file (from different domain) : UNSUCESSFULL Mar 15 17:10:53 hurricane slapd[27056]: conn=29489 op=1 MOD dn="uid=pwreka,ou=people,ou=purwakarta,dc=indorama,dc=com" Mar 15 17:10:53 hurricane slapd[27056]: conn=29489 op=1 MOD attr=sambaPwdCanChange sambaPwdCanChange sambaPwdMustChange samb aPwdMustChange sambaLMPassword sambaNTPassword sambaPwdLastSet sambaPwdLastSet Mar 15 17:10:53 hurricane slapd[27056]: Entry (uid=pwreka,ou=people,ou=purwakarta,...

...ugh with my complain, now from chapter 6, page 69: Manual creation of machine trust account, it focus on smbpasswd/tdbsam backend only, not ldap. I have valid posixaccount entry in ldap : [root@potato samba]# smbpasswd -a -m tbird ldapsam_modify_entry: Failed to add user dn= uid=tbird$,ou=people,dc=indorama,dc=com with: Already exists ldapsam_add_sam_account: failed to modify/add user with uid = tbird$ (dn = uid=tbird$,ou=people,dc=indorama,dc=com) Failed to add entry for user tbird$. Failed to modify password entry for user tbird$ --beast

When samba password has been expired, user are force to change their password from client WS. Samba will modify sambaPwdMustChange attribute and the value seems always "2147483647", this not happen when changin password with smbpasswd. >From where samba calculate value for "sambaPwdMustChange"? is it constant? Is it possible to specify different value? Tks.

I'm just storing machine accounts under ou=computer,ou=site,dc=domain,dc=com and it works. Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times were never failed. Im sure it is 'stable' right now :-) 'works' means it was able to add machine trust on-the-fly, or using manual creation with smbpasswd command. The key is in not to use

Is it possible? just for wins server, not for file sharing. --beast

...tical server. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467 |---------+---------------------------------------------------------> | | Beast <indorama@rad.net.id> | | | Envoy? par : | | | samba-bounces+stephane.purnelle=corman.be@list| | | s.samba.org | | |...

It apparently samba stored trusted info on secret.tdb so only samba PDC was able to retrieve this info, am I correct? (though trust account waqs stored in ldap). I can't browse samba BDC from (trusted) NT domain, it always ask for username/password again. samba domain = IRSJKT NT domain = DOMJKT msg from samba BDC : [2004/03/18 21:16:42, 5] auth/auth_util.c:make_user_info_map(216)

...St?phane ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467 |---------+---------------------------------------------------------> | | Beast <indorama@rad.net.id> | | | Envoy? par : | | | samba-bounces+stephane.purnelle=corman.be@list| | | s.samba.org | | |...

Dear Lists, I try to configure Samba as PDC LDAP backend with Linux-Suse-9.1 and smbldap-tools form www.idealx.org, I follow guide from SMB-3 by Example book. Step by step installation and configuration came with no error. except i couldnt join w2k workstation to the new domain with administrator account. # /var/lib/samba/sbin/smbldap-usershow administrator dn:

Hello, What is the different between ldap password sync and unix password sync when I'm using nss_ldap? Both parameter seems serve same function. --beast

In samba howto collection it says : ... Don?t use it if you want to protect your passwords. Better share the printer in a way that does not require a password! Printing will only work if you have a working netbios name resolution up and running. How to set "anonymous shared printer" in Win 2000? even if I give permision to anyone, Win refuses to gives list. [root@potato SAMBA-NEW]#

Well, i'm just ordinary samba user, but if i can make a request for next samba release: 1. Samba should support ldap referral and has appropriate waiting slave database synchronized. ie, in smb.con we can give: passdb backend = ldapsam:"ldap://slave1 ldap://slave2 ldap://master" sync timout = 10 or user shoud manually tell where is the master and slave: ldap master server =

When i follow link in samba documentation page : gnosamba - A GNOME Samba configuration tool http://www.open-systems.com/gnosamba.html --beast

Is there any way to make user account expired similar to shadowExpire attribute in nis.schema? --beast

Hi, 1. I want to migrate NT to Samba 3 domain without needing to rejoin all machine (using same domain name and SID). just curious, machine account should belong to what group sid? does it matter if belong to any value? 2. I just examine output of pwdump, some of member domain or even NT BDC is has "*****" in password field which means this account was disabled. I've verified that

Anyone dare to explain? For #2 I'm not using rpc vampire because it can't migrate hash password. ---- Hi, 1. I want to migrate NT to Samba 3 domain without needing to rejoin all machine (using same domain name and SID). just curious, machine account should belong to what group sid? does it matter if belong to any value? 2. I just examine output of pwdump, some of member domain or even

I think that machine trust account did not access any resources, is there any way to avoid using posix account for machine trust? or at least using only one shared posix id? --beast

Is it possible to have samba adminitrator account with non zero uid? I have a problem with email if admin is root. creating alias in postifx is somehow not a good option in my case. Tks. --beast

What should be the flag for PDC machine trust account? If I set to "S" then it will appear as "BDC" in NT server manager, if "W" then as "Workstation or server", if no machine trust then it will not appear on server manager list. --beast

When configuring samba PDC to use slave ldap, it seems parameter ldap replication sleep did not work, setting any value did not make any different. I have samba PDC and slave/master ldap connected over fast-ethernet switch, ldap replication take less than 2 seconds, however when adding (XP) machine to domain it gives error " The username could not be found". In machine log: Closing