search for: ldap_modify

...s password using php. Here's my code: function UpdateLdapPassword($username, $newpassword) { global $ds; global $rdn; $entry["clearTextPassword"][0]=base64_encode(iconv('UTF-8','UTF-16LE',$newpassword)); $bReturn= ldap_modify ($ds, $rdn, $entry); Debug ("msg:'".ldap_error($ds)."'<br><br>"); return $bReturn; } The logs display something like this: [2014/02/17 15:38:04.542674, 10, pid=29998, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-sa...

Hi, i have configured a Samba PDC based on idealx.org. now, whenever i set the sambaMustChangePassword flag to 0, then from the subsequent logon, there is a popup urge me for changing password. now, the problem is after i have changed the password, the sambaMustChangePassword is set to 2147483647(unix timestamp), which if i converted it into human readable format, it will be 2038 year,

...o]: yes Enter domain password: Locating DC in DOMAIN ... this may take a minute ... Joining DOMAIN ... this may take a minute ... failed to join DOMAIN: UNSUCCESSFUL Please refer to the system log for more information. In /var/adm/messages: Jan 30 21:33:34 host smbd[827]: [ID 232655 daemon.notice] ldap_modify: Insufficient access Jan 30 21:33:34 host smbd[827]: [ID 702911 daemon.notice] Workstation trust account update failed Windows 7 clients are able to join, but Solaris 11 fails. Kerberos seems to be fine: # kinit oskar Password for oskar at DOMAIN.COM: Warning: Your password will expire in 41 days...

...wPassword ldapmodify -v -c -a -f filename.ldif -H\ ldaps://server.domain.com -D\ administrator at domain.com -W ldap_initialize( ldaps://server.domain.com:636/??base ) Enter LDAP Password: replace unicodePwd: newPassword modifying entry "CN=John Smith,cn=Users,DC=domain,DC=com" ldap_modify: Server is unwilling to perform (53) additional info: 00002035: setup_io: it's not allowed to set the NT hash password directly' It seems, that samba4 does not allow to change this attribute directly. So the question would be: is it possible to change AD user password via LDAP, or...

Hi! I'm following the idealx setup on setting up Samba as a PDC with a LDAP backend. It says, to add a user, one should do: smbldap-useradd.pl -a -m -g 900 administrator This gives me the following error message: ldap_modify: Object class violation additional info: object class 'sambaAccount' requires attribute 'rid' ldif_record() = 65 /usr/local/sbin/smbldap-useradd.pl: error while adding samba account to posix user administrator Alexander Skwar -- How to quote: http://learn.to/quote (german...

...dapmodify -r -v -h w2k3_domain -x -D "CN=adm_user,cn=users,DC=companymail,DC=local" -W -f ldap_gcecchi_modify.txt ldap_init( w2k3_domain, 0 ) Enter LDAP Password: replace pwdLastSet: 127969313462031250 modifying entry "CN=Gianluca Cecchi,CN=Users,DC=companymail,DC=local" ldap_modify: Unknown error additional info: 00000057: SysErr: DSID-031A0FB6, problem 22 (Invalid argument), data 0 ldif_record() = 80 perhaps anyone with experience in ldap for samba can help? Do I have to specify also the format of the value in some way? Thanks in advance for your help. Gianluca

...e searchFlags attr in the schema. I've tried but fails. # ldapmodify -f uid.ldif SASL/GSSAPI authentication started SASL username: administrator at mydomain.local SASL SSF: 56 SASL data security layer installed. modifying entry "CN=uid,CN=Schema,CN=Configuration,DC=mydomain,DC=local" ldap_modify: Server is unwilling to perform (53) additional info: 00002035: schema_data_modify: updates are not allowed: reject request The uid.ldif contains: dn: CN=uid,CN=Schema,CN=Configuration,DC=samba4,DC=mydomain,DC=local changetype: modify replace: searchFlags searchFlags: 13 Is that OK. I al...

On 28/07/16 11:53, mathias dufresne wrote: > > > 2016-07-28 12:27 GMT+02:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>: > > On 28/07/16 10:32, mathias dufresne wrote: > > Can you explain why it would be an issue giving GID to "Domain > Admins" group? > > > This is because Domain Admins has to

...ntries: 1 > > $ ldapmodify -x -ZZZ -W -D 'cn=admin,dc=example,dc=com' > Enter LDAP Password: > dn: cn=Domain Users,ou=Groups,dc=example,dc=com > changetype: modify > delete: gidNumber > modifying entry "cn=Domain Users,ou=Groups,dc=example,dc=com" > ^D > ldap_modify: Object class violation (65) > additional info: object class 'posixGroup' requires attribute > 'gidNumber' > > ---------------------------------------------------------------------- > > To me this implies that "posixGroup"s and an AD are...

...result: 0 Success # numResponses: 2 # numEntries: 1 $ ldapmodify -x -ZZZ -W -D 'cn=admin,dc=example,dc=com' Enter LDAP Password: dn: cn=Domain Users,ou=Groups,dc=example,dc=com changetype: modify delete: gidNumber modifying entry "cn=Domain Users,ou=Groups,dc=example,dc=com" ^D ldap_modify: Object class violation (65) additional info: object class 'posixGroup' requires attribute 'gidNumber' ---------------------------------------------------------------------- To me this implies that "posixGroup"s and an AD are incompatible? (N.B.: I'm...

...tial ldap entries using the base_ldif they include in their doc. When I try to add any user (example): smbldap-useradd.pl -a -m -g 200 administrator -W After entering the ldap password, the posix account is created, but when the account is modified to add the samba information, I get the error: ldap_modify: object class violation additional info: attribute 'rid' not allowed ldif_record() = 65 Any help would be appreciated! __________________________________________________ Do you Yahoo!? U2 on LAUNCH - Exclusive greatest hits videos http://launch.yahoo.com/u2

...ate a machine account. The posixAccount portion gets completed, but it fails to add the sambaSamAccount information: debian:/usr/local/sbin# smbldap-useradd.pl -w test sh: line 1: /usr/local/sbin/mkntpwd: No such file or directory ldapmodify: update failed: uid=test$,ou=Computers,dc=domain,dc=com ldap_modify: Invalid syntax (21) additional info: sambaLMPassword: value #0 invalid per syntax /usr/local/sbin/smbldap-useradd.pl: error while adding samba account to test$ PS I'm using OpenLDAP 2.1.22, Samba3 beta2, IDEALX tools ver. 1.14, Debian sid. -- Benjamin Krein www.superk.org

...-ZZZ -W -D 'cn=admin,dc=example,dc=com' > > Enter LDAP Password: > > dn: cn=Domain Users,ou=Groups,dc=example,dc=com > > changetype: modify > > delete: gidNumber > > modifying entry "cn=Domain Users,ou=Groups,dc=example,dc=com" > > ^D > > ldap_modify: Object class violation (65) > > additional info: object class 'posixGroup' requires attribute > > 'gidNumber' > > > > ---------------------------------------------------------------------- > > > > To me this implies that "p...

...min are both admin logins. I was trying to domain join with both. sadmin is in ldap The olcdbindex.ldif gave this error SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Other (e.g., implementation specific) error (80) additional info: index attribute "dhcpClassData" undefined I did the indexing and also the log level Here is what I got with tail -f /var/log/syslog|sed -nre 's/^.*( slapd.*$)/\1/p' net getlocasid slapd[2332]: <= bdb_equalit...

Hi all, I have followed the instructions at http://samba.mirror.ac.uk/samba/docs/man/passdb.html in an attempt to set up a Samba v3.0.2 (supplied by Redhat as part of RHEL v3.0) PDC. I have got as far as trying to get a windows 2k box to join this new domain that I have created, however this fails with the error "Logon failure: unknown user name or password". Samba itself logs

Hi Gruss, At this stage there is only one server, running 3.6.25 on Ubuntu12.04. The plan to get LDAP to work on this one. Then add the second server 4.x and the promote it to BDC and then demote this one. Just a side info, we didn't want to go tdbsam in both as I read it breaks the domain trust. The domain names are real ones. I ran the commands you suggested, nothing in reply. I tried