search for: ldapi

I've seen several references on the web to setting up the LDAP SAM to communicate with the LDAP server via ldapi (IPC) verses ldap (IP). This should theoretically much faster. My LDAP master is on the same host as the Samba PDC. With nss_ldap using "uri ldap://localhost" and Samba using "ldapsam:ldap://localhost/" everything works. But changing nss_ldap to use "uri ldapi://%2fva...

Hi Rowland! On 26.11.18 19:37, Rowland Penny via samba wrote: > [..] > adminuser at ubutestdc:~$ ls -la /var/lib/samba/private/ldapi > srwxrwxrwx 1 root root 0 Nov 25 17:13 /var/lib/samba/private/ldapi Also strange: # dpkg-query -l *samba* Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten | Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/          Halb installiert/Trigger erWartet/Trigge...

Hi list, Im playing around with ldbsearch/ldapsearch and using successful the socket /var/lib/samba/private/ldapi  in my git-compiled samba. Now I installed the version 4.9.2 for ubuntu bionic from the van-Belle repository and didnt find this socket anymore. Do I have simple to create this socket with mknod? How can I determine the path? Is there a smb.conf-Option to enable it? Tfh! Oliver

...Wed, 15 Jul 2020 13:56:48 +0100 Rowland penny via samba <samba at lists.samba.org>: > >>>>>> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>>>>>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > >>>>>>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > >>>>>> Don't use ldap-utils, use ldb-tools and the machine password: > >>>>>> > >>>>>> sud...

Hi, just a short update on this issue: By using strace and having a look at the source code, I found the reason for the named error: Accessing samba database via ldapi requires the use of ildap.so (samba ldb module, which is not located in "standard ldb modules path"). Just setting LDB_MODULES_PATH to the directory containing it makes named start: export LDB_MODULES_PATH=/usr/lib/samba/ldb/ named -u named -> startup complete So it wasn't my fi...

Hi, Quick question: Does Dovecot support ldapi (i.e. via Unix Sockets) connections for LDAP lookups (user, password, auth etc.) or only ldap/ldaps (over TCP)? If yes, how do we specify ldapi://localhost in Dovecot configuration files? Thanks, Nick

Wed, 15 Jul 2020 13:56:48 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 15/07/2020 13:36, RhineDevil via samba wrote: > > How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > > (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > > Don't use ldap-utils, use ldb-tools and the machine password: > > sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap > > Rowland "ld...

...rect? necessary? I have partial success, I get: $ ctdb status Number of nodes:2 pnn:0 10.5.6.32 OK pnn:1 10.5.6.49 UNHEALTHY (THIS NODE) Generation:323266562 Size:2 hash:0 lmaster:0 hash:1 lmaster:1 Recovery mode:NORMAL (0) Recovery master:0 I use: passdb backend = ldapsam:"ldapi:///var/run/ldapi" idmap backend = ldap:"ldapi:///var/run/ldapi" and on that one "unhealthy" node I see: 50.samba: ERROR: smb.conf cache create failed would you care to make some sense out of it for me please?

...:56, RhineDevil wrote: > > Wed, 15 Jul 2020 13:56:48 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > >>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > >> Don't use ldap-utils, use ldb-tools and the machine password: > >> > >> sudo ldbsearch -P -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap...

...result: rektide at deneb:~/archives/samba/source4$ setup/provision --realm=ELDERGODS.COM --ldap-backend-type=openldap --server-role=dc --domain=ELDERGODS --slapd-path='/usr/sbin/slapd' [running] '/usr/sbin/slapd' '-F/usr/local/samba4/private/ldap/slapd.d' '-h' 'ldapi://%2Fusr%2Flocal%2Fsamba4%2Fprivate%2Fldap%2Fldapi' Failed to bind - LDAP client internal error: NT_STATUS_UNEXPECTED_NETWORK_ERROR Failed to connect to 'ldapi://%2Fusr%2Flocal%2Fsamba4%2Fprivate%2Fldap%2Fldapi' Traceback (most recent call last): File "setup/provision", line...

...gt; >>> Wed, 15 Jul 2020 13:56:48 +0100 Rowland penny via samba <samba at lists.samba.org>: > >>>> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>>>> How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? > >>>>> (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) > >>>> Don't use ldap-utils, use ldb-tools and the machine password: > >>>> > >>>> sudo ldbsearch -P -H ldapi://%2Fvar...

On Sun, 25 Nov 2018 14:10:30 +0100 Oliver Rath via samba <samba at lists.samba.org> wrote: > Hi list, > > Im playing around with ldbsearch/ldapsearch and using successful the > socket > > /var/lib/samba/private/ldapi  > > in my git-compiled samba. > > Now I installed the version 4.9.2 for ubuntu bionic from the van-Belle > repository and didnt find this socket anymore. Do I have simple to > create this socket with mknod? How can I determine the path? Is there > a smb.conf-Option to enable...

How could I avoid being asked a password when interacting with /var/lib/samba/private/ldap_priv/ldapi through ldapsearch or ldaputils in general? (ldapsearch -H ldapi//%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 833 bytes Desc: Firma digitale OpenPGP URL: <http://li...

...gt;>>> uppercase. If you are referring to the netbios domain name (aka >>>> workgroup) then you can find this with wbinfo: >>>> >>>> wbinfo --own-domain >>>> >>>> Rowland >>>> >>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>> >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>&q...

...;netbios name = ?????', that is just the short hostname in >> uppercase. If you are referring to the netbios domain name (aka >> workgroup) then you can find this with wbinfo: >> >> wbinfo --own-domain >> >> Rowland >> > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=yp...

...ave backups for the old server >> >> I'm trying to make a change of PDC > OK, let us try to restore. > > You may post the following in a private mail. > Post the out of those commands to give us some infos: > > # the structure of your DIT > # ldapsearch -xLLL -H ldapi:/// -b dc=rugion,dc=ru hasSubordinates=TRUE dn root at pdc:~# ldapsearch -xLLL -H ldapi:/// -b ou=arkhangelsk,dc=rugion,dc=ru hasSubordinates=TRUE dn dn: ou=arkhangelsk,dc=rugion,dc=ru dn: ou=users,ou=arkhangelsk,dc=rugion,dc=ru dn: ou=groups,ou=arkhangelsk,dc=rugion,dc=ru dn: ou=computers,ou=a...

...at need to consult samba ldap database without authentication. I've set up 2 machines, the first as PDC, the second as BDC. I run my scripts on both and while they run fine on the PDC they end with error on the BDC. Here is the minimal example that behave this way: import ldap LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" l = ldap.initialize(LDAP_URI, trace_level=1) entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) print(entries) it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation unavailable without authenticatio...

...etbios domain name (aka >>>>>> workgroup) then you can find this with wbinfo: >>>>>> >>>>>> wbinfo --own-domain >>>>>> >>>>>> Rowland >>>>>> >>>>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>> >>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytl...

Hello List, i was wondering where ubuntu gets its /var/run/ldapi socket from? I am trying to run samba with "passdb backend = ldapsam:ldapi://%2fvar%2frun%2fldapi/" Any hint or idea is welcome :) Thanks, Mario

...dd a new config section to your bind config: dlz "Samba zone" { database "dlopen /usr/lib/libdlz_bind9.so"; } And that's about as far as I get. During bind startup I only get this error message: Loading 'Samba zone' using driver dlopen Unable to get basedn for ldapi:///var/lib/samba4/private/ldap_priv/ldapi - (null) dlz_dlopen of 'Samba zone' failed SDLZ driver failed to load. DLZ driver failed to load. loading configuration: failure exiting (due to fatal error) So I tried ldapi access using ldapsearch: > ldapsearch -U Administrator -H ldapi:///va...