search for: ldappasswd

...t, I'm using Samba 3.0.24 and OpenLDAP 2.3.30 (with the ppolicy and smbk5pwd overlays). While testing Samba as a PDC with an OpenLDAP backend, I've hit a snag on password change. I currently have the following in my smb.conf related to password changes: passwd program = /usr/bin/ldappasswd -x -W -S -D uid=%u,ou=Users,dc=example,dc=com passwd chat = "*Enter NEW password*" %n\n "*Confirm NEW password*" %n\n "*Verify OLD password*" %o\n "*Password changed*" \n passdb backend = ldapsam:ldap://127.0.0.1 I can change passwords, but t...

...e the latter users passwords using "ldapadmin" (a windows LDAP client) but today I am not. When I try to change a password I get an error message like "RPC server unavailable". And I have another problem with LDAP. I have to use ldapadmin to change users' password because ldappasswd gives me this error: ldappasswd -d4 -h 192.168.0.137 "cn=juan.lapuerta,ou=alisys.net ,dc=aliratiun,dc=tic" ldap_build_search_req ATTRS: supportedSASLMechanisms SASL/GSSAPI authentication started SASL username: Administrator at ALIRATIUN.TIC SASL SSF: 56 SASL data security layer installed...

...02111-1307, # USA. # Purpose : # . be the configuration file for all smbldap-tools scripts use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS $UID_START $GID_START $smbpasswd $slaveLDAP $masterLDAP $with_smbpasswd $mk_ntpasswd $ldap_path $ldap_opts $ldapsearch $ldapsearchnobind $ldapmodify $ldappasswd $ldapadd $ldapdelete $ldapmodrdn $suffix $usersdn $computersdn $groupsdn $scope $binddn $bindpasswd $slaveDN $slavePw $masterDN $masterPw $_userLoginShell $_userHomePrefix $_userGecos $_defaultUserGid $_defaultComputerGid $_skeletonDir $_userSmbHome $_userProfile $_userHomeDrive $_userScript $users...

...dMustChange: 2147483647" >> /tmp/ldap.mod echo "" >> /tmp/ldap.mod # NOT WORKING...!!! /usr/local/bin/ldapmodify -v -x -h 127.0.0.1 -D 'cn=ADMIN,dc=OKA' -w 'secret' -r -f /tmp/ldap.mod rm -f /tmp/ldap.mod # WORKING! /usr/local/bin/ldappasswd -x -h 127.0.0.1 -D 'cn=ADMIN,dc=OKA' \ -w 'secret' uid=$1,ou=Users,dc=OKA -s $PASS1 > /dev/null echo "all authentication tokens updated successfully" else echo "Passwords do not match" fi #END ---------------------CUT HERE-----------------------...

...hema# passwd passwd: User not known to the underlying authentication module But I should be able to "passwd" an /etc/passwd user, shouldn't I? dellj81:/home/chema# id root uid=0(root) gid=0(root) groups=0(root) With my normal user, if I try to change the password: chema@dellj81:~$ ldappasswd SASL/DIGEST-MD5 authentication started Please enter your password: ldap_sasl_interactive_bind_s: Internal (implementation specific) error (80) additional info: SASL(-13): user not found: no secret in database This produces the following sldap output: Oct 25 11:45:03 dellj81 slapd[2925]: S...

Hi, i have configured a Samba PDC based on idealx.org. now, whenever i set the sambaMustChangePassword flag to 0, then from the subsequent logon, there is a popup urge me for changing password. now, the problem is after i have changed the password, the sambaMustChangePassword is set to 2147483647(unix timestamp), which if i converted it into human readable format, it will be 2038 year,

...ync =Yes" in smb.conf and it used to work fine. Has anyone seen this? If I use unix password sync = Yes passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n" instead of "ldappasswd sync", what access control do I have to add to the slapd.conf file? Thank you very much for your help! John

...cannot change the passwords from the Win2000 or WinXP WS, it always says that the password or username doesn't match .... Of course it matches, I tried too many things to get it working ... in vain - I tried to play on password chats (smb.conf) - I used smbldap-passwd (from idealx), ldapsync, ldappasswd : it always give the same result - the LDAP ACLs too I even put "access to * by * write" (just for test) someone can help ? please ? PS : if the logs are needed I'll mail'em -- Zied Fakhfakh BDM - Opennet Software 70 Av Med 5 - Tunis 1002 - Tunisia Tel : +216 71 892 377 - Fax...

Having a bit of trouble understanding, or getting, "ldap passwd sync" working. I assume, setting it to Yes, would make it issue a change password command to the ldap server, just like pam does, ldappasswd does, or any other ldap program. Right? What does only do? -- Jerry Haltom <jhaltom@feedbackplusinc.com> Feedback Plus, Inc.

Hi all, this is my setup OS: Debian Squeeze (6.0.2) Samba: 3.5.6 LDAP: 2.4.23 and I have few questions about things I dont really understand and havent found clear answer using google and searching mailng list till now: 1) is there a way to get some password changing tool (smbpasswd, ldappasswd, smbldap-passwd, etc.) obey account policy, which I set using pdbedit (and works fine when I try to change password from Windows, but not using those utilities) without knowing old password? I need reset userses passwords. Here is, how those tools work for me: smbpasswd - obeys account policy when...

dear list On the samba.org pages there is an overview of Samba GUI's. I've recently (via a post on this mailinglist) discovered http://ldapadmin.sourceforge.net/ It looks very good. Anyone using it here? Experiences? A specific reason why it it not listed on the Samba GUI page? Regards, mj

...ounts (users, groups, machines) in an LDAP directory. They can be used on GNU/Linux and FreeBSD (and any other Unix-like ?). They are similar to the smbldap-tools but are written in sh, not in PERL. They only require OpenLDAP client commands (ldapadd, ldapdelete, ldapsearch, ldapmodify, ldapmodrdn, ldappasswd) and make the administrator's work a lot easier avoiding him to configure PERL and each library dependencies (e.g. Net::LDAP). They only manage POSIX accounts ; Samba accounts information is to be added afterwards by Samba commands. The scripts may be used independently - in command lines - or...

...ted [New password: ] received [New password: ] match no this is my problem! is there a bug or is my config faulty: passwd chat = New\spassword:\s %n\n Re-enter\snew\spassword:\s %n\n Result:\sSuccess\s(0)\n passwd program = /etc/ldappwdsmb %u the programm ldappwdsmb is a script which calls ldappasswd as root! would it be possible to send me your configfiles to compare with mine? in my opinion, there's only one little mistake that let the sync crash! >> 3. the domain group map doesn't work! i found a lot of descriptions >> about > i have not tried this yet, but i think t...

...s are a great thing to have, thanks a lot! I just wonder if it would be possible to set a password via the command line, like: smbldap-passwd.pl testuser1 not24get I have to create accounts for several hundreds people every year and give them an immutable password. So long I do that with smbpasswd, ldappasswd and a tiny script around these tools. I tried smbldap-passwd.pl testuser1 < pass where pass contains on two lines the passwort, but thats a solution I'm not proud of, especially since I get this warning/error: fileserver:~ # /opt/samba3/sbin/smbldap-passwd.pl testuser2 < testpasses Chan...

Hello NG, ich would like to use the Samba-Server as an PDC for a school. Because of the high numbers of students it is not possible for us to add ervery student by hand an think about a pw. Has anyone designed a script which read the users from an ASCII-file and add's them to the samba? Regards, Michael Lechner

...word hash failed Failed to modify entry for user adam. Failed to modify password entry for user adam This changes the Samba password but fails to change the user's userPassword (LDAP sync) password. But I can "manually" change the password using the DC's bind DN and password: # ldappasswd -S -H ldapi://%2fvar%2frun%2fldap2.4%2fldapi -vvvvvvvvv -x -W -D "uid=CIFSDC,ou=System,ou=Entities,ou=SAM,o=Morrison Industries,c=US" "cn=Adam Williams,ou=People,ou=Entities,ou=SAM,o=Morrison Industries,c=US" New password: Re-enter new password: Enter LDAP Password: ldap_...

...uot;/usr/local/sbin/mkntpwd"; diff -ur sbin/smbldap-passwd.pl modified/smbldap-passwd.pl --- sbin/smbldap-passwd.pl 2002-05-14 08:05:54.000000000 +0000 +++ modified/smbldap-passwd.pl 2002-05-14 08:14:29.000000000 +0000 @@ -166,7 +166,7 @@ } } # change unix password -$ret = system "$ldappasswd $dn -s $pass > /dev/null"; +$ret = system "$ldappasswd '$dn' -s '$pass' > /dev/null"; if ($ret == 0) { print "all authentication tokens updated successfully\n"; } else { diff -ur sbin/smbldap_tools.pm modified/smbldap_tools.pm --- sbin/smbldap_t...

...amba server will part of workgroup = mydomain1.com # server string is the equivalent of the NT Description field server string = %h server (Samba %v) ldap suffix = "dc=mydomain1,dc=com" ldap bind as = "uid=admin,dc=mydomain1,dc=com" ldap passwd file = /usr/bin/ldappasswd ldap server = localhost ldap port = 389 ////////smb.conf//////////////// //////slapd.conf/////////////////// # This is the main ldapd configuration file. # Schema and objectClass definitions include /etc/openldap/slapd.at.conf include /etc/openldap/slapd.oc.conf #...

...ap_path/ldapsearch $ldap_opts -H $slaveURI -D '$slaveDN' -w '$slavePw'"; #$ldapsearchnobind = "$ldap_path/ldapsearch $ldap_opts -H $slaveURI"; $ldapmodify = "$ldap_path/ldapmodify $ldap_opts -H $masterURI -D '$masterDN' -w '$masterPw'"; #$ldappasswd = "$ldap_path/ldappasswd $ldap_opts -H $masterURI -D '$masterDN' -w '$masterPw'"; #$ldapadd = "$ldap_path/ldapadd $ldap_opts -H $masterURI -D '$masterDN' -w '$masterPw'"; #$ldapdelete = "$ldap_path/ldapdelete $ldap_opts -H $masterURI -D ...

...thenticate user. My problem is binding to ldap with phpldapadmin or cpu. I can bind anonymously with phpldapadmin. ldapadd, ldapsearch etc. works. Users in the database can logon, so the authentication works, but I cant bind.... I need some input please, I cant find the missing link. ERRORS: # ldappasswd norman SASL/DIGEST-MD5 authentication started Please enter your password: ldap_sasl_interactive_bind_s: Internal (implementation specific) error (80) additional info: SASL(-13): user not found: no secret in database OK: [root at server1 ldap]# passwd norman Changing password for user norm...