search for: ldaptest

My ldaptest.php works now. Can't tell the "missing link" so far ... but it seems it's connect via ldaps now (and reading users etc)

...t; `samba-tool` does). > >> > >> This is the (Wireshark-interpreted) `ModifyRequest`: > >> > >> ``` > >> Lightweight Directory Access Protocol > >> LDAPMessage modifyRequest(3) > >> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" > >> messageID: 3 > >> protocolOp: modifyRequest (6) > >> modifyRequest > >> object: > >> CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl > >> modification: 1 item...

...passing `unicodePwd` during entry creation, and 2) when modifying it for an existing entry (like `samba-tool` does). This is the (Wireshark-interpreted) `ModifyRequest`: ``` Lightweight Directory Access Protocol LDAPMessage modifyRequest(3) "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" messageID: 3 protocolOp: modifyRequest (6) modifyRequest object: CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl modification: 1 item modification item operation: re...

...> and 2) when modifying it for an existing entry (like `samba-tool` > does). > > This is the (Wireshark-interpreted) `ModifyRequest`: > > ``` > Lightweight Directory Access Protocol > LDAPMessage modifyRequest(3) > "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" > messageID: 3 > protocolOp: modifyRequest (6) > modifyRequest > object: > CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl > modification: 1 item > modification item &gt...

...b and winbind, and checked the logs to see if they are behaving. They are. 12. Tried to join the domain from the pdc (which is named "PDC") with "net rpc join -S PDC -U root%PASSWORD 13. It fails. The message I get is: Creation of workstation account failed Unable to join domain LDAPTEST. 14. Tried to join a windows XP PC to the domain. It finds the domain controller ok, and then gives the error "The username could not be found" which, from what I've been able to find out, means that the PC account isn't being created properly on the domain. What's *really*...

...for an existing entry (like `samba-tool` >> does). >> >> This is the (Wireshark-interpreted) `ModifyRequest`: >> >> ``` >> Lightweight Directory Access Protocol >> LDAPMessage modifyRequest(3) >> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >> messageID: 3 >> protocolOp: modifyRequest (6) >> modifyRequest >> object: >> CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl >> modification: 1 item >>...

...gt;>>> This is the (Wireshark-interpreted) `ModifyRequest`: >>>>> >>>>> ``` >>>>> Lightweight Directory Access Protocol >>>>> LDAPMessage modifyRequest(3) >>>>> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >>>>> messageID: 3 >>>>> protocolOp: modifyRequest (6) >>>>> modifyRequest >>>>> object: >>>>> CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl >>&gt...

...). >>>> >>>> This is the (Wireshark-interpreted) `ModifyRequest`: >>>> >>>> ``` >>>> Lightweight Directory Access Protocol >>>> LDAPMessage modifyRequest(3) >>>> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >>>> messageID: 3 >>>> protocolOp: modifyRequest (6) >>>> modifyRequest >>>> object: >>>> CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl >>>>...

...gt;> This is the (Wireshark-interpreted) `ModifyRequest`: > >> >> > >> >> ``` > >> >> Lightweight Directory Access Protocol > >> >> LDAPMessage modifyRequest(3) > >> >> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" > >> >> messageID: 3 > >> >> protocolOp: modifyRequest (6) > >> >> modifyRequest > >> >> object: > >> >> CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl >...

...;> >> >> >> This is the (Wireshark-interpreted) `ModifyRequest`: >> >> >> >> ``` >> >> Lightweight Directory Access Protocol >> >> LDAPMessage modifyRequest(3) >> >> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >> >> messageID: 3 >> >> protocolOp: modifyRequest (6) >> >> modifyRequest >> >> object: >> >> CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl >> >>...

dn: cn=Domain Admins,ou=groups,dc=mydomain objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins description: Netbios Domain Administrators sambaSID: S-1-5-21-3936576374-1604348213-1812465911-512 sambaGroupType: 2 displayName: Domain Admins memberUid: root memberUid: sadmin dn: cn=Domain Users,ou=groups,dc=mydomain objectClass: top objectClass:

...s is the (Wireshark-interpreted) `ModifyRequest`: >>>>>> >>>>>> ``` >>>>>> Lightweight Directory Access Protocol >>>>>> ???? LDAPMessage modifyRequest(3) >>>>>> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >>>>>> ???????? messageID: 3 >>>>>> ???????? protocolOp: modifyRequest (6) >>>>>> ???????????? modifyRequest >>>>>> ???????????????? object: >>>>>> CN=williamedwards1730031523476,CN=Users,DC=ldapte...

...= tdb > idmap config * : range = 20000001-20001000 > > idmap config AUBURN : backend = rfc2307 > idmap config AUBURN.EDU:range = 200-20000000 > idmap config AUBURN : ldap_server = stand-alone > idmap config AUBURN : ldap_url = > ldap://ldaptest.subdom.univ.edu/ idmap config AUBURN : > ldap_search_base = dc=univ,dc=edu idmap config AUBURN : realm = > univ.edu idmap config AUBURN : ldap_user_dn = > cn=readonly,ou=system,dc=univ,dc=edu Here is where it really falls apart, your workgroup is 'UNIV', but you are using 'AUB...

Am 27.02.20 um 11:32 schrieb L.P.H. van Belle via samba: > But your missing the important part. > > How ? > > Kerberos ? NTLM ? LDAP ? > > ;-) Ah ok Actually I want to use secure LDAP from a PHP docker container. So far no Kerberos involved as far as I see. (I have to dockerize a php app which is badly written ... and I want to clean up a bit, and let it bind

...nterpreted) `ModifyRequest`: >>>>>>> >>>>>>> ``` >>>>>>> Lightweight Directory Access Protocol >>>>>>> ???? LDAPMessage modifyRequest(3) >>>>>>> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >>>>>>> ???????? messageID: 3 >>>>>>> ???????? protocolOp: modifyRequest (6) >>>>>>> ???????????? modifyRequest >>>>>>> ???????????????? object: >>>>>>> CN=williamedwards173003152347...

...tate: entering fd = 9 config len 322 debug3: ssh_msg_send: type 0 debug3: send_rexec_state: done debug1: rexec start in 6 out 6 newsock 6 pipe -1 sock 9 client side: $ ssh sshia2 -p 1234 -vvv OpenSSH_5.5p1+sftpfilecontrol-v1.3-hpn13v7, OpenSSL 0.9.8n 24 Mar 2010 HP-UX Secure Shell-A.05.50.002.LdapTest, HP-UX Secure Shell version debug1: Reading configuration data /opt/ssh/etc/ssh_config debug3: RNG is ready, skipping seeding debug2: ssh_connect: needpriv 0 debug1: Connecting to sshia2 [fe80::217:8ff:fe7c:d91c] port 1234. debug1: Connection established. debug1: identity file /home/user1/.ssh/id_r...

...Request`: >>>>>>>> >>>>>>>> ``` >>>>>>>> Lightweight Directory Access Protocol >>>>>>>> ???? LDAPMessage modifyRequest(3) >>>>>>>> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >>>>>>>> ???????? messageID: 3 >>>>>>>> ???????? protocolOp: modifyRequest (6) >>>>>>>> ???????????? modifyRequest >>>>>>>> ???????????????? object: >>>>>>>> CN=willia...

...= UNIV.EDU idmap config * : backend = tdb idmap config * : range = 20000001-20001000 idmap config UNIV : backend = rfc2307 idmap config UNIV : range = 200-20000000 idmap config UNIV : ldap_server = stand-alone idmap config UNIV : ldap_url = ldap://ldaptest.subdom.univ.edu/ idmap config UNIV : ldap_search_base = dc=univ,dc=edu idmap config UNIV : realm = univ.edu idmap config UNIV : ldap_user_dn = cn=readonly,ou=system,dc=univ,dc=edu -- Shannon Price Auburn University -----Original Message----- From: samba <samba-bounce...

...idmap config * : backend = tdb idmap config * : range = 20000001-20001000 idmap config AUBURN : backend = rfc2307 idmap config AUBURN.EDU:range = 200-20000000 idmap config AUBURN : ldap_server = stand-alone idmap config AUBURN : ldap_url = ldap://ldaptest.subdom.univ.edu/ idmap config AUBURN : ldap_search_base = dc=univ,dc=edu idmap config AUBURN : realm = univ.edu idmap config AUBURN : ldap_user_dn = cn=readonly,ou=system,dc=univ,dc=edu -- Shannon Price Auburn University -----Original Message----- From: Shannon Price Sent...

...;>>>>>> >>>>>>>>> ``` >>>>>>>>> Lightweight Directory Access Protocol >>>>>>>>> ???? LDAPMessage modifyRequest(3) >>>>>>>>> "CN=williamedwards1730031523476,CN=Users,DC=ldaptest,DC=nl" >>>>>>>>> ???????? messageID: 3 >>>>>>>>> ???????? protocolOp: modifyRequest (6) >>>>>>>>> ???????????? modifyRequest >>>>>>>>> ???????????????? object: >>>>>>&g...