Displaying 5 results from an estimated 5 matches for "ldapwiki".
Did you mean:
imapwiki
2020 Jul 27
4
Samba migrate from ver 4.11.11 to 4.12.5
Hi
I have problem with migrate my samba AD.
When I install new version samba (4.12.5) in log I see comment : Kerberos:
Server not found In database: ldap/.: encryption type 3 not supported
In changelog I see that samba in version 4.12 not supported encryption type
DES ( <https://ldapwiki.com/wiki/DES> DES- <https://ldapwiki.com/wiki/CBC>
CBC- <https://ldapwiki.com/wiki/MD5> MD5) .
Please help me how migrate my database users/ computers to supported
encryption AES ?
JM
2023 Oct 28
1
query account expired state
...about.
The unfortunate situation is that Samba (4.19.2) does not implement the
'ADS_UF_PASSWORD_EXPIRED' flag. It does support
'msDS-UserPasswordExpiry', but that returns and LDAP time value so it
requires computation by the querier to figure out expiry.
Another suggestion from ldapwiki.com: "All expired user accounts:
'(&(objectCategory=Person)(objectClass=User)(!accountExpires=0)(!accountExpires=9223372036854775807))'"
does not work either. Accounts on Samba always have the value
'9223372036854775807'.
Some output to show all this:
ldapsearch -...
2023 Oct 28
1
query account expired state
...o it
> requires computation by the querier to figure out expiry.
I am on 4.18.8 and that doesn't have 'msDS-UserPasswordExpiry' or
'ms-DS-User-Password-Expired', but if it did, then the time stored
would be, as you say, in Windows format.
>
> Another suggestion from ldapwiki.com: "All expired user accounts:
> '(&(objectCategory=Person)(objectClass=User)(!accountExpires=0)(!accountExpires=9223372036854775807))'"
> does not work either. Accounts on Samba always have the value
> '9223372036854775807'.
accountExpires != the passwo...
2023 Oct 28
1
query account expired state
On Fri, 27 Oct 2023 23:48:22 +0200
Kees van Vloten via samba <samba at lists.samba.org> wrote:
> Hi Team,
>
> Is it possible to make a LDAP-query that returns whether an account
> is expired or not?
>
> I am aware that it is possible to do the maths against the
> "accountExpires" attribute, but that requires some scripting around
> the query.
>
>
2023 Oct 28
1
query account expired state
...-Password-Expired', but if it did, then the time stored
> would be, as you say, in Windows format.
You mention 2 other attributes: 'msDS-UserPasswordExpiry' and
DS-User-Password-Expired'. I just check them, both are not supported in
4.19.2.
>
>> Another suggestion from ldapwiki.com: "All expired user accounts:
>> '(&(objectCategory=Person)(objectClass=User)(!accountExpires=0)(!accountExpires=9223372036854775807))'"
>> does not work either. Accounts on Samba always have the value
>> '9223372036854775807'.
> accountExpires...