search for: ldb_modify

Hi, sometimes I see following in the logs: /source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAccountSpn) Failed to modify SPNs on CN=PCNAME,CN=Computers,DC=DOMAIN,DC=NAME,DC=NAME,DC=de: error in module acl: Constraint violation during LDB_MODIFY (19) In the net i found this "explanation": "LDAP_CONSTRAINT_VIOLATION Indicates that the attribute value specified in a modify, add, or modify DN operation violates constraints placed on the attribute. The constraint can be one of size or content (string only, no binary)."...

...> ldb:acl_modify: servicePrincipalName > > [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, 0), > class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) > [...] > ldb: ldb_asprintf/set_errstring: error in module acl: Constraint > violation > during LDB_MODIFY (19) > [...] > ldb: ldb_trace_next_request: (tdb)->del_transaction > [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, 0)] > ../ > source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAccountSpn) > Failed to modify SPNs on CN=PCNAME,CN=Computer...

...llermann wrote: > sometimes I see following in the logs: > /source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAcco > untSpn) > Failed to modify SPNs on > CN=PCNAME,CN=Computers,DC=DOMAIN,DC=NAME,DC=NAME,DC=de: error in > module acl: > Constraint violation during LDB_MODIFY (19) I am seeing a very similar message - Failed to modify SPNs on CN=TERRINE-WHITE,OU=Terminal Servers,DC=example,DC=com: error in module acl: Constraint violation (19) > In the net i found this "explanation": > > "LDAP_CONSTRAINT_VIOLATION > Indicates that the attri...

...b/ldb_modules/acl.c:1055(acl_modify) ldb:acl_modify: servicePrincipalName [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) [...] ldb: ldb_asprintf/set_errstring: error in module acl: Constraint violation during LDB_MODIFY (19) [...] ldb: ldb_trace_next_request: (tdb)->del_transaction [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, 0)] ../ source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAccountSpn) Failed to modify SPNs on CN=PCNAME,CN=Computers,DC=DOMAIN,DC=...: error in...

...es I see following in the logs: > > /source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAcco > > untSpn) > > Failed to modify SPNs on > > CN=PCNAME,CN=Computers,DC=DOMAIN,DC=NAME,DC=NAME,DC=de: error in > > module acl: > > Constraint violation during LDB_MODIFY (19) > > I am seeing a very similar message - Failed to modify SPNs on > CN=TERRINE-WHITE,OU=Terminal Servers,DC=example,DC=com: error in module > acl: Constraint violation (19) > > > In the net i found this "explanation": > > > > "LDAP_CONSTRAINT_VIO...

...: > > > /source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAcco > > > untSpn) > > > Failed to modify SPNs on > > > CN=PCNAME,CN=Computers,DC=DOMAIN,DC=NAME,DC=NAME,DC=de: error in > > > module acl: > > > Constraint violation during LDB_MODIFY (19) > > > > I am seeing a very similar message - Failed to modify SPNs on > > CN=TERRINE-WHITE,OU=Terminal Servers,DC=example,DC=com: error in module > > acl: Constraint violation (19) > > > > > In the net i found this "explanation": > > &gt...

..., pid=32023, effective(0, 0), real(0, > 0), > > > class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) > > > [...] > > > > > > ldb: ldb_asprintf/set_errstring: error in module acl: Constraint > > > > > > violation > > > during LDB_MODIFY (19) > > > [...] > > > > > > ldb: ldb_trace_next_request: (tdb)->del_transaction > > > > > > [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, > 0)] > > > ../ > > > > source4/rpc_server/drsuapi/writespn.c:2...

...; > [2016/03/24 01:01:45.076866, 10, pid=32023, effective(0, 0), real(0, 0), > > class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) > > [...] > > > > ldb: ldb_asprintf/set_errstring: error in module acl: Constraint > > > > violation > > during LDB_MODIFY (19) > > [...] > > > > ldb: ldb_trace_next_request: (tdb)->del_transaction > > > > [2016/03/24 01:01:45.077191, 0, pid=32023, effective(0, 0), real(0, 0)] > > ../ > > source4/rpc_server/drsuapi/writespn.c:234(dcesrv_drsuapi_DsWriteAccountSpn > &g...

...ds in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50)) If I change the code, deleting the old password, and adding the new one: dn: ........ changetype: modify delete: unicodePwd unicodePwd: "Temporal1" - add: unicodePwd unicodePwd: "Temporal2" Then I get this error: #!ERROR [LDAP: error code 53 - 00002035: setup_io: it...

...aryGroupID. It is currently set to 513, which simply does not exist. I wanted to set to 100, which exists and actually the user is a member of this group, but then I get the following exception: ldap.UNWILLING_TO_PERFORM: {'info': 'error in module samldb: Unwilling to perform during LDB_MODIFY (53)', 'desc': 'Server is unwilling to perform'} This is the equivalent LDIF: dn: CN=Lars LH. Hanke,CN=Users,DC=ad,DC=microsult,DC=de changetype: modify replace: primaryGroupID primaryGroupID: 100 Any ideas, why this is prohibited? Regards, - lars.

...ssword using this code: >> >> dn: ........ >> changetype: modify >> replace: unicodePwd >> unicodePwd: "Temporal2" >> >> I get this error: >> >> 0x32 (Insufficient access; error in module acl: insufficient access rights >> during LDB_MODIFY (50)) >> >> If I change the code, deleting the old password, and adding the new one: >> >> dn: ........ >> changetype: modify >> delete: unicodePwd >> unicodePwd: "Temporal1" >> - >> add: unicodePwd >> unicodePwd: "Temporal2...

Hi, I am trying to debug an ldaps client that we would like use to change passwords for end-users. Currently this is failing with this: > [LDAP: error code 50 - error in module acl: insufficient access > rights during LDB_MODIFY (50)]; remaining name 'CN=ted t. > test,CN=Users,DC=samba,DC=company,DC=com' From what we understand, there are two ways to change a password: A) as an admin-user with a replace operation B) as an end-user with a delete and an add operation To debug why my client application does not...

...ut when I try to modify > the user password using this code: > > dn: ........ > changetype: modify > replace: unicodePwd > unicodePwd: "Temporal2" > > I get this error: > > 0x32 (Insufficient access; error in module acl: insufficient access rights > during LDB_MODIFY (50)) > > If I change the code, deleting the old password, and adding the new one: > > dn: ........ > changetype: modify > delete: unicodePwd > unicodePwd: "Temporal1" > - > add: unicodePwd > unicodePwd: "Temporal2" > > Then I get this error:...

...is the > primaryGroupID of LDAPUser 'Domain Guests' ?? > Try changing it to 513 (Domain Users) > I get the following error from both ldbedit and from ldapadmin: failed to modify CN=LDAP User,CN=Users,DC=dc1,DC=mydomain,DC=net - error in module samldb: Unwilling to perform during LDB_MODIFY

...of LDAPUser 'Domain Guests' ?? >> Try changing it to 513 (Domain Users) >> > I get the following error from both ldbedit and from ldapadmin: > > failed to modify CN=LDAP User,CN=Users,DC=dc1,DC=mydomain,DC=net - > error in module samldb: Unwilling to perform during LDB_MODIFY > In trying to sort through this myself, I seems to be missing something. Can anyone shed light on why samba-tool dbcheck gives me this message? ERROR: incorrect GUID component for member in object CN=Domain Admins,CN=Users,DC=dc1,DC=mydomain,DC=net - <GUID=7ae0e1a8b8ca2242a02497d59084268...

...01-10 at 15:05 +0100, lists via samba wrote: > Hi, > > I am trying to debug an ldaps client that we would like use to change > passwords for end-users. Currently this is failing with this: > > [LDAP: error code 50 - error in module acl: insufficient access > > rights during LDB_MODIFY (50)]; remaining name 'CN=ted t. > > test,CN=Users,DC=samba,DC=company,DC=com' > >  From what we understand, there are two ways to change a password: > A) as an admin-user with a replace operation > B) as an end-user with a delete and an add operation > > To debug...

...urt.de] domain[testzentrum.uni-frankfurt.de] [2018/05/03 14:48:13.368969,  0] ../source4/rpc_server/drsuapi/writespn.c:235(dcesrv_drsuapi_DsWriteAccountSpn)   Failed to modify SPNs on CN=foo,CN=Users,DC=testzentrum,DC=uni-frankfurt,DC=de: error in module acl: insufficient access rights during LDB_MODIFY (50) If foo is added to the domain-admins group and is logged in, there are no failures with MSSQLSvc - Service in my samba-logs. Are somebody there who are experienced with SPN on Samba? Any thoughts? Thanks Heinz

...>> Try changing it to 513 (Domain Users) >>>> >>> I get the following error from both ldbedit and from ldapadmin: >>> >>> failed to modify CN=LDAP User,CN=Users,DC=dc1,DC=mydomain,DC=net - >>> error in module samldb: Unwilling to perform during LDB_MODIFY >>> >> In trying to sort through this myself, I seems to be missing >> something. Can anyone shed light on why samba-tool dbcheck gives me >> this message? >> >> ERROR: incorrect GUID component for member in object CN=Domain >> Admins,CN=Users,DC=dc1,...

...;>> Try changing it to 513 (Domain Users) >>>> >>> I get the following error from both ldbedit and from ldapadmin: >>> >>> failed to modify CN=LDAP User,CN=Users,DC=dc1,DC=mydomain,DC=net - >>> error in module samldb: Unwilling to perform during LDB_MODIFY >>> >> In trying to sort through this myself, I seems to be missing >> something. Can anyone shed light on why samba-tool dbcheck gives me >> this message? >> >> ERROR: incorrect GUID component for member in object CN=Domain >> Admins,CN=Users,DC=dc1,DC=...

..._loop_once+0xa3) [0x7fda73ae7880] Jul 24 16:39:20 dc1 samba[29071]: #45 /usr/lib64/samba/libldb.so.1(ldb_wait+0x143) [0x7fda74b7d542] Jul 24 16:39:20 dc1 samba[29071]: #46 /usr/lib64/samba/libldb.so.1(+0xb0e4) [0x7fda74b7e0e4] Jul 24 16:39:20 dc1 samba[29071]: #47 /usr/lib64/samba/libldb.so.1(ldb_modify+0x82) [0x7fda74b7ee0f] Jul 24 16:39:20 dc1 samba[29071]: #48 /usr/lib64/samba/libscavenge-dns-records-samba4.so(dns_tombstone_records_zone+0x405) [0x7fda5d91afd0] Jul 24 16:39:20 dc1 samba[29071]: #49 /usr/lib64/samba/libscavenge-dns-records-samba4.so(dns_tombstone_records+0x15a) [0x7fda5d91b1b...