search for: ldb_success

On 16 November 2017 at 10:29, Rowland Penny <rpenny at samba.org> wrote: > On Thu, 16 Nov 2017 08:40:01 +0200 > Ian Coetzee via samba <samba at lists.samba.org> wrote: > >> Hi Rowland, >> >> > How did you upgrade ? >> >> I upgraded by merging the latest code from the samba git repo, doing a >> git clean to remove old local files. Then

An embedded and charset-unspecified text was scrubbed... Name: memory_profiler.txt URL: <http://lists.samba.org/pipermail/samba/attachments/20170330/f5d10ac9/memory_profiler.txt>

...5,7 @@ static PyObject *py_ldb_modify(PyLdbObject > > *self, PyObject *args, PyObject *kwar > > return NULL; > > } > > > > - ret = ldb_request(ldb_ctx, req); > > + //ret = ldb_request(ldb_ctx, req); > > if (ret == LDB_SUCCESS) { > > ret = ldb_wait(req->handle, LDB_WAIT_ALL); > > } > > > > > > > > So now to my question: > > Is it really a bug or does ldb library do something, that i did not > > see/understand till now? > > > > > &gt...

...ong way around, but we like to be restrictive if possible */ io->u.restrictions = !(io->u.userAccountControl & (UF_INTERDOMAIN_TRUST_ACCOUNT | UF_WORKSTATION_TRUST_ACCOUNT | UF_SERVER_TRUST_ACCOUNT)); Later: if (io->u.restrictions == 0) { /* FIXME: Is this right? */ return LDB_SUCCESS; } The script won't be run for machine accounts. > > Problem with using GPOs for password complexity, GPOs do not apply to > > Samba DCs. > > Ok, i mean that: i can setup password policies on GPOs, but the DCs > cannot ''enforce'' it. The settings don&...

...; >> > > > > ldbsearch -V > > Hi Rowland > > $ ldbsearch -V > Version 4.7.2 > > Kind regards > > > > Rowland The message seems to be coming from here: source4/dsdb/samdb/ldb_modules/schema_load.c [line 218] if (schema != NULL) { if (ret == LDB_SUCCESS) { if (schema->metadata_usn == schema_seq_num) { TALLOC_FREE(mem_ctx); return schema; } else { DEBUG(3, ("Schema refresh needed %lld != %lld\n", (unsigned long long)schema->metadata_usn, (unsigned long long)schema_seq_num)); } } else { I wouldn...

Hi there, We are using Samba as a user directory for our application. Passwords are stored in unicodePwd attribute, and our application resets passwords through LDAP (without the knowledge of the previous password, because it's an email-based reset). Unfortunately resetting it like this prevents the "password history" policy enforcement. This is a security problem that will come up

...b/ldb/pyldb.c > @@ -1255,7 +1255,7 @@ static PyObject *py_ldb_modify(PyLdbObject *self, > PyObject *args, PyObject *kwar > return NULL; > } > > - ret = ldb_request(ldb_ctx, req); > + //ret = ldb_request(ldb_ctx, req); > if (ret == LDB_SUCCESS) { > ret = ldb_wait(req->handle, LDB_WAIT_ALL); > } > > > > So now to my question: > Is it really a bug or does ldb library do something, that i did not > see/understand till now? > > > regards, > > Andrej > > Von: samba...

Mandi! Rowland Penny via samba In chel di` si favelave... > The password settings are related to the DC and by default you cannot > set or change a password if it isn't complex enough Ok. >, you do not need to use an external script. Ahem, someone out there need it. ;-) This mean that, if i keep a 'check password script', i could also hit some trubles on, eg,

...0,(__location__ " Failed to prepare commit of transaction: %s\n", + ldb_errstring(ldb))); + TALLOC_FREE(tmp_ctx); + return WERR_DS_NO_SUCH_OBJECT; + } if (ret != LDB_SUCCESS) { /* restore previous schema */ if (used_global_schema) { diff --git a/source4/dsdb/repl/drepl_out_helpers.c b/source4/dsdb/repl/drepl_out_helpers.c index ac0b947..68774f4 100644 --- a/source4/dsdb/repl/drepl_out_helpers.c +++ b/sourc...