search for: padl

Hi All, Any thoughts on why, while everything seems ok at the OS level (getent , id -a ) Samba doesn't pickup any supplementary groups when Solaris is configured with 'group: files ldap' in nsswitch.conf and using it's own native nss_ldap.so.1 but does when using PADL's nss_ldap? Everything else is equal. Do they use/accept different calls or could it be an openldap vs native ldap incompatibility, Samba being compiled against the openldap libraries. Samba seems not to compile against the native libraries due to a lack of ldap_start_tls_s Solaris 10 and...

...ccess control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Group to enforce membership of #pam_groupdn cn=PAM,ou=Groups,dc=padl,dc=com # Group member attribute #pam_member_attribute uniquemember # Specify a minium or maximum UID number allowed #pam_min_uid 0 #pam_max_uid 0 # Template login attribute, default template user # (can be overriden by value of former attribute # in user's entry) #pam_login_attribute userPri...

First, my config: Solaris 8 PADL pam_ldap v165 and pam_nss v211 OpenSSH 3.7.1.p2 All compiled with gcc 2.95.3 that ships with the Sun companion CD LDAP PAM authentication is working well with OpenSSH, privsep is disabled, challenge-response authentication is enabled. I would like to turn on password aging, which seems to be well...

I noticed that when I migrated my users with the migrate_passwd.pl tool from PADL it didn't migrate the actual passwords (just the rest of the posixAccount info). I think I need to set the EXTENDED_SCHEMA variable and then try running the tool again. does anyone know what this should be? I actually thought there might be a migrate_shadow.pl tool that could accomplish this,...

I've also noticed that my SIP phones (snom [12]00) seem to deregister themselves after some time, and not be able to re-register until Asterisk is restarted. This problem only manifested with the latest CVS. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com

Has anyone tried the PADL identity server? It looks like it provides Active Dircectory, LDAP, and Kerberos. I'd love to here about people's experience with it. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

I have Samba 3.0.13 and LDAP 2.2.24 installed. I have placed the following directive in my slapd.conf file. TLSVerifyClient demand I have the PADL stuff configured and working fine. ldapsearch with -ZZ works fine. I even have the Idealx smbldap-tools working fine. Samba won't work though unless I set TLSVerifyClient try According to the slapd.conf man page, "try" causes a client certificate to be requested. If no client cert...

...the '/' used as directory separator loglevel 256 logfile /var/log/ldap.log # The LDAP version to use (defaults to 3 # if supported by client library) # ldap_version 3 # The distinguished name to bind to the server with. # Optional: default is to bind anonymously. #binddn cn=proxyuser,dc=padl,dc=com # The credentials to bind with. # Optional: default is no credential. # bindpw secret # The distinguished name to bind to the server with # if the effective user ID is root. Password is # stored in /etc/ldap.secret (mode 600) # rootbinddn cn=Manager,dc=ims-tpa,dc=com # The port. # Option...

...the '/' used as directory separator loglevel 256 logfile /var/log/ldap.log # The LDAP version to use (defaults to 3 # if supported by client library) # ldap_version 3 # The distinguished name to bind to the server with. # Optional: default is to bind anonymously. #binddn cn=proxyuser,dc=padl,dc=com # The credentials to bind with. # Optional: default is no credential. # bindpw secret # The distinguished name to bind to the server with # if the effective user ID is root. Password is # stored in /etc/ldap.secret (mode 600) # rootbinddn cn=Manager,dc=ims-tpa,dc=com # The port. # Optiona...

...arios XP and Debian Clients. After reading Chapter 12. (Identity Mapping) in the Samba-HOWTO is IDMAP_RID in couple with winbind an easy way to solve the problem with syncr. SID-UID/GID's on all Linux machines. Why should I use the "hard way" with the MS SFU 3.5 Schema extensions, PADL and so on - when IDMAP_RID seems to be so easy? Can anybody tell me something about the "deeper backgrounds" and which of both ist the best solution for us? Thanks and Best regards Steffen -- Mit freundlichen Gruessen Steffen Kolbe Andreas-Schubert-Str. 23 D-01062 Dresden --------...

Hi, I've migrated from an old samba installation (Samba as PDC) that used TDB backend for password. I've setup a box with ubuntu and samba 3 + ldap and I imported the old users. Old users works fine. I have problems with new users and machines. Old users works but they don't show up with smbldap-usershow command and I've problem in changing their passwords. If I check the ldap

I am going to have to find a fix for this problem or I'm going to have to quit using iconnect. About one call in 10 or so, iconnect's gateway gives me an error (console output appended below). So upon receiving the error, which as a 4XX error means, "Fatal," asterisk gives up and drops the call. But not iconnect!! The phone at the other end starts ringing, and rings

Hi list Does anyone know if there is a simple way to import standard linux users into the directory server? I have found some but they don't seem to be so flexible since I have to import from several servers into different ou's Regards Per Qvindesland

Hello people! I'd like to know about a practical guide which helps to migrate users from a perfect working Samba PDC running with tdbsam backend to a new backend to LDAP. Does "pdbedit -i xxx -e xxx" make all the job? My network is growing and I need a directory service to help find people so I'd like to see a LDAP server running well with Samba without rebuild my user

...y > different software. Don't symlink them. i deleted the link now. /etc/ldap.conf was not present before. I gave openldap > >> /etc/sssd/sssd.conf: >> -------------------- > > If you're using sssd, then you're not using (or shouldn't be using) the > PADL nss module. In that case, /etc/ldap.conf shouldn't even be present. > >> [domain/default] >> access_provider = ldap >> ldap_access_filter = memberOf=ou=YYYY,o=XXXX >> ldap_access_order = host > > ldap_access_filter should be an LDAP filter, not an OU. Howeve...

I'm having trouble getting tls working. It used to work until I changed the smb.conf file to to poing to a different host. I think I have tracked it down to ldap servers ssl cert issuer(CA). I keep getting errors like "self signed certificate in certificate chain" while using openssl commands or a ldapsearch w/ tls and debug mode. So my question is... Where can I put a

Hi guys/girls, How are you ? I'm looking at migrating my Samba-3.0.1 server which has the standard tdb backend to Samba-3.0.2a with an LDAP backend. I plan to use nss_ldap too. What would be the best way of doing this ? Any assistance would be greatly appreciated. Kindest regards David Wilson D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 83 267 7500 http://www.dcdata.co.za

...sss and ldap together. It's redundant. At >> best it will cause performance problems. >> >> Get rid of the ldap module and see if the system starts working >> correctly with just sssd. It's possible that right now sssd is >> correctly filtering users, but the PADL ldap module is providing them. > > This was a good hint (i should have got the idea myself). > Now i set > passwd: files ldap > shadow: files ldap > group: files ldap That's exactly the opposite of what I suggested. Your system is now using the deprecated PADL...

hi, I would like to know is it possible to make writing file to samba completely in kernel? I'm using a slow CPU (FA526) , and the memory copy is even slower. The reading performance is over 7 MB/s, with mmap and sendfile enabled, while writing is only 4-5 MB/s. Without mmap and sendfile, reading from samba is also about 4-5 MB/s. I use Oprofile to profile writing file to samba and found

Hello, I am in the process of migrating to passdb backend = ldapsam on debian unstable with the latest 3.0pre samba package. All users have a ldap sambaAccount object which was added by hand after using migrationtools from padl.com. Testing auth with smbclient works fine, however when using samba as a PDC from WinXP I can't log into the domain as I used to when "passdb backend = smbpasswd". However adding the machine to the domain seems to work. I haven't dug very deep into the problem, at this point I...