search for: pam_sssd

...n the local host, and the Samba or AD server, have drifted from each other. There are a lot of very awkward and inconsistent NTP or chronyd settings out there, exacerbated when people point NTP to only one server and that server is inaccessible to one or more hosts. > > I must precise we use pam_sssd against Samba4/AD to authenticate. > > Here is my /etc/sssd/sssd.conf: > > > Hmm, I wonder if sssd is getting in the way ? No idea, we do not produce > sssd, can I suggest asking on the sssd-users mailing list. > > Rowland I've gotten pretty unhappy with "realmd&qu...

...gt; bit of a "mousetrap" game. When it works, you get the mouse. But if >> any of the many steps are even slightly worn, it becomes erratic or >> fails. >> > > > Update: In fact i succeeded in reseting user password from a linux workstation with kpasswd through pam_sssd. At the beginning I thought we were prompted directly for new password, but we had to first type in the old one before choosing a new one.

...What sort of Samba domain, NT4-style or AD >>> >>> Rowland >> We use AD style >> >> > > Try 'kpasswd' > > Rowland Yep I allready tried it, it ends with "kpasswd preauthentication failed getting initial ticket" I must precise we use pam_sssd against Samba4/AD to authenticate. Here is my /etc/sssd/sssd.conf: [sssd] config_file_version = 2 domains = mydomain.lan services = nss, pam default_domain_suffix = mydomain.lan [domain/mydomain.lan] id_provider = ad auth_provider = ad chpass_provider=ad access_provider = ad ldap_id_mapping =...

...> >>>> Rowland >>> We use AD style >>> >>> >> >> Try 'kpasswd' >> >> Rowland > > Yep I allready tried it, it ends with "kpasswd preauthentication > failed getting initial ticket" > I must precise we use pam_sssd against Samba4/AD to authenticate. > Here is my /etc/sssd/sssd.conf: Hmm, I wonder if sssd is getting in the way ? No idea, we do not produce sssd, can I suggest asking on the sssd-users mailing list. Rowland

...ssible to one or more hosts. > Allready logged via graphical UI, I had nothing in klist Running terminal as root, i did: kinit myuser and obtained a valid ticket. About the date time, all is correctly set up. Workstations and AD have exactly same date/time >>> I must precise we use pam_sssd against Samba4/AD to authenticate. >>> Here is my /etc/sssd/sssd.conf: >> >> Hmm, I wonder if sssd is getting in the way ? No idea, we do not produce >> sssd, can I suggest asking on the sssd-users mailing list. >> >> Rowland > I've gotten pretty unhapp...

...game. When it works, you get the mouse. But if >>> any of the many steps are even slightly worn, it becomes erratic or >>> fails. >>> >> >> >> > Update: In fact i succeeded in reseting user password from a linux > workstation with kpasswd through pam_sssd. > At the beginning I thought we were prompted directly for new password, > but we had to first type in the old one before choosing a new one. > kpasswd has nothing to do with sssd, it prompts for the old password, then the new password (twice), it then changes the users password. smbpa...

Le 13/05/2019 à 18:44, Rowland penny via samba a écrit : > On 13/05/2019 16:11, Julien TEHERY via samba wrote: >> Hi >> >> I'm trying to find a way to change user passwords from ubuntu client >> workstation on a samba4 domain. >> I tried in CLI from the client workstation (ubuntu 14.04) with: >> >> - smbpasswd -U $user >> >> => In

...get the mouse. But if >>>> any of the many steps are even slightly worn, it becomes erratic or >>>> fails. >>>> >>> >>> >>> >> Update: In fact i succeeded in reseting user password from a linux workstation with kpasswd through pam_sssd. >> At the beginning I thought we were prompted directly for new password, but we had to first type in the old one before choosing a new one. >> > kpasswd has nothing to do with sssd, it prompts for the old password, then the new password (twice), it then changes the users password....