search for: passwordsettingscontain

UNOFFICIAL Thanks Tim, I was just wondering if my mistake was raising the functional-level. This confirms it. This apparently also broke backup. I cannot create the container, because the current schema (2003) doesn't support msDS-PasswordSettingsContainer. It seems impossible (and dangerous) to update the schema. I was given a reference to a thread about updating the schema but - the thread didn't contain the actual ldf files - the thread seemed to be an upgrade from 2003 R2 and I just have 2003. Is it possible to lower the level again?...

Hi Russell, Ah, right, of course you can't create the msDS-PasswordSettingsContainer object on a 2003 schema. The code doesn't actually care what type of object the Password Settings Container is as long as it exists. So the simplest short-term kludge to get back to a working AD would be to create the PSO container as an object that does exist in your schema, e.g. ldbadd -H...

...ednesday, 26 June, 2019 4:26 p.m. To: Tim Beale; Thamm, Russell Cc: sambalist; Andrew Bartlett Subject: Re: [Samba] Error determinigng PSOs in system [SEC=UNOFFICIAL] On 26/06/2019 02:42, Tim Beale via samba wrote: > Hi Russell, > > Ah, right, of course you can't create the > msDS-PasswordSettingsContainer object on a 2003 schema. > > The code doesn't actually care what type of object the Password > Settings Container is as long as it exists. So the simplest short-term > kludge to get back to a working AD would be to create the PSO > container as an object that does exist in y...

UNOFFICIAL Hi Today I demoted the temporary DC (Julius) on my network. The demotion failed. Failed to confirm we are not an RODC ... cannot find attribute msDS-isRODC So I shutdown Julius and forced the demotion. The domain seems stable until I tried LDAP authentication which fails. The samba log says: Error 32 determining PSOs in system. I can't seem to find anything on this error.

...this) but windows of course is older. Options include fixing the code (please file a bug and hopefully Tim can look at it) and creating the missing container. The template Samba uses is pretty simple: +dn: CN=Password Settings Container,CN=System,${DOMAINDN} +objectClass: top +objectClass: msDS-PasswordSettingsContainer +systemFlags: -1946157056 + The final option is to use a Samba version from before PSOs were implemented, which would be 4.8 I think, but that isn't a long-term option. I hope this helps! Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication...