search for: queryuser

...C=tld > > dn: CN=Policies,CN=System,DC=ad,DC=mydomain,DC=tld > > ... > > AS I said, you can use rpcclient to do this: > > RPCLOOKUPID=$(rpcclient -P -c "lookupnames $USER" dc1) > USERDCID=$(echo "$RPCLOOKUPID" | grep -e '[0-9]\{4,9\} ' -o) > QUERYUSER=$(rpcclient -P -c "queryuser $USERDCID" dc1) > EXPDATE=$(echo "$QUERYUSER" | grep 'Password must change Time' | cut -d > ":" -f 2,3,4,5 | sed -e 's/^[[:space:]]*//') > > If I feed my name into this, I get: > > Thu, 14 Sep 30828 03:48:0...

This seems to work for maxPwdAge ldapsearch -LLL -Q -s base -h ad.mydomain.tld -b dc=ad,dc=mydomain,dc=tld maxPwdAge now I just need to query a users pwdLastSetq I tried the commands above but am not getting anything. I tried looking at the ungrepped output but I don't see how to link the pwdLastSet with any user. I get a long list. I think I'm looking for dn: and a matching pwdLastSet?

...Meetings,CN=System,DC=ad,DC=mydomain,DC=tld > dn: CN=Policies,CN=System,DC=ad,DC=mydomain,DC=tld > ... AS I said, you can use rpcclient to do this: RPCLOOKUPID=$(rpcclient -P -c "lookupnames $USER" dc1) USERDCID=$(echo "$RPCLOOKUPID" | grep -e '[0-9]\{4,9\} ' -o) QUERYUSER=$(rpcclient -P -c "queryuser $USERDCID" dc1) EXPDATE=$(echo "$QUERYUSER" | grep 'Password must change Time' | cut -d ":" -f 2,3,4,5 | sed -e 's/^[[:space:]]*//') If I feed my name into this, I get: Thu, 14 Sep 30828 03:48:05 BST Which is understandab...

...C=tld > > dn: CN=Policies,CN=System,DC=ad,DC=mydomain,DC=tld > > ... > > AS I said, you can use rpcclient to do this: > > RPCLOOKUPID=$(rpcclient -P -c "lookupnames $USER" dc1) > USERDCID=$(echo "$RPCLOOKUPID" | grep -e '[0-9]\{4,9\} ' -o) > QUERYUSER=$(rpcclient -P -c "queryuser $USERDCID" dc1) > EXPDATE=$(echo "$QUERYUSER" | grep 'Password must change Time' | cut -d > ":" -f 2,3,4,5 | sed -e 's/^[[:space:]]*//') > > If I feed my name into this, I get: > > Thu, 14 Sep 30828 03:48:0...

...ies,CN=System,DC=ad,DC=mydomain,DC=tld >> > ... >> >> AS I said, you can use rpcclient to do this: >> >> RPCLOOKUPID=$(rpcclient -P -c "lookupnames $USER" dc1) >> USERDCID=$(echo "$RPCLOOKUPID" | grep -e '[0-9]\{4,9\} ' -o) >> QUERYUSER=$(rpcclient -P -c "queryuser $USERDCID" dc1) >> EXPDATE=$(echo "$QUERYUSER" | grep 'Password must change Time' | cut -d >> ":" -f 2,3,4,5 | sed -e 's/^[[:space:]]*//') >> >> If I feed my name into this, I get: >> >> T...

...but haven't yet noticed any postings or correspondence. I have set up a a Samba PDC and have mapped shares, authenticated users, blah blah blah, .... everything seems to work fine. I checked with 'rpcclient' to see what sort of information is returned from 'rpcclient -c "queryuser [rid]" [server]' and did notice 'logon_hrs' and 'Kickoff Time" fields returned so I assumed I could specifiy times during a day when a user can/cannot logon to the domain. I then tried using the standard Windows tools "i.e. User Manager for Domains" to speci...

...ain,DC=tld >>> > ... >>> >>> AS I said, you can use rpcclient to do this: >>> >>> RPCLOOKUPID=$(rpcclient -P -c "lookupnames $USER" dc1) >>> USERDCID=$(echo "$RPCLOOKUPID" | grep -e '[0-9]\{4,9\} ' -o) >>> QUERYUSER=$(rpcclient -P -c "queryuser $USERDCID" dc1) >>> EXPDATE=$(echo "$QUERYUSER" | grep 'Password must change Time' | cut -d >>> ":" -f 2,3,4,5 | sed -e 's/^[[:space:]]*//') >>> >>> If I feed my name into this, I get: &gt...

...trying to find out if the users password has expired or > > is near to, you can use rpcclient for this. > > I did the following: > > # rpcclient -U "" -N 192.168.0.2 > rpcclient $> enumdomusers > : > user:[mark] rid:[0x457] > : > rpcclient $> queryuser 0x457 > User Name : mark > Full Name : Mark Foley > (empty lines removed) > Logon Time : Thu, 29 Mar 2018 17:12:54 EDT > Logoff Time : Wed, 31 Dec 1969 19:00:00 EST > Kickoff Time :...

On Fri, 30 Mar 2018 20:19:02 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > > On Wed, 28 Mar 2018 20:14:00 +1300 Andrew Bartlett > > <abartlet at samba.org> wrote: > > > > > > On Wed, 2018-03-28 at 03:09 -0400, Mark Foley via samba wrote: > > > > > > > > Actually, that didn't quite work. It did change the

...t for this. > > > > > > > > I did the following: > > > > > > # rpcclient -U "" -N 192.168.0.2 > > > rpcclient $> enumdomusers > > > : > > > user:[mark] rid:[0x457] > > > : > > > rpcclient $> queryuser 0x457 > > > User Name : mark > > > Full Name : Mark Foley > > > (empty lines removed) > > > Logon Time : Thu, 29 Mar 2018 17:12:54 > > > EDT Logoff Time : Wed, 31 Dec 1969 19:00:00 EST...

...wd does't work as before (and as I wish), when connecting to remote Windows2000 domain controller. Below are some tests and outputs, which show the command outputs. In both cases samba is compiled from original sources. OS - Debian testing and verified on Ubuntu. RPCLIENT: ./rpcclient -c 'queryuser 0x2270' -U admin%password PDC 3.0.14a returns neccessary user data, like: ==== User Name : ... ... <skip> ... logon_hrs[0..21]... ==== 3.0.21a returns: === result was NT_STATUS_NONE_MAPPED === (other tested rpclient commands works as expected) SMBPASSWD: in ver...

...or > > > is near to, you can use rpcclient for this. > > > > > I did the following: > > > > # rpcclient -U "" -N 192.168.0.2 > > rpcclient $> enumdomusers > > : > > user:[mark] rid:[0x457] > > : > > rpcclient $> queryuser 0x457 > > User Name : mark > > Full Name : Mark Foley > > (empty lines removed) > > Logon Time : Thu, 29 Mar 2018 17:12:54 EDT > > Logoff Time : Wed, 31 Dec 1969 19:00:00 EST > >...

...on settings? > > If you are trying to find out if the users password has expired or is > near to, you can use rpcclient for this. > > Rowland I did the following: # rpcclient -U "" -N 192.168.0.2 rpcclient $> enumdomusers : user:[mark] rid:[0x457] : rpcclient $> queryuser 0x457 User Name : mark Full Name : Mark Foley (empty lines removed) Logon Time : Thu, 29 Mar 2018 17:12:54 EDT Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 31 Dec 1969 19:00:00 E...

On Tue, 28 Mar 2017 16:48:24 +0100 Rowland Penny wrote: > > On Tue, 28 Mar 2017 11:23:23 -0400 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > It seems like there is no endpoint to this problem! After changing > > user 'mark's password, the ldbsearch no longer works with the -k yes > > parameter: > > > > $ /usr/bin/ldbsearch

...see what happens. The rpcclient output shows no indication that the user is locked out. The logon time is shown at 10:03AM today, but I was unable to log then. Is there a better tool than rpcclient that will give lockout status? Does anyone have any idea why this is happening? rpcclient $> queryuser 0x457 User Name : myuser Logon Time : Thu, 05 Apr 2018 10:03:45 EDT Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 31 Dec 1969 19:00:00 EST Password last set Time : Thu, 05 Apr...

...t; > > > I did the following: > > > > > > > > # rpcclient -U "" -N 192.168.0.2 > > > > rpcclient $> enumdomusers > > > > : > > > > user:[mark] rid:[0x457] > > > > : > > > > rpcclient $> queryuser 0x457 > > > > User Name : mark > > > > Full Name : Mark Foley > > > > (empty lines removed) > > > > Logon Time : Thu, 29 Mar 2018 17:12:54 > > > > EDT Logoff Time : Wed,...