search for: sambaacctflags

...aDomainName sambaSID root at pdc:~# ldapsearch -xLLL -H ldapi:/// '(&(sambadomainname=*)(objectclass=sambadomain))' sambaDomainName sambaSID No such object (32) root at pdc:~# ldapsearch -xLLL -H ldapi:/// '(objectclass=sambasamaccount)' -b ou=arkhangelsk,dc=rugion,dc=ru sambaacctflags sambaSID dn: uid=root,ou=users,ou=arkhangelsk,dc=rugion,dc=ru sambaAcctFlags: [U ] sambaSID: S-1-5-21-1997676671-1552059010-3109710481-500 dn: uid=admin,ou=users,ou=arkhangelsk,dc=rugion,dc=ru sambaSID: S-1-5-21-1997676671-1552059010-3109710481-1001 sambaAcctFlags: [U ] dn: uid=...

Hello, I have a server with Samba(3.0.13-1.1)/OpenLDAP and sometimes my users get a D flag at sambaAcctFlags. There are some users that don?t have all the samba attributes yet. I would like to know why it happens. Which actions/attributes can tell to samba turn de D flag on? This is a ldif of a user that yesterday got a D flag: uid=fulano,ou=Users,dc=grad,dc=br dn: uid=fulano,ou=Users,dc=grad,dc=br ob...

...er userPassword: {crypt}x sambaSID: S-1-5-21-72881033-379349262-1855928443-5162 sambaPrimaryGroupSID: S-1-5-21-72881033-379349262-1855928443-513 sambaLogonTime: 1090859130 sambaLMPassword: D2C0998710B6D0D260086A4D2CF0CF0E sambaNTPassword: 0457C29D84903BB202DDD57B9958F67A sambaPwdLastSet: 1069686468 sambaAcctFlags: [NU ] ======================================================= It looks like the migration does create LM password and NT password. However, I cannot log in to my account unless I change my password. This is how my account look like after "smbldap-passwd ksun" to the original...

-----Ursprungliche Nachricht----- Von: Marian Chowanetz [mailto:mchowanetz@emmixx.de] Gesendet: Mittwoch, 14. Juli 2004 10:24 An: 'Jim C.' Betreff: AW: [Samba] Re: sambaAcctFlags automatically DUX when logon thanks for your help, jim. I'd already tried the re-joining with my test-machine. It didn't help. I found out that the idxldapaccounts-tool does not correctly change the UX/DUX flag. the smbldap-tool solved this problem (but not all problems). When I changed...

...en I created a new user with smbldap-useradd. I could repair the xfs file system and everything seemed fine. to test the system I've created a new user. but the new user cannot logon. "error: The system could not log you on..." I found that the new created user get now by default a sambaAcctFlags DUX not UX. when I change the flag to UX and try to logon the flag automatically switches to DUX. so I cannot logon. How can I solve this problem? only old users can logon. thanks marian

What should be the flag for PDC machine trust account? If I set to "S" then it will appear as "BDC" in NT server manager, if "W" then as "Workstation or server", if no machine trust then it will not appear on server manager list. --beast

...rugion,dc=ru -s sub > > '(&(sambadomainname=*)(objectclass=sambadomain))' sambaDomainName > > sambaSID > > > >> root at pdc:~# ldapsearch -xLLL -H ldapi:/// > >> '(objectclass=sambasamaccount)' -b ou=arkhangelsk,dc=rugion,dc=ru > >> sambaacctflags sambaSID > >> dn: uid=root,ou=users,ou=arkhangelsk,dc=rugion,dc=ru > >> sambaAcctFlags: [U ] > >> sambaSID: S-1-5-21-1997676671-1552059010-3109710481-500 > >> > >> dn: uid=admin,ou=users,ou=arkhangelsk,dc=rugion,dc=ru > >> sambaSID: S-...

...root@PDC samba]# pdbedit -L lvinay -v | grep -i flags Account Flags: [UX ] [root@BDC samba]# pdbedit -L lvinay -v | grep -i flag Account Flags: [ULX ] [root@PDC samba]# /usr/local/openldap/bin/ldapsearch -D 'cn=manager,dc=foo,dc=com,dc=ar' -w xxxx uid=user -x sambaAcctFlags sambaAcctFlags: [U X ] [root@BDC samba]# /usr/local/openldap/bin/ldapsearch -D 'cn=manager,dc=foo,dc=com,dc=ar' -w xxxx uid=user -x sambaAcctFlags sambaAcctFlags: [U X ] [root@PDC samba]# smbd -V Version 3.0.31 [root@BDC samba]# smbd -V Version 3.0.31 regards, DiegoWS...

...Password: 5D28B17651A6D0E4FBDB26A17E21D0C1 sambaNTPassword: 728AF3A1A793361485674B7B2833CEE7 sambaSID: S-1-5-21-3868333197-704855571-3977030669-3006 gecos: Computer,,,, cn: Computer sn: Computer loginShell: /bin/false gidNumber: 513 sambaPrimaryGroupSID: S-1-5-21-2139989288-483860436-2398042574-513 sambaAcctFlags: IW entryCSN: 20070307013727Z#000000#00#000000 modifiersName: cn=Manager,dc=<MY DOMAIN>,dc=com modifyTimestamp: 20070307013727Z I added this account using smbldap-useradd -w -i vault1 and had to change the gidNumber to 513 and also set the W sambaAcctFlags value. Can anyone help? Thanks,...

..._ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client AC-2150 machine account AC-2150$ I have noticed that the new Windows 7 machines say the password has expired on the same date that is in "sambaPwdLastSet". I added the "X" attribute in sambaAcctFlags in an attempt to stop the accounts from expiring. Below is an ldif of a Windows 7 machine trust account dn: uid=ac-2150$,ou=computers,dc=domain,dc=local objectClass: top objectClass: account objectClass: posixAccount objectClass: sambaSamAccount cn: ac-2150$ uid: ac-2150$ uidNumber: 1111 gidNumber...

...21-193596418-479643985-2333711390-513 mailLocalAddress: sgoodrich mail: sgoodrich@capecodhomefinder.com mail: suzanne@anchor-realestate.net mailHost: eastham.trec.us sambaLMPassword: secret sambaNTPassword: secret sambaPwdLastSet: 1117397780 sambaPwdMustChange: 1125951380 userPassword: {SSHA}secret sambaAcctFlags: [NUX] loginShell: /bin/false We're just about ready to put up a bounty on this one. Any ideas? -- Jacob Elder

...[<does not exist>] [2007/12/19 14:38:03, 10] lib/smbldap.c:smbldap_make_mod(528) smbldap_make_mod: adding attribute |sambaLogonHours| value | FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF| [2007/12/19 14:38:03, 10] lib/smbldap.c:smbldap_make_mod(519) smbldap_make_mod: deleting attribute |sambaAcctFlags| values | [DW ]| [2007/12/19 14:38:03, 10] lib/smbldap.c:smbldap_make_mod(528) smbldap_make_mod: adding attribute |sambaAcctFlags| value | [W ]| [2007/12/19 14:38:03, 5] lib/smbldap.c:smbldap_modify(1377) smbldap_modify: dn => [uid=windowsntldap $,ou=machines,ou=samba,d...

Migration was held in connection with the breakdown of the old server after setting up a new server stopped working to add windows pc to a domain root at pdc:/var/log/samba# cat /etc/samba/smb.conf [global] # Default options allow nt4 crypto = yes client ntlmv2 auth = no disable spoolss = yes dns proxy

...om dn: ou=people,dc=example,dc=com objectClass: organizationalUnit ou: people # root, people, example.com dn: uid=root,ou=people,dc=example,dc=com uid: root sambaSID: S-1-5-21-3527759599-3696857034-3584459987-500 sambaPrimaryGroupSID: S-1-5-21-3527759599-3696857034-3584459987-512 displayName: root sambaAcctFlags: [U ] objectClass: account objectClass: sambaSamAccount sambaPwdMustChange: 2147483647 sambaLMPassword: 63D2114DE42F744B30A84C4AFE5AFFFF sambaNTPassword: 5460FB29D247C383F63E1E3A417FC39B sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000 00000000 sambaPwdCanCha...

...dNumber: 10001 homeDirectory: /home/C1.VE/Administrator loginShell: /bin/false sambaSID: S-1-5-21-1230964018-1252349843-1944742870-500 sambaNTPassword: 259745CB123A52AA2E693AAACCA2DB52 sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000000000000 sambaPwdLastSet: 1225815211 sambaAcctFlags: [U ] userPassword: {SSHA}YP8U0rTihCaNlp83JlS+ZWJv4jyEFhH8 sambaProfilePath:: IA== dn: uid=Invitado,ou=people,dc=c1,c=ve,dc=xxxx objectClass: account objectClass: posixAccount objectClass: sambaSamAccount uid: Invitado cn: Invitado displayName: Invitado uidNumber: 10001 gidNumber: 10000...

...3" loginShell: /bin/sh shadowMin: 1 shadowMax: 99999 shadowWarning: 14 sambaPwdMustChange: 1800000000 gidNumber: 112 sambaPrimaryGroupSID: S-1-5-21-3371203057-3264423045-2392767973-1225 uidNumber: 5248 sambaSID: S-1-5-21-3371203057-3264423045-2392767973-11496 sambaProfilePath: \\WILMA2\profile sambaAcctFlags: [UX ] The same user monday morning: # alexander-cristea, kl-1g3, people, wms-hn.de dn: uid=alexander-cristea,ou=kl-1g3,ou=people,dc=wms-hn,dc=de objectClass: posixAccount objectClass: shadowAccount objectClass: inetOrgPerson objectClass: person objectClass: organizationalPerson objectClass...

...nt cn: thorin$ uid: thorin$ uidNumber: 1004 gidNumber: 515 homeDirectory: /dev/null loginShell: /bin/false description: Computer gecos: Computer sambaSID: S-1-5-21-720590779-4203916555-4014520812-1003 displayName: THORIN$ sambaNTPassword: 4EC5FEF69FA166F519DF8A31631E1DB2 sambaPwdLastSet: 1304080571 sambaAcctFlags: [W ] ------------------------------------------------------------------------------------------- [2] Machine account from command #smbldap-useradd -W, with a corrected SID: ------------------------------------------------------------------------------------------- dn: uid=thorin$,ou=Comp...

...hange it. Well, it doesn't work. Sample: machine with random name was added to domain and afterwards changed the PCs name. # smbldap-usershow.pl changed-name$ dn: uid=ml-lit0tylgqgnp$,ou=Computers,dc=my,dc=domain cn: ml-lit0tylgqgnp$ sn: ml-lit0tylgqgnp$ uid: CHANGED-NAME$ uidNumber: 1285 ... sambaAcctFlags: [UW ] displayName: CHANGED-NAME$ So results: * only uid and displayname are changed. * I don't understand why the new name is written is UPPER CASE. Machine name is lower case in windows... * Users can't login on that machine, because machine account has failed. * sambaacctFlags:...

...yName: bart sambaPrimaryGroupSID: S-1-5-21-3991578539-3149662252-1894531253-515 sambaSID: S-1-5-21-3991578539-3149662252-1894531253-101524 gidNumber: 515 loginShell: /bin/false homeDirectory: /dev/null uid: bart$ cn: bart uidNumber: 50262 sambaPwdCanChange: 1196710001 sambaPwdMustChange: 1204486001 sambaAcctFlags: [WX ] sambaPwdLastSet: 1238649797 # search result search: 2 result: 0 Success mfg sven

...5-21-2532083711-3846753250-2864659012-2328 sambaPrimaryGroupSID: S-1-5-21-2532083711-3846753250-2864659012-513 sambaPwdCanChange: 1075936258 sambaPwdMustChange: 2147483647 sambaLMPassword: B28511D60D92E507E917F8D6FA472D2C sambaNTPassword: E204FFF6A3487B4966896293ACC28B9B sambaPwdLastSet: 1075936258 sambaAcctFlags: [U ] objectClass: sambaSamAccount objectClass: account userPassword:: e1NTSEF9THJlaGg3MDNCTUJkR0h6QjVENE5Fa2tsZnhTUGdvQXM= How can I add more parameters using smbpasswd command, I would like to add also: objectClass: posixAccount objectClass: shadowAccount etc Or wich one is the w...