search for: sambalogonhour

...hours before the actual restriction should kick in. At the time I thought that perhaps the problem was caused by Slackware Linux and it's timezone implementation of SAST (GMT+2). Since then I've experienced the same problem on SLES9 and Suse Linux 9.3. >From what I can see, the "sambaLogonHours" value is always set with GMT in mind. Because in South Africa we are at GMT+2 Samba enforces restrictions 2 hours before it should. For example if users should only denied login access at 16:00, Samba is denying them access at 14:00. I've looked all over and cannot find a solution to...

Hi all, I've been playing around with the sambaLogonHours attribute to lock down access from some users. This is the real scenario: 1. Admin user "ADM" wants to allow user "foo" only from 6am to 6pm, so he opens his favourite tool usrmgr.exe and set this restriction for user "foo". 2. Next day, some minutes before 8am user...

Hi, I'm using BRST timezone (Brazilian East), and AFAIK[1], sambaLogonHours stores it in GMT timezone. IIRC, the NT PDC is comparing with its local time. For example, if the user is allowed to log between 6am to 6pm, it will work with BRST timezone, even usrmgr.exe hours restriction is supposed to be in GMT time. However, when trying to log on a Samba machine, with LDAP...

...as password backend. The scripts smbldap-tools are used to create the accounts in the LDAP. I can add Windows XP machines to the domain without problems. But today, I tried to add a Windows NT Server SP6a machine to the domain, and there is the next error: smbldap_get_single_attribute: [sambaLogonHours] = [<does not exist>] [2007/12/19 14:38:03, 10] lib/smbldap.c:smbldap_make_mod(528) smbldap_make_mod: adding attribute |sambaLogonHours| value | FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF| [2007/12/19 14:38:03, 10] lib/smbldap.c:smbldap_make_mod(519) smbldap_make_mod: deleting attribu...

...baHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambamungeddial sambabadpasswordcount sambabadpasswordtime sambapasswordhistory modifyTimestamp sambalogonhours modifyTimestamp" [16/Nov/2004:10:36:50 -0500] conn=157 op=2 msgId=3 - RESULT err=0 tag=101 nentries=0 etime=0 [16/Nov/2004:10:36:50 -0500] conn=158 op=-1 msgId=-1 - fd=59 slot=59 LDAP connection from 172.16.59.205 to 172.16.59.50 [16/Nov/2004:10:36:50 -0500] conn=158 op=0 msgId=1 - BIND dn...

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp conn=327 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= # #conn=328 is made via nss_ldap # conn=328 fd=27 ACCEPT from PATH=/var//run/ldapi (PATH=/var//run/ldapi) conn=328 op=0 BIND dn="cn=Authenticate,o=example,c=xx" method=128 conn=328 op=0 BIND dn="cn=Authen...

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp uidNumber gidNumber homeDirectory loginShell gecos slapd[2332]: <= bdb_equality_candidates: (uid) not indexed slapd[2332]: conn=1090 op=12 SEARCH RESULT tag=101 err=0 nentries=1 text= slapd[2332]: conn=1090 op=13 SRCH base="dc=mydomain" scope=2 deref=0 filter="(&a...

...baHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Mar 18 17:08:50 mastok slapd[5569]: conn=131 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= Mar 18 17:09:00 mastok slapd[5569]: conn=131 fd=8 closed Mar 18 17:09:01 mastok slapd[5569]: conn=132 fd=8 ACCEPT from IP=127.0.0.1:33004 (IP=0.0.0.0:389) Mar 18 17:09:01 mastok slapd[5...

Hi All. Trying to use the file /samba-3.0.6/examples/LDAP/samba.schema I found that it has duplicate entries for atributetype > grep 1.3.6.1.4.1.7165.2.1.50 /usr/local/etc/openldap/schema/* /usr/local/etc/openldap/schema/samba.schema.new:attributetype ( 1.3.6.1.4.1.7165 .2.1.50 NAME 'sambaLogonHours' /usr/local/etc/openldap/schema/samba.schema.new:attributetype ( 1.3.6.1.4.1.7165 .2.1.50 NAME 'sambaPasswordHistory' Does anyone happen to know, which of those is wrong and to what value it should be changed? Thanks in advance, Alexei.

Hello samba users, Samba 3.0.6 comes with new samba.schema with new attributies but attributetype sambaPasswordHistory have the same OID with attributetype sambaLogonHours and slapd failed to start attributetype ( 1.3.6.1.4.1.7165.2.1.50 NAME 'sambaLogonHours' DESC 'Logon Hours' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42} SINGLE-VALUE ) attributetype ( 1.3.6.1.4.1.7165.2.1.50 NAME 'sambaPasswor...

...: jslittl uid: jslittl uidNumber: 1004 homeDirectory: /home/jslittl loginShell: /bin/bash gecos: System User sambaSID: S-1-5-21-1418864132-1159184377-506600700-3008 description: domain admin sambaKickoffTime: 0 sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000 00000000 sambaLogonHours: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF sambaAcctFlags: [U ] gidNumber: 512 sambaPrimaryGroupSID: S-1-5-21-1418864132-1159184377-506600700-512 sambaPwdMustChange: 2147483647 sambaPwdCanChange: 1116358396 sambaPwdLastSet: 1116358396 displayName: little, john sambaProfilePath: \\hrhdc01...

Hi, I'm trying to use the sambaUserWorkstations option to allow users to log on certain computers only. This option looks great... In fact it looks now a lot better than the 'ldap filter' one than was deprecated with samba 3.0.20... The fact is, if the sambaUserWorkstations option works well with machine names, it doesn't seem to work when specifying groups of machines.

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Jul 20 23:09:09 gamix slapd[6091]: conn=7 op=2 SEARCH RESULT tag=101 err=0 nentries=2 text= Jul 20 23:09:09 gamix smbd[6244]: [2005/07/20 23:09:09, 1] passdb/pdb_ldap.c:ldapsam_getsampwnam(1304) Jul 20 23:09:09 gamix smbd[6244]: ldapsam_getsampwnam: Duplicate entries for this use...

Hi! I have a problem according to the logonHours setting in my Samba Domain. Users are in LDAP, and everyone has a logonHours attribute, which could be: - login is possible at any time - login is only possible between 7AM and 12PM(mindnight), 7h-24h in 24 hours format, I'm going to use 24h format here in this post. Samba manual states than logonHours is a 168 bit mask, starting with Sunday

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp uidNumber gidNumber homeDirectory loginShell gecos Oct 8 21:54:37 sambaserver slapd[2572]: conn=1115 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 8 21:54:37 sambaserver slapd[2572]: conn=1115 op=3 SRCH base="sambaDomainName=RTS,dc=rtsbrasil,dc=com,dc=br" scope=...

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text= Sep 21 14:59:15 zeus smbd[2380]: [2005/09/21 14:59:15, 2] auth/auth.c:check_ntlm_password(312) Sep 21 14:59:15 zeus smbd[2380]: check_ntlm_password: Authentication for user [testuser] -&g...

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp uidNumber Jun 10 15:54:43 provider slapd[11306]: conn=70 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= Jun 10 15:54:43 provider slapd[11306]: conn=70 op=4 SRCH base="sambaDomainName=LDNSPL,dc=example,dc=com" scope=0 deref=0 filter="(objectClass=*)" Jun 10 15...

...e sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Sep 12 16:47:33 localhost slapd[31815]: conn=0 op=2 SEARCH RESULT tag=101 err=32 nentries=0 text= Sep 12 16:47:33 localhost slapd[31815]: conn=1 fd=11 ACCEPT from IP=127.0.0.1:32882 (IP=0.0.0.0:389) Sep 12 16:47:33 localhost slapd[31815]: conn=1 op=0 BIND dn="cn=Manager,dc=pan...

...mbaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours modifyTimestamp Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=3 SRCH base="dc=jonathanpoon" scope=2 deref=0 filter="(&(uid=jonathan)(objectClass=sambaSamAccount))" Jul 29 23:...

...t sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupS ID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sa mbaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory mo difyTimestamp sambaLogonHours modifyTimestamp uidNumber gidNumber homeDirectory loginShell gecos slapd[4698]: conn=1024 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= slapd[4698]: conn=1024 op=3 SRCH base="dc=mydomain" scope=2 deref=0 filter="(& (gidNumber=1359)(objectClass=sambaGroupMapping))"...