search for: sambapwdlastset

...132045192 - add: sambaPwdCanChange sambaPwdCanChange: 1132047279 - delete: sambaLMPassword sambaLMPassword: 60F9BE525098FB3917306D272A9441BB - delete: sambaNTPassword sambaNTPassword: 82ABE317EDABC40E2D3DF00A4E8C76AF - add: sambaNTPassword sambaNTPassword: BD4E5B924259E25B210B39F6F2AB3A27 - delete: sambaPwdLastSet sambaPwdLastSet: 1132045192 - add: sambaPwdLastSet sambaPwdLastSet: 1132047279 - replace: entryCSN entryCSN: 20051115093439Z#000001#00#000000 - replace: modifiersName modifiersName: cn=Manager,dc=elysion,dc=lan - replace: modifyTimestamp modifyTimestamp: 20051115093439Z - ERROR: No such attribute:...

...is working: # modify 1187006837 o=stars cn=sambamgr,ou=Managers,o=stars dn: uid=lacoste,ou=Users,ou=Accounts,o=stars changetype: modify replace: userPassword userPassword:: e1NTSEF9UFZSZk1zcTNoRlFuYWhGMzRWN1BZWE5BU3U0MHNVTWo= - replace: sambaPwdMustChange sambaPwdMustChange: 1218542837 - replace: sambaPwdLastSet sambaPwdLastSet: 1187006837 - replace: sambaLMPassword sambaLMPassword: 8d16f4badd1da493aad3b435b51404ee - replace: sambaNTPassword sambaNTPassword: b39a61f16a4e11fa80580241f1d4aae8 - replace: pwdChangedTime pwdChangedTime: 20070813120717Z - replace: entryCSN entryCSN: 20070813120717Z#000000#00#000...

...: sambaLMPassword sambaLMPassword: 0182BD0BD4444BF836077A718CCDF409 - add: sambaLMPassword sambaLMPassword: 39EAD569B79C7EA2C2265B23734E0DAC - delete: sambaNTPassword sambaNTPassword: 259745CB123A52AA2E693AAACCA2DB52 - add: sambaNTPassword sambaNTPassword: 8EC60ADEA316D957D1CF532C5841758D - delete: sambaPwdLastSet sambaPwdLastSet: 1277720109 - add: sambaPwdLastSet sambaPwdLastSet: 1277720798 - replace: modifiersname modifiersname: uid=adminsamba,XXXXXXXXXXX - replace: modifytimestamp modifytimestamp: 20100628102637Z - So, the Samba passwords are changed, but the unix password is not changed because the LDAP...

> > On Sat, 3 Jul 2004, Tilo Lutz wrote: > > > None of my acounts in ldap have set sambaPwdLastSet, even those > > > acounts which became disabled. If I have understand you right, > > > samba should not disable account if the attribute sambaPwdLastSet > > > is not defined in ldap? > On Mon, 2004-07-05 at 06:56, Gerald (Jerry) Carter wrote: > > If the attribut...

...ar 15 17:10:53 hurricane slapd[27056]: conn=29489 op=1 MOD dn="uid=pwreka,ou=people,ou=purwakarta,dc=indorama,dc=com" Mar 15 17:10:53 hurricane slapd[27056]: conn=29489 op=1 MOD attr=sambaPwdCanChange sambaPwdCanChange sambaPwdMustChange samb aPwdMustChange sambaLMPassword sambaNTPassword sambaPwdLastSet sambaPwdLastSet Mar 15 17:10:53 hurricane slapd[27056]: Entry (uid=pwreka,ou=people,ou=purwakarta,dc=indorama,dc=com), attribute 'sambaLMPas sword' cannot have multiple values Mar 15 17:10:53 hurricane slapd[27056]: entry failed schema check: attribute 'sambaLMPassword' cannot have...

...er, with smbldap-tools-0.9.8 SLES - 11.2 (For Samba, Separate System) samba-3.6.3-0.18.3 SLES - 10 (For LDAP Backend, Separate System) openldap2-2.3.19-18.7 The above setup is working fine and the password policies are all fine. Problem - If the user changes the password at the Windows Client sambaPwdLastSet changes date to the new date but the sambaPwdMustChange does not change to the next date, ie (sambaPwdLastSet + 90 Days). If the password is set in the command line by the administrator then everything is fine. How do I fix this issue, Please advise. Thanks AVIN

...NOT asked to change his or her password. (docs: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#id2586078) Then I tried using "net sam set pwdmustchangenow USERNAME yes" (which is I guess the native samba way of archiving this) and it DOES work, but by setting: sambaPwdLastSet=0 ! So the question: are the samba docs wrong, or is my samba wrong? I'm running samba 3.0.26a on suse linux enterprise server 9, sp3, maybe the docs are for more recent samba versions only? Regards, mj

...User description: System User userPassword: {crypt}x sambaSID: S-1-5-21-72881033-379349262-1855928443-5162 sambaPrimaryGroupSID: S-1-5-21-72881033-379349262-1855928443-513 sambaLogonTime: 1090859130 sambaLMPassword: D2C0998710B6D0D260086A4D2CF0CF0E sambaNTPassword: 0457C29D84903BB202DDD57B9958F67A sambaPwdLastSet: 1069686468 sambaAcctFlags: [NU ] ======================================================= It looks like the migration does create LM password and NT password. However, I cannot log in to my account unless I change my password. This is how my account look like after "smbldap-passwd...

...conn=327 op=1 SRCH attr=supportedControl conn=327 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=327 op=2 SRCH base="o=example,c=xx" scope=2 deref=0 filter="(&(uid=jdoe)(objectClass=sambaSamAccount))" conn=327 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFla...

Samba experts, Thanks to advice from this list, I am finally able to get smbpasswd to change ldap passwords for the Samba LM/NT passwords. However, I had to give write access to sambaPwdLastSet and sambaPwdCanChange attributes as well. Other Samba attributes don't seem to need write access. I have found plenty of examples with people assigning an ACL for sambaLMPassword and sambaNTPassword, but I haven't found examples that included other attributes such as sambaPwdLastSet a...

...changed but unixPassword isn't. Look at this openldap.log lines: Feb 12 07:50:28 apolo slapd[22826]: conn=698021 op=40 MOD dn="uid=teste,ou=Users,dc=domain" Feb 12 07:50:28 apolo slapd[22826]: conn=698021 op=40 MOD attr=sambaLMPassword sambaLMPassword sambaNTPassword sambaNTPassword sambaPwdLastSet sambaPwdLastSet See? My smb.conf have this ldap related options: passdb backend = ldapsam:ldap://apolo.domain idmap backend = ldapsam:ldap://apolo.domain ldap suffix = dc=domain ldap admin dn = cn=root,dc=domain ldap ssl = start_tls ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap...

...rom_samba3     user = s3db.getsampwnam(username) The machine LDAP data: # pc0027$, machines, nspuh.cz dn: uid=pc0027$,ou=machines,dc=nspuh,dc=cz uid: pc0027$ objectClass: account objectClass: sambaSamAccount sambaPwdMustChange: 2147483647 sambaAcctFlags: [W          ] sambaPwdCanChange: 1158129830 sambaPwdLastSet: 1158129830 displayName: PC0027$ sambaSID: S-1-5-21-..numbers here...-45023 When I delete this machine from LDAP, the problem occurs with another computer.. and with another.. I finally deleted all machine/computer accounts from LDAP to be able to process users.  What's wrong with the machi...

...ome reason it didn't work. If I run pdbedit -Lv -u jrolfe, I get: Password last set: Mon, 01 Jan 2007 03:00:00 EST Password can change: Mon, 08 Jan 2007 03:00:00 EST Password must change: never If I run ../smbldap-usershow jrolfe, I get: sambaPwdCanChange: 1183795200 sambaPwdLastSet: 1167638400 sambaPwdMustChange: 1167638400 The unix times converted to english are: Sat, 07 Jul 2007 08:00:00 GMT and Mon, 01 Jan 2007 08:00:00 GMT. So you can see that the dates do not match between pdbedit and smbldap-tools. This is really causing a problem because I am trying to set up a...

Hello, This must be set in LDAP: sambaPwdCanChange=1 ;or you will never be asked to change your password sambaPwdLastSet=0 sambaPwdMustChange=0; on my Suse this must be set too try it out for your machine And how you' ve been told the sambaMaxPwdAge must be set. Greetings Daniel -----Urspr?ngliche Nachricht----- Von: samba-bounces+mueller=tropenklinik.de@lists.samba.org [mailto:samba-bounces+mueller=tropenklini...

...y the stop button in vmware) and starting them up again i can see a delta in my ldap database: Before Power failure: ---------------------- uidNumber: 10000 sambaSID: S-1-5-21-2308582080-1758763575-3976210704-21000 sambaPwdCanChange: 1201212116 sambaNTPassword: C880093E1682DA079892FF7FF2AEA911 sambaPwdLastSet: 1201212116 After Power failure: ---------------------- uidNumber: 10005 sambaSID: S-1-5-21-2308582080-1758763575-3976210704-21010 sambaPwdCanChange: 1201260229 sambaNTPassword: 2446CE7E7D8B196756E40E80B5EC3A13 sambaPwdLastSet: 1201260229 I did not manually change those properties and i wonder...

...chaudev,dc=com adding new entry: cn=NextFreeUnixId,dc=itouchaudev,dc=com failed to add entry: unrecognized objectClass 'sambaUnixIdPool' at /usr/local/sbin/smbldap-populate line 388, <GEN1> line 7. adding new entry: uid=Administrator,ou=Users,dc=itouchaudev,dc=com failed to add entry: sambapwdlastset: attribute type undefined at /usr/local/sbin/smbldap-populate line 388, <GEN1> line 8. adding new entry: uid=nobody,ou=Users,dc=itouchaudev,dc=com failed to add entry: sambapwdlastset: attribute type undefined at /usr/local/sbin/smbldap-populate line 388, <GEN1> line 9. adding new entry...

..._server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client AC-2150 machine account AC-2150$ I have noticed that the new Windows 7 machines say the password has expired on the same date that is in "sambaPwdLastSet". I added the "X" attribute in sambaAcctFlags in an attempt to stop the accounts from expiring. Below is an ldif of a Windows 7 machine trust account dn: uid=ac-2150$,ou=computers,dc=domain,dc=local objectClass: top objectClass: account objectClass: posixAccount objectClass: sambaSa...

...rent attributes set than for adding users with the smbldap-useradd command. --- snip --- sambaAcctFlags: sambaHomeDrive: sambaHomePath: sambaKickoffTime: sambaLMPassword: sambaLogoffTime: sambaLogonScript: sambaLogonTime: sambaNTPassword: sambaPrimaryGroupSID: sambaProfilePath: sambaPwdCanChange: sambaPwdLastSet sambaPwdMustChange: --- snap --- Regards and Thanks for any help, G?tz -- G?tz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke at filmakademie.de Filmakademie Baden-W?rttemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung...

...t objectClass: sambaSamAccount cn: thorin$ uid: thorin$ uidNumber: 1004 gidNumber: 515 homeDirectory: /dev/null loginShell: /bin/false description: Computer gecos: Computer sambaSID: S-1-5-21-720590779-4203916555-4014520812-1003 displayName: THORIN$ sambaNTPassword: 4EC5FEF69FA166F519DF8A31631E1DB2 sambaPwdLastSet: 1304080571 sambaAcctFlags: [W ] ------------------------------------------------------------------------------------------- [2] Machine account from command #smbldap-useradd -W, with a corrected SID: ----------------------------------------------------------------------------------------...

...owAccount objectClass: sambaSamAccount objectClass: sambaSamAccount sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 displayName: Jason Shaw sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000 00000000 sambaPwdCanChange: 2 sambaAcctFlags: [UX] sambaPwdLastSet: 1159992792 sambaPwdMustChange: 1163880792 modifiersName: cn=Manager,dc=amiwest,dc=com modifyTimestamp: 20061004201312Z (some stuff cut) /etc/openldap/slapd.conf: access to attr=userPassword,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaPwdMustChange by self write by * a...