search for: scope_subtree

...they run fine on the PDC they end with error on the BDC. Here is the minimal example that behave this way: import ldap LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" l = ldap.initialize(LDAP_URI, trace_level=1) entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) print(entries) it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation unavailable without authentication', 'desc': 'Operations error'} What is very disturbing is that the equivalent using the ldapsearch command works well (ldapsearch -x -H ldapi://%2F...

Am 16.07.2015 um 17:18 schrieb Rowland Penny: > On 16/07/15 13:27, Reindl Harald wrote: >> >> Am 16.07.2015 um 14:02 schrieb Rowland Penny: >>> /etc/hosts should be: >>> >>> 127.0.0.1 localhost.localdomain localhost >> >> uhm no - you want 127.0.0.1 normally resolved to localhost and hence >> 127.0.0.1 localhost

...in run outf=self.outf, errf=self.errf) File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 79, in __init__ self.domain_netbios = self.find_netbios() File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 115, in find_netbios scope=SCOPE_SUBTREE, attrs=["nETBIOSName"]) I did not get any hits in the changelog when I did brief searching for that error. Does anyone know what has changed in regards to this tool? What do I need to add for appropriate authentication (I tried using the --username/password and --username2/password2 fla...

...in run outf=self.outf, errf=self.errf) File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 79, in __init__ self.domain_netbios = self.find_netbios() File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 115, in find_netbios scope=SCOPE_SUBTREE, attrs=["nETBIOSName"]) All the other commands noted above run without issue. I used "samba-tool visual reps" and found that for some DSAs that, each DC thinks it has no communication to the others. For example, this is some of the output from DC3: RepsFrom objects for CONF...

....errf) > File "/usr/lib64/python2.6/site-packages/samba/netcmd/ldapcmp.py", line > 80, in __init__ > self.server_names = self.find_servers() > File "/usr/lib64/python2.6/site-packages/samba/netcmd/ldapcmp.py", line > 106, in find_servers > scope=SCOPE_SUBTREE, expression="(objectClass=computer)", attrs=["cn"]) > > On the other one, which is the one with more group than the other: > dc00:~# samba-tool ldapcmp ldap://dc00.ad.dgfip.lan > ldap://dc20.ad.dgfip.lan domain > ERROR(ldb): uncaught exception - ldb_wait: Time lim...

...run outf=self.outf, errf=self.errf) File "/usr/lib64/python2.6/site-packages/samba/netcmd/ldapcmp.py", line 80, in __init__ self.server_names = self.find_servers() File "/usr/lib64/python2.6/site-packages/samba/netcmd/ldapcmp.py", line 106, in find_servers scope=SCOPE_SUBTREE, expression="(objectClass=computer)", attrs=["cn"]) On the other one, which is the one with more group than the other: dc00:~# samba-tool ldapcmp ldap://dc00.ad.dgfip.lan ldap://dc20.ad.dgfip.lan domain ERROR(ldb): uncaught exception - ldb_wait: Time limit exceeded (3) File &...

...in run outf=self.outf, errf=self.errf) File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 79, in __init__ self.domain_netbios = self.find_netbios() File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 115, in find_netbios scope=SCOPE_SUBTREE, attrs=["nETBIOSName"]) > If it fails, please tell os your: > > OS? All 3 DCs are Ubuntu 18.04. > Content of > > /etc/hosts # names that resolve to me 127.0.0.1 localhost.localdomain localhost 10.52.0.53 dc3.domain.local dc3.otherinternaldomain.local dc3 # ldbsea...

...;> Here is the minimal example that behave this way: >> >> import ldap >> LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >> >> l = ldap.initialize(LDAP_URI, trace_level=1) >> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >> print(entries) >> >> it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation >> unavailable without authentication', 'desc': 'Operations error'} >> >> >> What is very disturbing is that the equivalent using the...

Hello, I'm writing in regards to this issue I opened on GitHub: https://github.com/python-ldap/python-ldap/issues/275 I am able to successfully use ldapsearch to query my Samba 4.9.4-Debian DC: ldapsearch -LLL -Y GSSAPI -H ldap://samba-dc.ad.example.com -b "dc=ad,dc=example,dc=com" "(objectClass=user)" "sAMAccountName" However, when I try to use python-ldap I

..."/usr/lib64/python2.6/site-packages/samba/netcmd/ldapcmp.py", line >> 80, in __init__ >> self.server_names = self.find_servers() >> File "/usr/lib64/python2.6/site-packages/samba/netcmd/ldapcmp.py", line >> 106, in find_servers >> scope=SCOPE_SUBTREE, expression="(objectClass=computer)", >> attrs=["cn"]) >> >> On the other one, which is the one with more group than the other: >> dc00:~# samba-tool ldapcmp ldap://dc00.ad.dgfip.lan >> ldap://dc20.ad.dgfip.lan domain >> ERROR(ldb): uncaught e...

...gt;> >>>> import ldap >>>> LDAP_URI = >>>> "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >>>> >>>> l = ldap.initialize(LDAP_URI, trace_level=1) >>>> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >>>> print(entries) >>>> >>>> it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation >>>> unavailable without authentication', 'desc': 'Operations error'} >>>> >>>> >>>>...

...; with error on the BDC. > Here is the minimal example that behave this way: > > import ldap > LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" > > l = ldap.initialize(LDAP_URI, trace_level=1) > entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) > print(entries) > > it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation > unavailable without authentication', 'desc': 'Operations error'} > > > What is very disturbing is that the equivalent using the ldapsearch > command wor...

...lp = sambaopts.get_loadparm() creds = credopts.get_credentials(lp, fallback_machine=True) samdb = SamDB(url=H, session_info=system_session(), credentials=creds, lp=lp) domain_dn = samdb.domain_dn() res = samdb.search(domain_dn, scope=ldb.SCOPE_SUBTREE, expression=("(&(objectClass=user)(userAccountControl:%s:=%u))" % (ldb.OID_COMPARATOR_AND, dsdb.UF_NORMAL_ACCOUNT)), attrs=["samaccountname"]) if (len(res) == 0):...

...f, errf=self.errf) > File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 79, in __init__ > self.domain_netbios = self.find_netbios() > File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 115, in find_netbios > scope=SCOPE_SUBTREE, attrs=["nETBIOSName"]) > > I did not get any hits in the changelog when I did brief searching for that error. > > Does anyone know what has changed in regards to this tool? What do I need to add for appropriate authentication (I tried using the --username/password and --usern...

> Do you have users in /etc/passwd ? I only have original debian system users > If so, are you trying to add one of these users to an AD group ? no

> > Okay ... looks like this time it worked as expected in the first try. > > You sure about that ? > You used samba-tool to add the SPN with 'NFS', yet the SPN's are shown > with 'nfs'. > This could just be down to using 'net to create the keytab, try > 'samba-tool domain exportkeytab /etc/krb5.keytab' instead Since AD comes from the

...find_samaccount Jun 13 12:41:36 datasrv winbindd[582]: [2024/06/13 12:41:36.208633, 0, pid=582, effective(0, 0), real(0, 0)] lib/util/util_runcmd.c:355(samba_runcmd_io_handler) Jun 13 12:41:36 datasrv winbindd[582]: /usr/sbin/samba-gpupdate:???? res = samdb.search(samdb.get_default_basedn(), ldb.SCOPE_SUBTREE, Jun 13 12:41:36 datasrv winbindd[582]: [2024/06/13 12:41:36.208650, 0, pid=582, effective(0, 0), real(0, 0)] lib/util/util_runcmd.c:355(samba_runcmd_io_handler) Jun 13 12:41:36 datasrv winbindd[582]: /usr/sbin/samba-gpupdate: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Jun 13 12...

...f, errf=self.errf) > File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 79, in __init__ > self.domain_netbios = self.find_netbios() > File "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", line 115, in find_netbios > scope=SCOPE_SUBTREE, attrs=["nETBIOSName"]) try running this on each of the DC's: ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b 'CN=Partitions,CN=Configuration,dc=domain,dc=local' -s sub '(nETBIOSName=*)' nETBIOSName It should return the domain name. > # names that r...

...l example that behave this way: >>> >>> import ldap >>> LDAP_URI = "ldapi://%2fvar%2flib%2fsamba%2fprivate%2fldap_priv%2fldapi" >>> >>> l = ldap.initialize(LDAP_URI, trace_level=1) >>> entries = l.search_s('dc=mon,dc=dom', ldap.SCOPE_SUBTREE) >>> print(entries) >>> >>> it ends with: ldap.OPERATIONS_ERROR: {'info': '00002020: Operation >>> unavailable without authentication', 'desc': 'Operations error'} >>> >>> >>> What is very disturbing is t...

...gt; File > "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", > line 79, in __init__ > self.domain_netbios = self.find_netbios() > File > "/usr/lib/python2.7/dist-packages/samba/netcmd/ldapcmp.py", > line 115, in find_netbios > scope=SCOPE_SUBTREE, attrs=["nETBIOSName"]) > > All the other commands noted above run without issue. > > I used "samba-tool visual reps" and found that for some DSAs > that, each DC thinks it has no communication to the others. > For example, this is some of the output from D...