search for: setpassword

I've a script 'infrastructure' that manage password propagation between some domains/password sources. When, in my AD domains, i ''consume'' a passord caming from another domain, i run: samba-tool user setpassword ${USER} --option="check password script"="" --newpassword="$mypassword" and the script exit with status 0 and print 'Changed password OK', but sometimes does not update PdwLastSet, and so users (if password are expired) cannot login, eg, with ssh (pam/winbind)...

I resend this: > I've a script 'infrastructure' that manage password propagation between > some domains/password sources. > > When, in my AD domains, i ''consume'' a passord caming from another > domain, i run: > > samba-tool user setpassword ${USER} --option="check password script"="" --newpassword="$mypassword" > > and the script exit with status 0 and print 'Changed password OK', but > sometimes does not update PdwLastSet, and so users (if password are > expired) cannot login, eg, wi...

...39;ve a script 'infrastructure' that manage password propagation > > between > > some domains/password sources. > > > > When, in my AD domains, i ''consume'' a passord caming from another > > domain, i run: > > > > samba-tool user setpassword ${USER} --option="check password > > script"="" --newpassword="$mypassword" > > > > and the script exit with status 0 and print 'Changed password OK', > > but > > sometimes does not update PdwLastSet, and so users (if password are...

Hello, I am stuck with a error when setting password for a couple of specific users. This error makes impossible to set the password for the affected users. In Windows I get an operation error but the samba-tool output is more informative: samba-tool user setpassword user2 --newpassword= New Password: ndr_pull_error(11): Pull bytes 2 (../librpc/ndr/ndr_basic.c:103) ERROR: Failed to set password for user 'user2': (1, 'setup_supplemental_field: failed to pull old supplementalCredentialsBlob: NT_STATUS_BUFFER_TOO_SMALL') File "/opt/samba4/li...

.... > Actually, that didn't quite work. It did change the domain password, but didn't reset the > expiration days. So today, when the previous password was set to expire. My account was locked > out. I had to log onto the AD/DC as the Domain Administrator and do 'samba-tool user setpassword'. Seems also to me that 'samba-tool user passwd' and 'samba-tool user setpasswd' does not set password change timestamp, so users remain in 'password expired state'. I'll try to debug that issue better in next days, i hope... -- dott. Marco Gaiarin GNU...

root at dc:~# samba-tool user setpassword Administrator New Password: Retype Password: ERROR: Failed to set password for user 'Administrator': (34, "ldb_search: invalid basedn '(null)'") root at dc:~# Il 31/03/2019 19:35, Rowland Penny via samba ha scritto: > samba-tool user setpassword Administrator

Hi, I've detected a very strange behavior on samba 4.8.9 and 4.10.6. After setting a new password for a user with samba-tool the old password remains valid. The user can use both passwords. After setting the third password become the first password invalid: :~ # samba-tool user setpassword extisadm --newpassword=12AbCdEf Changed password OK :~ # samba-tool user setpassword extisadm --newpassword=12AbCdEG Changed password OK :~ # smbclient -L admin -U extisadm%12AbCdEf Sharename Type Comment --------- ---- ------- sysvol Disk...

I optaing this ERROR: Failed to set password for user 'administrator': (34, "ldb_search: invalid basedn '(null)'") Il 31/03/2019 18:32, Stefan Kania via samba ha scritto: > As user "root" do "samba-tool user setpassword administrator" that's it ;-) > > Am 31.03.19 um 17:48 schrieb marco pirola via samba: >> I lost the password of the user Administrator; whath should i do? >> >> >> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.as...

...Password changes and Password resets are logged under dsdb_password_audit and a JSON representation is logged under the dsdb_password_json_audit. I have enabled log level = 0 dsdb_password_json_audit:4@/var/log/samba/password.log and then tried a password change using samba-tool user setpassword <user> but no log entry was added. I wonder if samba-tool generated password changes aren't logged because it wasn't generated by one of the AD RPC calls. I am trying to detect if some rogue sysadmin is changing passwords. Thanks in advance.

...t; On Mon, 26 Mar 2018 08:08:53 +0200 Michael Wandel <m.wandel at t-online.de> wrote: > > > > Am 26.03.2018 um 06:31 schrieb Mark Foley via samba: > > > As a normal user, I want to change my Domain Password. I've tried: > > > > > > $ samba-tool user setpassword myuserId --newpassword='mynewpassword' > > > > > > but get the error: > > > > > > ltdb: tdb(/var/lib/samba/private/sam.ldb): tdb_open_ex: could not open file > > > /var/lib/samba/private/sam.ldb: Permission denied > > > > > >...

...100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > Seems a bit strange to me... > > Seems a bug to me, so i've fired up: > > https://bugzilla.samba.org/show_bug.cgi?id=13114 > > > Thanks. > I normally only use 'samba-tool user setpassword --random-password' when I create a user that will never log in and then use kerberos with a program e.g. squid. I usually also set the password to never expire. So, the question has to be, just what do you need to sync the passwords to ? Rowland

...r' command allow manipulation of computer accounts including creating a new computer and resetting the password. This allows an 'offline join' of a member server or workstation to the Samba AD domain." Unfortunatly I dont find any example for * resetting the password (the "setpassword" from user command doesnt work, maybe simply --password?) * creating a computer with a given machine password (maybe simply --password,too ?) * reading the machine password from AD (there i found some old variant which didnt work, tested with Win81-clients) * perform an offli...

Hi! I am currently using Samba4 Alpha13 but I have not been able to change a users password. I curently can add a user using ldbadd and a ldif file but I would like to know the recommended way of changing a users password. It would be nice if it could be done from the adminstrator account so that you do not need to know the original password. Thanks for the help! MS

...untu client workstation on a samba4 domain. I tried in CLI from the client workstation (ubuntu 14.04) with: - smbpasswd -U $user => In this case, password seemed to be updated, but "wbinfo -a" didn't worked with the new password, the old one was still active. - samba-tool user setpassword $user => In this case i got a "ldb_search: /invalid basedn '(null)'/" What's the proper way to change the users password from the linux clients in a samba4 domain? Thanks for your help

Hi, I was wondering if it is possible to use something like samba-tool user setpassword ... -k yes on a domain member if one has kerberos tickets for an admin account. That does not seem to work for me, as the above command appears to try to write to the database directly... ltdb: tdb(/var/lib/samba/private/sam.ldb): tdb_open_ex: could not open file /var/lib/samba/private/sam.ldb: N...

...d_change_at_next_login_req=opts.must_change_at_next_login) File "/usr/local/samba/lib/python2.5/site-packages/samba/samdb.py", line 133, in newuser force_password_change_at_next_login_req) File "/usr/local/samba/lib/python2.5/site-packages/samba/samdb.py", line 172, in setpassword assert(len(res) == 1) AssertionError The user object has been created anyway, but it is still unactive: debiantest:~# smbclient //localhost/netlogon -Udemo1%S4password Connection to \\localhost\netlogon failed - NT_STATUS_LOGON_FAILURE Using windows dsa.msc to create the user, I got a NT_STA...

Hi, my samba4 Administrator password has expired and I cannot change it. I tried: [root at host] {~} > samba-tool user setpassword Administrator New Password: Changed password OK [root at host] {~} > kinit administrator at DOMAINS's Password: kinit: Password incorrect Typing the right password. The password is still the old one and expired. The password doesn't even change when using kpasswd. Any ideas what I ca...

Hi, we work on authenticating computers via 802.1x with Samba AD as backend of Radius. Everything looks promising. We ask ourselves if it is a good idea to use the machine account which are created by joining a computer to the AD. We can change machine account passwords with `samba-tool user setpassword COMPUTERNAME$` This works, we have SUCCESS with `eapol_test` on the Radius server. The question is if it is save to set and use the machine account password. Microsoft says a lot about this password: https://adsecurity.org/?p=280 Does someone has an opinion or/and experience on that? Tobias...

...from the client workstation (ubuntu 14.04) with: >> >> - smbpasswd -U $user >> >> => In this case, password seemed to be updated, but "wbinfo -a" >> didn't worked with the new password, the old one was still active. >> >> - samba-tool user setpassword $user >> => In this case i got a "ldb_search: /invalid basedn '(null)'/" >> >> >> What's the proper way to change the users password from the linux >> clients in a samba4 domain? >> >> Thanks for your help >> > What sort o...

...S-AD so cannot check it. >> >> - Kees. > Not answering for Andrew, but just wondering aloud :-) > > Could it be that it changes the password in a different way if the > password has expired. In a similar way that 'samba-tool user' has > 'password' and 'setpassword'. > > Rowland I have been thinking during the day about this matter, after I replied to Andrew this morning. Although I am quite convinced I have seen it working in the past, looking at it and thinking about it now, convinces me more and more that that cannot be the case. It is quite...