search for: setup_io

...ring LDB_MODIFY (50)) If I change the code, deleting the old password, and adding the new one: dn: ........ changetype: modify delete: unicodePwd unicodePwd: "Temporal1" - add: unicodePwd unicodePwd: "Temporal2" Then I get this error: #!ERROR [LDAP: error code 53 - 00002035: setup_io: it's not allowed to set the NT hash password directly'] The ldapmodify are executed using the self user credentials, i wouldn't like to use the administrator account. Is this possible? Do I have to change some settings in Samba4?

...ministrator at domain.com -W ldap_initialize( ldaps://server.domain.com:636/??base ) Enter LDAP Password: replace unicodePwd: newPassword modifying entry "CN=John Smith,cn=Users,DC=domain,DC=com" ldap_modify: Server is unwilling to perform (53) additional info: 00002035: setup_io: it's not allowed to set the NT hash password directly' It seems, that samba4 does not allow to change this attribute directly. So the question would be: is it possible to change AD user password via LDAP, or this can only be done via samba tools and windows client? Thank you. --

hi trying to create a user with ldap from a remote server. The user is created successfully. I'm failing setting the initial password. Setting the unicodePwd with kerberos administrator credentials with ldbmodify and the ldif below results in "00002035: setup_io: it's not allowed to set the NT hash password directly". searching the web I've found s4 mailinglist entries telling "do not set unicodePwd with ldap". this KB article tells in AD it's possible to set it: http://support.microsoft.com/kb/263991/en-us Is there a su...

...>> dn: ........ >> changetype: modify >> delete: unicodePwd >> unicodePwd: "Temporal1" >> - >> add: unicodePwd >> unicodePwd: "Temporal2" >> >> Then I get this error: >> >> #!ERROR [LDAP: error code 53 - 00002035: setup_io: it's not allowed to set >> the NT hash password directly'] >> >> The ldapmodify are executed using the self user credentials, i wouldn't >> like to use the administrator account. Is this possible? Do I have to >> change some settings in Samba4? >> --...

...changetype: modify > >> replace: unicodePwd > >> unicodePwd:: %s > >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) > >> ``` > >> > >> When doing the same, Samba returns: > >> > >> 00002035: setup_io: it's not allowed to set the NT hash > >> password directly' Code: 0x35 > >> > >> This happens both when 1) passing `unicodePwd` during entry > >> creation, and 2) when modifying it for an existing entry (like > >> `samba-tool` does). > >&...

...pw = ('"' + pw + '"').encode('utf-16-le') setpw = """ dn: %s changetype: modify replace: unicodePwd unicodePwd:: %s """ % (user_dn, base64.b64encode(pw).decode('utf-8')) ``` When doing the same, Samba returns: 00002035: setup_io: it's not allowed to set the NT hash password directly' Code: 0x35 This happens both when 1) passing `unicodePwd` during entry creation, and 2) when modifying it for an existing entry (like `samba-tool` does). This is the (Wireshark-interpreted) `ModifyRequest`: ``` Lightweight Directo...

...utf-16-le') > > setpw = """ > dn: %s > changetype: modify > replace: unicodePwd > unicodePwd:: %s > """ % (user_dn, base64.b64encode(pw).decode('utf-8')) > ``` > > When doing the same, Samba returns: > > 00002035: setup_io: it's not allowed to set the NT hash password > directly' Code: 0x35 > > This happens both when 1) passing `unicodePwd` during entry creation, > and 2) when modifying it for an existing entry (like `samba-tool` > does). > > This is the (Wireshark-interpreted) `Modif...

...t;"" >> dn: %s >> changetype: modify >> replace: unicodePwd >> unicodePwd:: %s >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >> ``` >> >> When doing the same, Samba returns: >> >> 00002035: setup_io: it's not allowed to set the NT hash password >> directly' Code: 0x35 >> >> This happens both when 1) passing `unicodePwd` during entry creation, >> and 2) when modifying it for an existing entry (like `samba-tool` >> does). >> >> This is the (Wir...

...wd >>>>> unicodePwd:: %s >>>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>> ``` >>>>> >>>>> When doing the same, Samba returns: >>>>> >>>>> 00002035: setup_io: it's not allowed to set the NT hash >>>>> password directly' Code: 0x35 >>>>> >>>>> This happens both when 1) passing `unicodePwd` during entry >>>>> creation, and 2) when modifying it for an existing entry (like >>>>...

...>>> replace: unicodePwd >>>> unicodePwd:: %s >>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>> ``` >>>> >>>> When doing the same, Samba returns: >>>> >>>> 00002035: setup_io: it's not allowed to set the NT hash >>>> password directly' Code: 0x35 >>>> >>>> This happens both when 1) passing `unicodePwd` during entry >>>> creation, and 2) when modifying it for an existing entry (like >>>> `samba-tool` doe...

...;> >> unicodePwd:: %s > >> >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) > >> >> ``` > >> >> > >> >> When doing the same, Samba returns: > >> >> > >> >> 00002035: setup_io: it's not allowed to set the NT hash > >> >> password directly' Code: 0x35 > >> >> > >> >> This happens both when 1) passing `unicodePwd` during entry > >> >> creation, and 2) when modifying it for an existing entry (like > >...

...t;> replace: unicodePwd >> >> unicodePwd:: %s >> >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >> >> ``` >> >> >> >> When doing the same, Samba returns: >> >> >> >> 00002035: setup_io: it's not allowed to set the NT hash >> >> password directly' Code: 0x35 >> >> >> >> This happens both when 1) passing `unicodePwd` during entry >> >> creation, and 2) when modifying it for an existing entry (like >> >> `samba-tool...

...; unicodePwd:: %s >>>>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>>> ``` >>>>>> >>>>>> When doing the same, Samba returns: >>>>>> >>>>>> ???? 00002035: setup_io: it's not allowed to set the NT hash >>>>>> password directly' Code: 0x35 >>>>>> >>>>>> This happens both when 1) passing `unicodePwd` during entry >>>>>> creation, and 2) when modifying it for an existing entry (like &...

...old password, and adding the new one: > > dn: ........ > changetype: modify > delete: unicodePwd > unicodePwd: "Temporal1" > - > add: unicodePwd > unicodePwd: "Temporal2" > > Then I get this error: > > #!ERROR [LDAP: error code 53 - 00002035: setup_io: it's not allowed to set > the NT hash password directly'] > > The ldapmodify are executed using the self user credentials, i wouldn't > like to use the administrator account. Is this possible? Do I have to > change some settings in Samba4? > -- > To unsubscribe fro...

...>>>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>>>> ``` >>>>>>> >>>>>>> When doing the same, Samba returns: >>>>>>> >>>>>>> ???? 00002035: setup_io: it's not allowed to set the NT hash >>>>>>> password directly' Code: 0x35 >>>>>>> >>>>>>> This happens both when 1) passing `unicodePwd` during entry >>>>>>> creation, and 2) when modifying it for an exist...

...t; """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>>>>> ``` >>>>>>>> >>>>>>>> When doing the same, Samba returns: >>>>>>>> >>>>>>>> ???? 00002035: setup_io: it's not allowed to set the NT hash >>>>>>>> password directly' Code: 0x35 >>>>>>>> >>>>>>>> This happens both when 1) passing `unicodePwd` during entry >>>>>>>> creation, and 2) when modifying...

...% (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>>>>>> ``` >>>>>>>>> >>>>>>>>> When doing the same, Samba returns: >>>>>>>>> >>>>>>>>> ???? 00002035: setup_io: it's not allowed to set the NT hash >>>>>>>>> password directly' Code: 0x35 >>>>>>>>> >>>>>>>>> This happens both when 1) passing `unicodePwd` during entry >>>>>>>>> creation, and 2...