search for: slapo

Hi All Is it possible to get slapo-auditlog or a similar feature running in an Samba 4 AD Domain ? I'm running in circles and can only find file auditing or authentication. I would need some way to document who did what and when on domain objects, like disabling a user or creating a group. thanks in advance Stefan Eichberg...

...o replace my kerberos & ldap >> setup with an AD server. Basically I only want to control access to the >> handful of Samba shares. > > Your users should auth against openldap with exop control enabled. > Openldap should handover the auth to kerberos. And then install > slapo-smbk5pwd on your openldap server. This overlay will sync the samba > passwords. slapo-smbk5pwd is for heimdal kerberos server only. i use the MIT kerberos server. There was a fork for MIT kerberos but i believe the project is dead. > > > Hint: I have never used sssd and i am sure i wi...

On 11.12.18 15:23, Rowland Penny via samba wrote: > On Tue, 11 Dec 2018 15:09:39 +0100 > tseegerkrb via samba <samba at lists.samba.org> wrote: > >> Hello list, >> >> a quick question. Right now I have a combination of MIT Kerberos, >> OpenLDAP and SSSD for authenticating my users. Is there a way that >> Samba can use this setup to perform user

...la-la-la-la-la, I failed to cache the full LDAP and > now I will crash hard with systemd not noticing and recovering the > service". It's an unpleasant problem. Sounds like you'd be better off using nslcd. And if you want caching of the LDAP info, use a local OpenLDAP slapd with slapo-pcache instead, which has all cache refresh/expiration/etc intervals fully configurable. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

...so /lib/liblber.a /lib/libldap.so /lib/libldap-2.4.so.2 /lib/liblber-2.4.so.2.1.0 /lib/libldap.a /lib/libldap-2.4.so.2.1.0 /lib/libldap.la . . /usr/share/man/man5/slapd-sock.5 /usr/share/man/man5/slapd.access.5 /usr/share/man/man5/slapd-relay.5 /usr/share/man/man5/slapd-meta.5 /usr/share/man/man5/slapo-syncprov.5 /usr/share/man/man5/slapd-hdb.5 /usr/share/man/man5/slapo-rwm.5 /usr/share/man/man5/slapd.plugin.5 /usr/share/man/man5/ldif.5 /usr/share/man/man5/slapd-monitor.5 /usr/share/man/man5/slapd-perl.5 %defattr(-, root, root) %post cd /lib ln -s libldap_r-2.4.so.2 libldap_r-2.4.so.2.1.0 ln -s...

...wer but I don't want to replace my kerberos & ldap > setup with an AD server. Basically I only want to control access to the > handful of Samba shares. Your users should auth against openldap with exop control enabled. Openldap should handover the auth to kerberos. And then install slapo-smbk5pwd on your openldap server. This overlay will sync the samba passwords. Hint: I have never used sssd and i am sure i will never do. For this classic samba setup i prefer nslcd as pam and nss provider. Winbind will also do. If you are interesting i such a setup i am willing to help. &gt...

On Thu, Jul 20, 2023 at 1:49?PM Johnnie W Adams <jxadams at ualr.edu> wrote: > > Hi, folks, > > We're experiencing an odd ten-second delay intermittently when logging > into any of our Linux boxes which authenticate against LDAP. Here's where > it happens: > > Jul 13 11:54:23 console2 sshd[1853]: debug1: temporarily_use_uid: <my > uid\gid>

Hello I'm trying to update samba from 3.0.11 to 3.0.21 and I noticed that the 'ldap filter' paramater has been removed. After some search, I read that I have to configure nss_ldap. But I don't know how to configure it properly to operate with our LDAP database. Let me explain : We used the 'ldap filter' parameter like this : ldap filter =

I don't want to call this a security problem. Since it isn't a code exploit, but, many people might have this problem. The other day a user was removed from our SLES samba-3.0.28-0.6 domain due to inactivity, but he still needed his account, so I recreated it. I didn't try to restore the LDAP data, so he got a new SID, etc. I was amazed to find that once his userid was created,

Hello, I am working on migrating from OpenLDAP using the inetOrgPerson schema to Samba4. I would like to continue to provide backwards compatibility with our existing authentication service. In OpenLDAP, users are all contained inside the People organizational unit and referenced by uid, for example: dn: uid=myuser,ou=People,dc=example,dc=com When using samba-tool to add a user, it places the

Dear list members, I am having some problems with a LDAP passdb authentication on Dovecot. Before I forget, the specs: it's a Ubuntu 7.10 server running Dovecot 1.0.5 connecting to 2 different machines running LDAP servers: gold with OpenLDAP 2.4.19 and extra with OpenLDAP 2.4.9 (extra is a replication slave of gold). The initial setup of dovecot was with a MySQL passdb, which is still the