search for: supportedcontrol

...word, because it's an email-based reset). Unfortunately resetting it like this prevents the "password history" policy enforcement. This is a security problem that will come up on the first security audit. Microsoft recognised this is a problem and in Windows 2008 R2 SP1 introduced a supportedControl on RootDSE: LDAP_SERVER_POLICY_HINTS_DEPRECATED_OID (1.2.840.113556.1.4.2066), later LDAP_SERVER_POLICY_HINTS_OID (1.2.840.113556.1.4.2239), which enables such password history enforcement on LDAP password resets. I've been trawling the internet and Samba source code looking for a way to achie...

...n=Manager,dc=rbrooks,dc=com" mech=SIMPLE ssf=0 May 14 12:43:37 s10 slapd[4091]: conn=42 op=0 RESULT tag=97 err=0 text= May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SRCH attr=supportedControl May 14 12:43:37 s10 slapd[4091]: conn=42 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= May 14 12:43:37 s10 slapd[4091]: conn=42 op=2 SRCH base="ou=idmap,dc=rbrooks,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaIdmapEntry)(uidNumber=10020))" May 14 12:43:37 s10 slap...

...]: conn=1000 op=0 BIND dn="cn=admin,dc=afrika,dc=xx" mech=SIMPLE ssf=0 slapd[18826]: conn=1000 op=0 RESULT tag=97 err=0 text= # the bind from smbd slapd[18826]: conn=1000 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" slapd[18826]: conn=1000 op=1 SRCH attr=supportedControl slapd[18826]: conn=1000 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= # the search from smbd for supportedControls slapd[18826]: conn=1000 op=2 SRCH base="dc=afrika,dc=xx" scope=2 deref=0 filter="(&(objectClass=sambaDomain)(sambaDomainName=schule))" slapd[18826]: conn=1...

...le,dc=com" mech=SIMPLE ssf=0 Jun 10 15:54:43 provider slapd[11306]: conn=70 op=0 RESULT tag=97 err=0 text= Jun 10 15:54:43 provider slapd[11306]: conn=70 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Jun 10 15:54:43 provider slapd[11306]: conn=70 op=1 SRCH attr=supportedControl Jun 10 15:54:43 provider slapd[11306]: conn=70 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jun 10 15:54:43 provider slapd[11306]: conn=70 op=2 SRCH base="sambaDomainName=LDNSPL,sambaDomainName=LDNSPL,dc=example,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaTrustedDoma...

...n" method=128 slapd[2332]: conn=1091 op=0 BIND dn="cn=admin,dc=mydomain" mech=SIMPLE ssf=0 slapd[2332]: conn=1091 op=0 RESULT tag=97 err=0 text= slapd[2332]: conn=1091 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" slapd[2332]: conn=1091 op=1 SRCH attr=supportedControl slapd[2332]: conn=1091 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= slapd[2332]: conn=1091 op=2 SRCH base="dc=mydomain" scope=2 deref=0 filter="(&(objectClass=sambaDomain)(sambaDomainName=mydomain))" slapd[2332]: conn=1091 op=2 SRCH attr=sambaDomainName sambaNextRid sam...

...ot; method=128 slapd[4698]: conn=1016 op=0 BIND dn="cn=admin,dc=mydomain" mech=SIMPLE ssf=0 slapd[4698]: conn=1016 op=0 RESULT tag=97 err=0 text= slapd[4698]: conn=1016 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" slapd[4698]: conn=1016 op=1 SRCH attr=supportedControl slapd[4698]: conn=1016 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= slapd[4698]: conn=1016 op=2 SRCH base="dc=mydomain" scope=2 deref=0 filter="(&(objectClass=sambaDomain)(sambaDomainName=mydomain))" slapd[4698]: conn=1016 op=2 SRCH attr=sambaDomainName sambaNextRid...

Hey Folks, I will teach a mini course on LDAP next week and I'm with the following question: Is There any documentation that give some details about what LDAP Controls and Extensions are provided by the Samba 4 Implementation? Thanks in advance.

...uest requiring some special control: object: CN=client1,CN=Computers, <...> operation: replace type: dNSHostName controlType: 1.2.840.113556.1.4.1413 (LDAP_SERVER_PERMISSIVE_MODIFY_OID) criticality: True However this control is not supported in Samba4 according to the built-in LDAP server: supportedControl: + 1.2.840.113556.1.4.417 Show deleted control + 1.2.840.113556.1.4.319 Simple Paged Results Manipulation Control Extension + 1.2.840.113556.1.4.473 LDAP Server Sort Result extension RFC 2891 + 1.2.840.113556.1.4.1504 Attribute scoped query...

...abs,dc=ntrg,dc=com" mech=SIMPLE ssf=0 Sep 1 01:00:02 rhino slapd[8360]: conn=123 op=0 RESULT tag=97 err=0 text= Sep 1 01:00:02 rhino slapd[8360]: conn=123 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 1 01:00:02 rhino slapd[8360]: conn=123 op=1 SRCH attr=supportedControl Sep 1 01:00:02 rhino slapd[8360]: conn=123 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 1 01:00:02 rhino slapd[8360]: conn=123 op=2 SRCH base="dc=labs,dc=ntrg,dc=com" scope=2 deref=0 filter="(&(?=undefined)(objectClass=sambaSamAccount))" Sep 1 01:00:02 rhino slap...

...This happens every 15 minutes per Win7 machine on the client wireshark says: //client->server 0? X c? O x ? objectclass0? + subschemaSubentry dsServiceName namingContexts defaultNamingContext schemaNamingContext configurationNamingContext rootDomainNamingContext supportedControl supportedLDAPVersion supportedLDAPPolicies supportedSASLMechanisms dnsHostName ldapServiceName serverName supportedCapabilities //server ->client 0? t d? m 0? g0' namingContexts1 dc=arc-aachen,dc=de0?? supportedControl1?? 2.16.840.1.113730.3.4.18 2.16.840.1.113730.3.4.2 1.3....

...,dc=cultura,dc=gov,dc=br" mech=SIMPLE ssf=0 Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 RESULT tag=97 err=0 text= Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SRCH attr=supportedControl Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SRCH base="dc=cultura,dc=gov,dc=br" scope=2 deref=0 filter="(&(uid=testuser)(objectClass=sambaSamAccount))" Sep 19 11:04:32 zeus slapd[2...

...op=0 BIND dn="cn=Sambaroot,o=example,c=xx" method=128 conn=327 op=0 BIND dn="cn=Sambaroot,o=example,c=xx" mech=SIMPLE ssf=0 conn=327 op=0 RESULT tag=97 err=0 text= conn=327 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" conn=327 op=1 SRCH attr=supportedControl conn=327 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=327 op=2 SRCH base="o=example,c=xx" scope=2 deref=0 filter="(&(uid=jdoe)(objectClass=sambaSamAccount))" conn=327 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwd...

...,dc=cultura,dc=gov,dc=br" mech=SIMPLE ssf=0 Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=0 RESULT tag=97 err=0 text= Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=1 SRCH attr=supportedControl Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SRCH base="dc=cultura,dc=gov,dc=br" scope=2 deref=0 filter="(&(uid=testuser)(objectClass=sambaSamAccount))" Sep 21 14:59:15 zeus slapd[2...

...,dc=fr" mech=SIMPLE ssf=0 May 24 15:34:08 docs-test slapd[623]: conn=1149 op=0 RESULT tag=97 err=0 text= May 24 15:34:08 docs-test slapd[623]: conn=1149 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" May 24 15:34:08 docs-test slapd[623]: conn=1149 op=1 SRCH attr=supportedControl May 24 15:34:08 docs-test slapd[623]: conn=1149 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= May 24 15:34:08 docs-test slapd[623]: conn=1149 op=2 SRCH base="dc=example,dc=fr" scope=2 deref=0 filter="(&(uid=sderosiaux)(objectClass=sambaSamAccount))" May 24 15:34:08 doc...

...,dc=na" mech=SIMPLE ssf=0 Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=0 RESULT tag=97 err=0 text= Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SRCH attr=supportedControl Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Mar 21 11:37:24 vnldap02 slapd[20690]: conn=39 op=2 SRCH base="o=ventusnetworks.com,dc=na" scope=2 deref=0 filter="(&(&(uid=administrator)(objectClass=sambaSamAccount))(objectCl...

...c=jonathanpoon" mech=SIMPLE ssf=0 Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=0 RESULT tag=97 err=0 text= Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=1 SRCH attr=supportedControl Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jul 29 23:32:41 poontv slapd[6138]: conn=215 op=2 SRCH base="dc=jonathanpoon" scope=2 deref=0 filter="(&(uid=dell$)(objectClass=sambaSamAccount))" Jul 29 23:32:41 poontv slapd[6...

Hi Gruss, At this stage there is only one server, running 3.6.25 on Ubuntu12.04. The plan to get LDAP to work on this one. Then add the second server 4.x and the promote it to BDC and then demote this one. Just a side info, we didn't want to go tdbsam in both as I read it breaks the domain trust. The domain names are real ones. I ran the commands you suggested, nothing in reply. I tried

...=Admin,dc=sample,dc=com" mech=SIMPLE ssf=0 Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=0 RESULT tag=97 err=0 text= Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=1 SRCH attr=supportedControl Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 9 04:39:52 Ns02 slapd[10449]: conn=61 op=2 SRCH base="dc=sample,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaDomain)(sambaDomainName=sample))" Sep 9 04:39:52 Ns02 slapd[...

...Oct 21 16:47:35 beasty slapd[60723]: conn=3D14 op=3D0 RESULT tag=3D97 = err=3D0 text=3D Oct 21 16:47:35 beasty slapd[60723]: conn=3D14 op=3D1 SRCH base=3D"" = scope=3D0 deref=3D0 filter=3D"(objectClass=3D*)" Oct 21 16:47:35 beasty slapd[60723]: conn=3D14 op=3D1 SRCH = attr=3DsupportedControl Oct 21 16:47:35 beasty slapd[60723]: conn=3D14 op=3D1 SEARCH RESULT = tag=3D101 err=3D0 nentries=3D1 text=3D Oct 21 16:47:35 beasty slapd[60723]: conn=3D14 op=3D2 SRCH = base=3D"ou=3DIdmap,dc=3DDOUBLE-L,dc=3DLOCAL" scope=3D2 deref=3D0 = filter=3D"(objectClass=3DsambaUnixIdPool)&quo...

...,dc=tubitak,dc=gov,dc=tr" mech=SIMPLE ssf=0 Mar 10 15:21:41 Storm slapd[5842]: conn=1 op=0 RESULT tag=97 err=0 text= Mar 10 15:21:41 Storm slapd[5842]: conn=1 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" Mar 10 15:21:41 Storm slapd[5842]: conn=1 op=1 SRCH attr=supportedControl Mar 10 15:21:41 Storm slapd[5842]: conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Mar 10 15:21:41 Storm slapd[5842]: conn=1 op=2 SRCH base="dc=tubitak,dc=gov,dc=tr" scope=2 deref=0 filter="(&(uid=root)(objectClass=sambaSamAccount))" Mar 10 15:21:41 Storm slapd[5842...