search for: syncpasswords

I'm forced, for legacy reasons, to use 'syncpassword'. Docs are scarce, so i ask here. Seems to me that the ''consumer'' (eg, 'samba-tool user syncpasswords', with or without '--daemon') get activated after every password change, indipendently on what DC get originated (eg, i've changed a password, see previous email, on DC2 and the 'syncpassword' script get called on DC1). So seems to me that all that stuff (minus the GPG key...

[Clearly, this question is intimately connected to the previous...] I need a way to ''preprocess'' or at least intercept password changes, because i need to propagate them to other ''legacy'' systems. I've looked around and found syncpasswords / getpassword samba-tool commands, but really i've not understood how they work. Seems to me that can be useful in my scope, but really i've not understood how. Googling around lead me to some mailing list posts, but was not sufficient (at least to me) to understand. Wiki seems have nothin...

Hi, i sync the passwords from samba to other backends using "samba-tool user syncpasswords" On my operative system (samba 4.10 and python2) all works fine. I upgraded my test-DC to samba 4.11 and python3 and now the samba-tool user syncpasswords --daemon crashes. Fri Oct 4 12:29:47 2019: pid[983]: Attached to logfile[/usr/local/samba/var/log.syncpw] Fri Oct 4 12:29:47 2019: pid[...

On Mon, 2017-10-30 at 17:00 +0100, Marco Gaiarin via samba wrote: > I'm forced, for legacy reasons, to use 'syncpassword'. > Docs are scarce, so i ask here. > > > Seems to me that the ''consumer'' (eg, 'samba-tool user > syncpasswords', > with or without '--daemon') get activated after every password > change, > indipendently on what DC get originated (eg, i've changed a password, > see previous email, on DC2 and the 'syncpassword' script get called > on > DC1). > > So seems to me...

On Mon, 2018-01-15 at 10:55 +0100, Marco Gaiarin via samba wrote: > Mandi! Stefan Metzmacher via samba > In chel di` si favelave... > > > Encrypted secrets > > ----------------- > > This change/break something in 'samba-tool user syncpasswords'? Can you please explain what you are asking here? Are you asking if it intentionally changes the behaviour of syncpasswords, or are you trying to advise us of a bug? If so, please provide some steps to reproduce. The encrypted secrets code is, aside from setup and key management, meant to...

Hi, When I use "samba-tool user syncpasswords" in Samba 4.10.11 (and earlier version of 4.10), I get a python exception coming from a place in /usr/lib/python3/dist-packages/samba/netcmd/user.py I could fix it with this patch: diff user.py.orig user.py 2001c2001 < reply = sync_command_p.communicate(input)[0] --- >...

On 04/10/2019 12:03, Heinz H?lzl via samba wrote: > Hi, > > i sync the passwords from samba to other backends using "samba-tool > user syncpasswords" > > On my operative system (samba 4.10 and python2) all works fine. > I upgraded my test-DC to samba 4.11 and python3 and now the samba-tool > user syncpasswords --daemon crashes. > > Fri Oct 4 12:29:47 2019: pid[983]: Attached to > logfile[/usr/local/samba/var/log.syncp...

...gt; > [Clearly, this question is intimately connected to the previous...] > > I need a way to ''preprocess'' or at least intercept password changes, > because i need to propagate them to other ''legacy'' systems. > > I've looked around and found syncpasswords / getpassword samba-tool > commands, but really i've not understood how they work. > Seems to me that can be useful in my scope, but really i've not > understood how. > > Googling around lead me to some mailing list posts, but was not > sufficient (at least to me) to under...

...he command line doc and then at the source code, it gets a bit more clear to me and I wanted to have some confirmation on that process. It seems that the only added value in the supplementalCredential attribute is the GPG encrypted password value (Primary:SambaGPG). And then the PDC running the syncpasswords daemon, which would have the gpg private key, monitors the ldap change. When a supplementalCredentials attribute change event occurs, one can use getPassword command and the private key to get the clear text password or one of the proposed hash out of the GPG encrypted Primary:SambaGPG entry,...

...e source code, it gets a > bit more clear to me and I wanted to have some confirmation on that > process. > > It seems that the only added value in the supplementalCredential > attribute is the GPG encrypted password value (Primary:SambaGPG). Yes. > And then the PDC running the syncpasswords daemon, which would have the > gpg private key, monitors the ldap change. > > When a supplementalCredentials attribute change event occurs, one can > use getPassword command and the private key to get the clear text > password or one of the proposed hash out of the GPG encrypted &gt...

On Tue, 31 Oct 2017 18:19:39 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > Seems a bit strange to me... > > Seems a bug to me, so i've fired up: > > https://bugzilla.samba.org/show_bug.cgi?id=13114 > > > Thanks. > I normally only use 'samba-tool user setpassword --random-password' when I create a user that will

...2017-10-31 at 19:05 +0100, Marco Gaiarin via samba wrote: > > > So, the question has to be, just what do you need to sync the passwords > > to ? > > Really i don't need that. But 'samba-tool user setpassword --random-password' > passwords get processed by 'syncpasswords', as ''normal'' ones. Either way, if we can't handle long passwords we need to fix that. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://...

...d 4.11.4, no problems. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: vrijdag 3 januari 2020 10:24 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] samba-tool user syncpasswords 4.10 bug > > On 03/01/2020 08:53, ???? Peter Rindfuss via samba wrote: > > Hi, > > > > When I use "samba-tool user syncpasswords" in Samba 4.10.11 > (and earlier > > version of 4.10), I get a python exception coming from a place in > > /usr/lib/pyt...

Hello, We are facing an issue with samba syncpassword which doesn't work anymore. We use it to synchronize samba4 password into a remote ldap used by applications. It has been working flawlessly for more than 2 years. Our architecture: 2 main DC on the main site and about 10 remote DC (with site topology). We synchronize the password with a daemonized python script used on every DC. For

...at tranquils code again and I have a possible idea >about what is going on. The code was written for python2 and needs >updating to python3 Yes, but as i explained before, we managed to make it work since almost a thousand days in a row ? THe ldb cache is initialized with: samba-tool user syncpasswords --cache-ldb-initialize --attributes=virtualSSHA,samaccountname,virtualClearTextUTF8 --script=/opt/syncpwd.py --decrypt-samba-gpg We originally modified a bit the script to retrieve the virtualClearTextUTF8 value of the password, then decode it in base64 , re encode it in md4 and send it to remot...

On Wed, 2018-03-28 at 16:06 +0200, Reindl Harald via samba wrote: > > Am 28.03.2018 um 15:52 schrieb Lapin Blanc via samba: > > I receive stdin input from "samba user syncpasswords" in my python script. > > The user is created with ' Active Directory Users and Computers', and have > > some accentuated characters in their givenName and/or familyName (sn) > > When parsing the diff, the CN reads of, but weird characters appears in the > > att...

I receive stdin input from "samba user syncpasswords" in my python script. The user is created with ' Active Directory Users and Computers', and have some accentuated characters in their givenName and/or familyName (sn) When parsing the diff, the CN reads of, but weird characters appears in the attributes instead of the right name : INF...

...Practically, i'm ''syncing'' my old NT domains with my new AD one. > So, the question has to be, just what do you need to sync the passwords > to ? Really i don't need that. But 'samba-tool user setpassword --random-password' passwords get processed by 'syncpasswords', as ''normal'' ones. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamig...

...ld <h.reindl at thelounge.net> > 2018-03-28 16:06 GMT+02:00 Reindl Harald via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org>>: > > Am 28.03.2018 um 15:52 schrieb Lapin Blanc via samba: > > I receive stdin input from "samba user syncpasswords" in my python script. > > The user is created with ' Active Directory Users and Computers', and have > > some accentuated characters in their givenName and/or familyName (sn) > > When parsing the diff, the CN reads of, but weird characters appears in the &...

>Where did you get the password sync script from ? Are you aware that >samba-tool now has the facility to do this ? > >Have a look here: > >https://dev.tranquil.it/wiki/SAMBA_-_Synchronisation_des_mots_de_passe_entre_un_Samba4_et_une_OpenLDAP<https://dev.tranquil.it/wiki/SAMBA_-_Synchronisation_des_mots_de_passe_entre_un_Samba4_et_une_OpenLDAP> > >Rowland This is the