search for: uniquemember

...xAccount)(uid=MYUSER))" Oct 24 09:25:20 infra slapd[3012]: conn=136 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 24 09:25:20 infra slapd[3012]: conn=136 op=2 SRCH base="ou=Groups,dc=MYDOM,dc=TLD" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=MYUSER)(uniqueMember=uid=MYUS ER,ou=users,dc=MYDOM,dc=TLD)))" Oct 24 09:25:20 infra slapd[3012]: conn=136 op=2 SRCH attr=gidNumber Oct 24 09:25:20 infra slapd[3012]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) Oct 24 09:25:20 infra slapd[3012]: conn=136 op=2 SEARCH RESULT tag=101 err=0 ne...

...x_param failed (18) Aug 30 18:15:01 redwood slapd[12105]: conn=29 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Aug 30 18:15:01 redwood slapd[12105]: conn=29 op=2 SRCH base="ou=group,dc=cs,dc=college,dc=edu" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=root)(uniqueMember=uid=root,ou=people,dc=cs,dc=college,dc=edu)))" Aug 30 18:15:01 redwood slapd[12105]: conn=29 op=2 SRCH attr=gidNumber Aug 30 18:15:01 redwood slapd[12105]: <= bdb_equality_candidates: (memberUid) index_param failed (18) Aug 30 18:15:01 redwood slapd[12105]: <= bdb_equality_candidates: (u...

...ixAccount)(uid=nobody))" Jun 10 15:49:39 st_olof slapd[7004]: conn=93 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= Jun 10 15:49:39 st_olof slapd[7003]: conn=93 op=4 SRCH base="ou=Groups,dc=example,dc=com" scope=1 filter="(&(objectClass=posixGroup)(|(memberUid=nobody)(uniqueMember=uid=nobody,ou=people,dc=example,dc=com)))" Jun 10 15:49:39 st_olof slapd[7003]: conn=93 op=4 SRCH attr=gidNumber Jun 10 15:49:39 st_olof slapd[7003]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) Jun 10 15:49:39 st_olof slapd[7004]: conn=93 op=5 SRCH base="ou=Gro...

...=xx" Jun 17 17:17:12 ywgldap0 slapd[16885]: conn=165 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jun 17 17:17:12 ywgldap0 slapd[16885]: conn=165 op=2 SRCH base="ou=Groups,dc=xxx,dc=xx,dc=xx,dc=xx" scope=2 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=root) (uniqueMember=uid=root,ou=users,dc=xxx,dc=xx,dc=xx,dc=xx)))" Jun 17 17:17:12 ywgldap0 slapd[16885]: conn=165 op=2 SRCH attr=cn userPassword memberUid uniqueMember gidNumber Jun 17 17:17:12 ywgldap0 slapd[16885]: <= bdb_equality_candidates: (memberUid) index_param failed (18) Jun 17 17:17:12 ywgldap0 sl...

...ccount)(uid=root))" Mar 17 15:17:52 Storm slapd[5821]: conn=14 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Mar 17 15:17:52 Storm slapd[5821]: conn=14 op=2 SRCH base="ou=Groups,dc=tubitak,dc=gov,dc=tr" scope=1 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=root)(uniqueMember=uid=root,ou=users,dc=tubitak,dc=gov,dc=tr)))" Mar 17 15:17:52 Storm slapd[5821]: conn=14 op=2 SRCH attr=gidNumber Mar 17 15:17:52 Storm slapd[5821]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) Mar 17 15:17:52 Storm slapd[5821]: conn=14 op=3 SRCH base="ou=Groups,d...

Hi, I'm using OpenLDAP in CentOS 4.4 I'm trying to create a grou of users: # Grupos do TIM dn: ou=futebol,ou=accounts,dc=telbit,dc=pt objectClass: organizationalUnit description: Grupo de Futebol ou: futebol # Grupo do futebol dn: uid=futeboladas,ou=futebol,ou=accounts,dc=telbit,dc=pt objectClass: top uid: futeboladas objectClass: groupOfNames cn: Futeboladas member:

...e /etc/ssl/ca.cert # Seed the PRNG if /dev/urandom is not provided #tls_randfile /var/run/egd-pool # SSL cipher suite # See man ciphers for syntax #tls_ciphers TLSv1 # Client certificate and key # Use these, if your server requires client authentication. #tls_cert #tls_key # NDS mappings #map group uniqueMember member # Mappings for Services for UNIX 3.5 #filter passwd (objectClass=User) #map passwd uid msSFU30Name #map passwd userPassword msSFU30Password #map passwd homeDirectory msSFU30HomeDirectory #map passwd homeDirectory msSFUHomeDirectory #filter shadow (objectCl...

...o # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Group to enforce membership of #pam_groupdn cn=PAM,ou=Groups,dc=padl,dc=com # Group member attribute #pam_member_attribute uniquemember # Specify a minium or maximum UID number allowed #pam_min_uid 0 #pam_max_uid 0 # Template login attribute, default template user # (can be overriden by value of former attribute # in user's entry) #pam_login_attribute userPrincipalName #pam_template_login_attribute uid #pam_template_login nob...

...login" scope=2 filter="(uid=test3)" Mar 11 15:28:49 compaq slapd[481]: conn=272 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Mar 11 15:28:49 compaq slapd[487]: conn=272 op=3 SRCH base="dc=login" scope=2 filter="(&(objectClass=posixGroup)(|(memberUid=test3)(uniqueMember=uid=test3,ou=people,dc=login)))" Mar 11 15:28:49 compaq slapd[487]: conn=272 op=3 SRCH attr=cn userPassword memberUid uniqueMember gidNumber Mar 11 15:28:49 compaq slapd[487]: conn=272 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text= Mar 11 15:28:49 compaq slapd[481]: conn=271 op=3 SRCH...

...t included) filter passwd (objectClass=user) filter group (objectClass=group) map passwd uid sAMAccountName map passwd homeDirectory unixHomeDirectory map passwd gecos displayName map passwd gidNumber primaryGroupID map group uniqueMember member I know that 513 should mean "Domain Users" from ADUC. However, "Domain Users" has the "UNIX Attributes" configuration of GID=10000. # getent group|grep 10000 Domain Users:*:10000: Should I change the UNIX Attributes ID of Domain Users to 513 ? What am I...

...rm -f /tmp/ldif/* FILTER="(|(cn=Users1)(cn=Users2))" FILTER="cn=Domain Users" USERS=`ldapsearch -H ldaps://oldhostname -D "cn=Admin" -w PassW0rd -b "ou=Groups,dc=domainname,dc=de" "${FILTER}" uniqueMember \ | grep -Ev "^#" \ | grep -Ew "uniqueMember" \ | sort -u \ | sort -t"," -k2 \ | sed -e "s:uniqueMember\:::g" \ | a...

...rebooting my Windows 2000 Professional workstation, I am UNABLE to login to the domain using the same User account that I was able to use to access shares on the Samba server. Here is what I am getting in the logs for both OpenLDAP and Samba I'm getting the error bdb_equality_candidates: (uniqueMember) index_param failed (18) when its trying to obtain the attribute gidNumber from the LDAP logs. In the samba logs, Its getting a Rejecting auth request from client DELL machine account DELL$ Also when I do a net rpc info, I don't see any users or groups added... net rpc info Domain Name: P...

...usergroup = cn=webmaster sub, o=ParlaNet, c=DE default: empty string ldap auth users attribute This parameter specifies the name of the attribute in the "ldap auth usergroup" object that contain the dn of a member. If objectclass is groupOfUniqueNames this always should be "uniqueMember". default: ldap auth users attribute = uniqueMember mangle user This option is no ldap option. This parameter specifies a list of prefixes that will be removed from the username before it is tested against the access lists. example: mangle user = web- adm- default: empty string...

...ope=2 filter="(uid=nobody)" Dec 13 16:52:41 mail slapd[18817]: conn=3778 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Dec 13 16:52:41 mail slapd[18817]: conn=3778 op=3 SRCH base="dc=localsurface,dc=com" scope=2 filter="(&(objectClass=posixGroup)(|(memberUid=nobody)(uniqueMember=uid=nobody,ou=domainusers,dc=localsurface,dc=com)))" Dec 13 16:52:41 mail slapd[18817]: conn=3778 op=3 SRCH attr=cn userPassword memberUid uniqueMember gidNumber Dec 13 16:52:41 mail slapd[18817]: <= bdb_equality_candidates: (memberUid) index_param failed (18) Dec 13 16:52:41 mail slapd[188...

...group (objectClass=group) >> >> map passwd uid sAMAccountName >> map passwd homeDirectory unixHomeDirectory >> map passwd gecos displayName >> map passwd gidNumber primaryGroupID >> map group uniqueMember member >> >> I know that 513 should mean "Domain Users" from ADUC. However, "Domain >> Users" has the "UNIX Attributes" configuration of GID=10000. >> > > How do you 'know' 513 should mean "Domain Users" ? > 513...

...the process of testing an upgrade of our NT-style domain on samba 3.6 and ldap backend to an AD on samba 4.4. The classic upgrade works fine so far the only problem we have is that all our groups are migrated without members. I think this is because we use rfc2307bis in our schema which uses "uniqueMember" instead of "memberUid" to link groups to users. Is there an option to the classic upgrade script to tell it to use uniqueMember ? Regards Christian

...tp,squid and samba off course) my sambaDomainName is DOMAINE... Everything work perfectly :) I see in log many lines like : slapd[23331] <= bdb_equality_candidates: (uid) not indexed slapd[23331] <= bdb_equality_candidates: (memberUid) not indexed slapd[23331] <= bdb_equality_candidates: (uniqueMember) not indexed slapd[23331] <= bdb_equality_candidates: (giuNumber) not indexed slapd[23331] <= bdb_equality_candidates: (sambaSID) not indexed slapd[23331] <= bdb_equality_candidates: (sambaGroupType) not indexed slapd[23331] <= bdb_equality_candidates: (sambaSIDList) not indexed to cle...

...s I see this when I try to access the share: May 20 05:17:27 fc4 slapd[1524]: conn=90 op=8 SRCH base="dc=kapitalgrup,dc=ro" scope=2 deref=0 filter="(&(objectClass=posixGroup)(cn=consultanta))" May 20 05:17:27 fc4 slapd[1524]: conn=90 op=8 SRCH attr=cn userPassword memberUid uniqueMember gidNumber May 20 05:17:27 fc4 slapd[1524]: conn=90 op=8 ENTRY dn="cn=consultanta,ou=groups,dc=kapitalgrup,dc=ro" May 20 05:17:27 fc4 slapd[1524]: conn=90 op=8 SEARCH RESULT tag=101 err=0 nentries=1 text= If I run a manual search on the ldap server with the same filter ="(&(objec...

Hi Rob, > olcDbIndex: ou eq > olcDbIndex: mail eq > olcDbIndex: surname eq > olcDbIndex: givenname eq > olcDbIndex: loginShell eq > olcDbIndex: uniqueMember eq,pres > olcDbIndex: sambaSID eq > olcDbIndex: sambaPrimaryGroupSID eq > olcDbIndex: sambaGroupType eq > olcDbIndex: sambaSIDList eq > olcDbIndex: sambaDomainName eq > olcDbIndex: default sub > olcDbIndex: nisMapName eq > olcDbIndex: nisMapEntry eq Dont looks good. replace...

I managed to do migration using "classicupgrade". Doing tests with debian buster 2:4.9.4+dfsg-4. For the moment using samba internal dns and sub-domain of ad.advocap.org. Had issue forwarding dns if I used main domain. When it comes to real production will use bind that I understand better but don't want to mess with my other dns servers now. Had a w10 box join samba4 ad