search for: user_dn

Hi, i have configured a Samba PDC based on idealx.org. now, whenever i set the sambaMustChangePassword flag to 0, then from the subsequent logon, there is a popup urge me for changing password. now, the problem is after i have changed the password, the sambaMustChangePassword is set to 2147483647(unix timestamp), which if i converted it into human readable format, it will be 2038 year,

...quot;search_options:1:2"]) > _ldb.LdbError: (1, 'Unable to parse search expression') > > Could the "ê" be a problem or the length of the string ? The issue is that this script was never tested with non-ascii names. Each instance of "(distinguishedName=%s) % user_dn in the script needs to be updated to be: "(distinguishedName=%s)" % ldb.binary_encode(user_dn) Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT htt...

I made a try translating the group names one by one in the setup/provision_users.ldif file. The first groups went OK but when I translate "Incoming Forest Trust Builders" by "Générateurs d'approbations de forêt entrante", I get this error from the script : Traceback (most recent call last): File "source4/scripting/bin/samba_upgradeprovision", line 1714, in

...run smartcard_required=smartcard_required) File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 490, in newuser force_password_change_at_next_login_req) File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 606, in setpassword """ % (user_dn, base64.b64encode(pw).decode('utf-8')) I tested it on Debian 10, with Samba 4.9.5. I found some closed bug reports, where occured similar error, and according to that reports, the problem is python2. Samba 4.10 has full python3 support, but I don't want to compile Samba from source. Is...

...quot;search_options:1:2"]) > _ldb.LdbError: (1, 'Unable to parse search expression') > > Could the "ê" be a problem or the length of the string ? The issue is that this script was never tested with non-ascii names. Each instance of "(distinguishedName=%s) % user_dn in the script needs to be updated to be: "(distinguishedName=%s)" % ldb.binary_encode(user_dn) Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT htt...

...ldb files. > > What do you think samba-tool does ? Using samba-tool to set expiry, ultimately does this: setexp = """ dn: %s changetype: modify replace: userAccountControl userAccountControl: %u replace: accountExpires accountExpires: %u """ % (user_dn, userAccountControl, accountExpires) self.modify_ldif(setexp) Rowland

...b/python2.7/site-packages/samba/netcmd/user.py", line 176, in run uid=uid, uidnumber=uid_number, gidnumber=gid_number, gecos=gecos, loginshell=login_shell) File "/home/vms/devbin/lib/python2.7/site-packages/samba/samdb.py", line 407, in newuser ldbmessage2.dn = ldb.Dn(self, user_dn) Since it didn't detect a syntax error, I assume there is something worse.. But I don't really know why it would fail to parse the dn string -- Any ideas? -- David Bear mobile: (602) 903-6476

...> >> pw = ('"' + pw + '"').encode('utf-16-le') > >> > >> setpw = """ > >> dn: %s > >> changetype: modify > >> replace: unicodePwd > >> unicodePwd:: %s > >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) > >> ``` > >> > >> When doing the same, Samba returns: > >> > >> 00002035: setup_io: it's not allowed to set the NT hash > >> password directly' Code: 0x35 > >> > >>...

...rst: ``` if not isinstance(password, str): pw = password.decode('utf-8') else: pw = password pw = ('"' + pw + '"').encode('utf-16-le') setpw = """ dn: %s changetype: modify replace: unicodePwd unicodePwd:: %s """ % (user_dn, base64.b64encode(pw).decode('utf-8')) ``` When doing the same, Samba returns: 00002035: setup_io: it's not allowed to set the NT hash password directly' Code: 0x35 This happens both when 1) passing `unicodePwd` during entry creation, and 2) when modifying it for an existi...

...w = password.decode('utf-8') > else: > pw = password > pw = ('"' + pw + '"').encode('utf-16-le') > > setpw = """ > dn: %s > changetype: modify > replace: unicodePwd > unicodePwd:: %s > """ % (user_dn, base64.b64encode(pw).decode('utf-8')) > ``` > > When doing the same, Samba returns: > > 00002035: setup_io: it's not allowed to set the NT hash password > directly' Code: 0x35 > > This happens both when 1) passing `unicodePwd` during entry creation,...

...t;> else: >> pw = password >> pw = ('"' + pw + '"').encode('utf-16-le') >> >> setpw = """ >> dn: %s >> changetype: modify >> replace: unicodePwd >> unicodePwd:: %s >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >> ``` >> >> When doing the same, Samba returns: >> >> 00002035: setup_io: it's not allowed to set the NT hash password >> directly' Code: 0x35 >> >> This happens both when 1) passing `unic...

Hi all, As per Jelmer's request - in response to bug #7455 attached diff file. Please let me know what you think and if any modificationes need to be performed Regards Luk -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: newusergroupadv.diff URL:

..."').encode('utf-16-le') >>>>> >>>>> setpw = """ >>>>> dn: %s >>>>> changetype: modify >>>>> replace: unicodePwd >>>>> unicodePwd:: %s >>>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>> ``` >>>>> >>>>> When doing the same, Samba returns: >>>>> >>>>> 00002035: setup_io: it's not allowed to set the NT hash >>>>> password directly...

...parse dn string > File "/usr/lib/python3/dist-packages/samba/netcmd/user.py", line 395, in > run > smartcard_required=smartcard_required) > File "/usr/lib/python3/dist-packages/samba/samdb.py", line 528, in > newuser > ldbmessage2.dn = ldb.Dn(self, user_dn) > I have tried "userou='Mmbr-folder-redirection,OU='CompanyName'" and it fails with: > root at dc1:~# samba-tool user create jean25 --given-name=Jean --initials=25 > --surname=Samba --uid-number=18700 --gid-number=10000 --profile-path=\\\\ > mbr04.ad.example.com...

...'"' + pw + '"').encode('utf-16-le') >>>> >>>> setpw = """ >>>> dn: %s >>>> changetype: modify >>>> replace: unicodePwd >>>> unicodePwd:: %s >>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>> ``` >>>> >>>> When doing the same, Samba returns: >>>> >>>> 00002035: setup_io: it's not allowed to set the NT hash >>>> password directly' Code: 0x35 >>&gt...

...encode('utf-16-le') > >> >> > >> >> setpw = """ > >> >> dn: %s > >> >> changetype: modify > >> >> replace: unicodePwd > >> >> unicodePwd:: %s > >> >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) > >> >> ``` > >> >> > >> >> When doing the same, Samba returns: > >> >> > >> >> 00002035: setup_io: it's not allowed to set the NT hash > >> >> password d...

...uot;' + pw + '"').encode('utf-16-le') >> >> >> >> setpw = """ >> >> dn: %s >> >> changetype: modify >> >> replace: unicodePwd >> >> unicodePwd:: %s >> >> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >> >> ``` >> >> >> >> When doing the same, Samba returns: >> >> >> >> 00002035: setup_io: it's not allowed to set the NT hash >> >> password directly' Code: 0x35 >&g...

...f-16-le') >>>>>> >>>>>> setpw = """ >>>>>> dn: %s >>>>>> changetype: modify >>>>>> replace: unicodePwd >>>>>> unicodePwd:: %s >>>>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>>> ``` >>>>>> >>>>>> When doing the same, Samba returns: >>>>>> >>>>>> ???? 00002035: setup_io: it's not allowed to set the NT hash >>>>>&g...

...smartcard_required=smartcard_required) File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 490, in newuser force_password_change_at_next_login_req) File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 606, in setpassword """ % (user_dn, base64.b64encode(pw).decode('utf-8')) # samba-tool user create foobar 21asdasd// --given-name="$(echo "?ke"|openssl base64)" ERROR(ldb): Failed to add user 'foobar': - ldb_add: invalid dn '(null)' What's the correct format of names? -- Harald...

...;>>> >>>>>>> setpw = """ >>>>>>> dn: %s >>>>>>> changetype: modify >>>>>>> replace: unicodePwd >>>>>>> unicodePwd:: %s >>>>>>> """ % (user_dn, base64.b64encode(pw).decode('utf-8')) >>>>>>> ``` >>>>>>> >>>>>>> When doing the same, Samba returns: >>>>>>> >>>>>>> ???? 00002035: setup_io: it's not allowed to set the NT hash...