search for: userpasswordexpirytimecomput

...me: > > #user=$(echo "${user}" | awk -F '\\' '{print $2}') > user_expire_date=$(ldbsearch --url="${LDBDB}" -b "${domainDN}" -s > sub > "(&(objectCategory=person)(objectClass=user)(sAMAccountName=$user))" > msDS-UserPasswordExpiryTimeComputed | grep > "msDS-UserPasswordExpiryTimeComputed: " | sed > "s|msDS-UserPasswordExpiryTimeComputed: ||") > UNIXTimeStamp=$(((${user_expire_date}/10000000)-11644473600)) > date_now=$(date +%s) > exp_days=$(((${UNIXTimeStamp} - ${date_now}) / 3600 / 24)...

...26 Mar 2017 00:16:13 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > > ldbsearch --url="/var/lib/samba/private/sam.ldb" -b > "DC=hprs,DC=local" -s sub > "(&(objectCategory=person)(objectClass=user)(sAMAccountName=mark))" > msDS-UserPasswordExpiryTimeComputed > > returns 0 records. Certainly because the --url refers the the > PRIVATE_DIR on the domain server, not the domain member. using > mail:/var/lib/... or mail.hprs.local:/var/lib/... and a few other > variations I could think of did not work. > > So, how do I get msDS-UserP...

...application. All these worked with the new PW. Later, I checked the Linux workstation's /etc/passwd to make sure there was no entry for my user (there wasn't). It does seem strange. Unfortunately, I did not check either msDS-KeyVersionNumber or pwdLastSet or even ldbsearch to get msDS-UserPasswordExpiryTimeComputed before I reset the user pw from the domain administrator. Next time! In this thread I've been given 3 more ideas on how to do this: samba-tool -U <myuser> user password smbpasswd kpasswd I'll try each and see which works best for me.

...checked the Linux > > workstation's /etc/passwd to make sure there was no entry for my > > user (there wasn't). It does seem strange. > > > > Unfortunately, I did not check either msDS-KeyVersionNumber or > > pwdLastSet or even ldbsearch to get > > msDS-UserPasswordExpiryTimeComputed before I reset the user pw from > > the domain administrator. Next time! > > > > In this thread I've been given 3 more ideas on how to do this: > > > > samba-tool -U <myuser> user password > > > > smbpasswd > > > > kpasswd > >...

...00 > > Andrew Bartlett <abartlet at samba.org> wrote: > > > > > On Tue, 2017-10-24 at 18:13 +0100, Rowland Penny via samba wrote: > > > > > > > > Good question, at the moment it is 'dynamic', but there is the > > > > 'msDS-UserPasswordExpiryTimeComputed' attribute but it doesn't > > > > seem to > > > > be used yet Samba. > > > > > > We do implement this and use it internally, but I can't find any > > > unit tests specifically for it. Ouch! :-) > > > > > > Andrew...

Mandi! Andrew Bartlett via samba In chel di` si favelave... > It is an operational attribute. simply add  > msDS-UserPasswordExpiryTimeComputed > to the list of attributes requested when searching for the user. root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b "dc=ad,dc=fvg,dc=lnf,dc=it" -s base "" maxPwdAge # record 1 dn: DC=ad,DC=fvg,DC=lnf,DC=it maxPwdAge: -77760000000000 # returned 1 rec...

On Thu, 9 Feb 2017 12:49:12 +0100 Ole Traupe via samba <samba at lists.samba.org> wrote: > Never mind. However, with your update I get the following error right > on the first found "user": > > ./mailtest_rowland.sh: line 27: (""/10000000)-11644473600: syntax > error: operand expected (error token is """/10000000)-11644473600") >

...Foley via samba <samba at lists.samba.org> wrote: > > > > > > > as root: > > > > > > ldbsearch --url=ldap://mail -b "DC=hprs,DC=local" -s sub > > > "(&(sAMAccountType=805306368)(sAMAccountName=mark))" > > > msDS-UserPasswordExpiryTimeComputed > > > > > > search error - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: > > > Operation unavailable without authentication> <> > > > > > > When I added `-U user%pass` it worked. I don't suppose there is a way > > > to NOT...

...or user in $user_list; do > user=$(echo "${user}" | awk -F '\\' '{print $2}') > user_expire_date=$(ldbsearch --url="${LDBDB}" -b "${domainDN}" -s sub "(&(objectCategory=person)(objectClass=user)(sAMAccountName=$user))" msDS-UserPasswordExpiryTimeComputed | grep "msDS-UserPasswordExpiryTimeComputed: " | sed "s|msDS-UserPasswordExpiryTimeComputed: ||") > UNIXTimeStamp=$((("${user_expire_date}"/10000000)-11644473600)) > date_now=$(date +%s) > exp_days=$((("${UNIXTimeStamp}" - "${da...

On Sun, 26 Mar 2017 14:32:53 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > as root: > > ldbsearch --url=ldap://mail -b "DC=hprs,DC=local" -s sub > "(&(sAMAccountType=805306368)(sAMAccountName=mark))" > msDS-UserPasswordExpiryTimeComputed > > search error - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: > Operation unavailable without authentication> <> > > When I added `-U user%pass` it worked. I don't suppose there is a way > to NOT specify the password? I'd rather not have to propigate...

...o tried --ipaddress=dchostname which also did not give a syntax error. > > I did successfully change my domain password with kpasswd. I was > > able to log into Linux and Windows workstations, Dovecot client, and > > a web site which uses ntml_auth. I checked the > > msDS-UserPasswordExpiryTimeComputed and it was 89 days (the domain > > setting is max 90 days). I checked the next day (yesterday) and it > > was still 89 days. I went to log into the Windows workstation and > > Linux workstation today and was locked out! This is exactly the same > > thing that happened wh...

...ba.org> wrote: > > > For a given Samba4 AD user, how do determine the number of days until > > the password expires? > > > > --Mark > > > > This was raised some time ago, try searching the list archives, but it > basically revolves around the 'msDS-UserPasswordExpiryTimeComputed' > attribute. > > Rowland Yes, and thank you for that tip to search for msDS-UserPasswordExpiryTimeComputed. I've changed my subject line to be the same as the other in that thread. I found and tried the scripts discussed. It works perfectly ... on the AD/DC host. I need it to...

...rk Foley via samba <samba at lists.samba.org> wrote: > > > > > ldbsearch --url="/var/lib/samba/private/sam.ldb" -b > > "DC=hprs,DC=local" -s sub > > "(&(objectCategory=person)(objectClass=user)(sAMAccountName=mark))" > > msDS-UserPasswordExpiryTimeComputed > > > > returns 0 records. Certainly because the --url refers the the > > PRIVATE_DIR on the domain server, not the domain member. using > > mail:/var/lib/... or mail.hprs.local:/var/lib/... and a few other > > variations I could think of did not work. > > &g...

...these worked with the new PW. Later, I checked the Linux workstation's /etc/passwd to make > sure there was no entry for my user (there wasn't). It does seem strange. > > Unfortunately, I did not check either msDS-KeyVersionNumber or pwdLastSet or even ldbsearch to > get msDS-UserPasswordExpiryTimeComputed before I reset the user pw from the domain > administrator. Next time! > > In this thread I've been given 3 more ideas on how to do this: > > samba-tool -U <myuser> user password > > smbpasswd > > kpasswd > > I'll try each and see which works best fo...

..."mappedDomain":"SAMDOM" # Shortend output, removed irrelevant key/values ? } } ldbsearch -H /var/lib/samba/private/sam.ldb -s sub -b 'CN=test 1 user,OU=User Accounts,DC=samdom,DC=com' '(objectClass=user)' userAccountControl accountExpires accountExpires msDS-UserPasswordExpiryTimeComputed 2> /dev/null # record 1 dn: CN=test 1 user,OU=User Accounts,DC=samdom,DC=com accountExpires: 9223372036854775807 userAccountControl: 512 msDS-UserPasswordExpiryTimeComputed: 133364804925898560 # returned 1 records # 1 entries # 0 referrals 'userAccountControl' and 'accountExpires...

...istrator' > > > > > > > > Rowland > > > > > > Great! That did it. Final command: > > > > > > ldbsearch --url=ldap://mail -b "DC=hprs,DC=local" -P -s sub "(&(sAMAccountType=805306368)(sAMAccountName=$USER))" msDS-UserPasswordExpiryTimeComputed > > > > Not quite where I need to be. The above with the -P option works on the domain member when > > logged in as root. I had planned on interecepting the lightDM login program to incorporate > > this, but in fact I have no idea what that is or where to find it. >...

Hi list, long time no see! :) I was looking for an email reminder script for users whose password will expire. Some of our users are on long travels and will never see the Domain's default notification. I haven't found any complete (and simple) solution online. So I wrote one. In case it helps anyone, you find it below. You should only have to fill in the blanks for the the

...#39; is set, I am not sure if Samba uses this. Windows has replaced the above with the aptly named 'ms-DS-User-Password-Expired' attribute which, as far as I can tell, Samba knows nothing about. So, you are left with a couple of options: Check if the 'computed' attribute 'msDS-UserPasswordExpiryTimeComputed' exists and if it does, turn that into a Unix date. Or calculate the expiry time from the contents of the 'maxPwdAge' and the accounts 'pwdLastSet' attributes. Rowland

...ot; > # Shortend output, removed irrelevant key/values > ? } > } > > ldbsearch -H /var/lib/samba/private/sam.ldb -s sub -b 'CN=test 1 > user,OU=User Accounts,DC=samdom,DC=com' '(objectClass=user)' > userAccountControl accountExpires accountExpires > msDS-UserPasswordExpiryTimeComputed 2> /dev/null > # record 1 > dn: CN=test 1 user,OU=User Accounts,DC=samdom,DC=com > accountExpires: 9223372036854775807 > userAccountControl: 512 > msDS-UserPasswordExpiryTimeComputed: 133364804925898560 > > # returned 1 records > # 1 entries > # 0 referrals > &g...

...samba.org> wrote: > > > > > > > > > > as root: > > > > > > > > ldbsearch --url=ldap://mail -b "DC=hprs,DC=local" -s sub > > > > "(&(sAMAccountType=805306368)(sAMAccountName=mark))" > > > > msDS-UserPasswordExpiryTimeComputed > > > > > > > > search error - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: > > > > Operation unavailable without authentication> <> > > > > > > > > When I added `-U user%pass` it worked. I don't suppose there is a...