Displaying 11 results from an estimated 11 matches for "userpkcs12".
2008 Jul 20
2
Error setting initial password for a user when using LDAP as backend and trying to set Samba and Unix password to the same value
...users to authenticate
# Allow read access to everything else
# Directives needed to implement policy:
access to dn.base=""
by dn="cn=samba,dc=jetsys,dc=de" write
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by dn="cn=samba,dc=jetsys,dc=de" write
by * read
-------------- next part --------------
[global]
log level = all:10
workgroup = JETSYS
security = user
domain logons = ye...
2007 Oct 26
0
acl for samba hosts
Hi list,
i got an question about the right acls for my Samba+ldap can someone
have an look.
acl.conf
access to dn.base=""
by * read
access to dn.base="cn=subSchema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to dn.subtree="ou=adressbuch,dc=test,dc=intern"
by users write
by * read
access to dn.subtree="ou=users,dc=test,dc=intern"
by self write
by dn="uid=admin,ou=users,dc=test,dc=i...
2013 May 08
0
Using Windows ACL on a samba3 share
Hello again,
I am using samba 3.5.6. I have another though maybe this problem occurs due to my OpenLDAP service? My /etc/openldap/slapd.conf is using:
[...]
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
[...]
Could that be the problem because slapd is denying any kind of access to the samba or nsswitch process??? If so, how should I modify these lines t...
2013 May 09
0
Using Windows ACL on a samba3 share
...though maybe this problem occurs due to my OpenLDAP service? My /etc/openldap/slapd.conf is using:
>
> [...]
> access to dn.base=""
> by * read
>
> access to dn.base="cn=Subschema"
> by * read
>
> access to attrs=userPassword,userPKCS12
> by self write
> by * auth
>
> access to attrs=shadowLastChange
> by self write
> by * read
>
> access to *
> by * read
>
> [...]
>
You could start by disabling those lines and see if the problem disappea...
2005 Jun 03
1
AttributeType not found: "gidNumber" errormessage - SuSE 9.2
...security restrictions
# Require integrity protection (prevent hijacking)
# Define global ACLs to disable default read access.
#access to dn.base=""
# by * read
#access to dn.base="cn=Subschema"
# by * read
#access to attr=userPassword,lmPassword,ntPassword,userPKCS12
# by self write
# by * auth
#access to attr=shadowLastChange
# by self write
# by * read
#access to *
# by * read
#######################################################################
# BDB database definitions
##################################################...
2009 Feb 18
1
samba can not contact the ldap server
...word
# Allow anonymous users to authenticate
# Allow read access to everything else
# Directives needed to implement policy:
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., "ac...
2008 Nov 05
1
Samba 3.2.4 not locking accounts?
...e /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba3.schema
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
loglevel -1
database bdb
suffix "dc=xxx"
rootdn "cn=Administrador,dc=xxx"
rootpw "{SSHA}xxx"
directory /var/lib/ldap/...
2004 Oct 22
2
Samba + LDAP as a PDC - unable to log in (but able to join a domain)
Hello,
I'm trying to get Samba to work as a PDC for a group of Windows clients.
I followed two tutorials form IBM developers works: 1) using Samba as a
PDC (which is missing domain controller = yes), 2) Using an LDAP
Directory for Samba authentication.
So I was able tu run Samba 3 as a PDC (without LDAP) - I could join a
domain, add a user, machines were added automatically, roaming
2005 Feb 12
1
Any ideas - samba3+openldap2.2.15-5: problems loggin users onto domain
.../etc/openldap/schema/samba3.schema
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
modulepath /usr/lib/openldap/modules
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attr=userPassword,userPKCS12
by self write
by * auth
access to attr=shadowLastChange
by self write
by * read
access to *
by * read
database ldbm
checkpoint 1024 5
cachesize 10000
suffix "dc=labredes,dc=tre-sc,dc=gov,dc=br"
rootdn &...
2020 Feb 15
0
Teo En Ming's Manual for Setting Up Samba 4.11.6 and CentOS 8.1 (1911) Linux Server QEMU/KVM Virtual Machine as an Active Directory Domain Controller (AD DC)
.../lib64/python3.6/site-packages/samba/provision/__init__.py #1601: Setting up sam.ldb users and groups
INFO 2020-02-15 09:34:32,967 pid:3873 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1609: Setting up self join
Repacking database from v1 to v2 format (first record CN=userPKCS12,CN=Schema,CN=Configuration,DC=teo-en-ming,DC=corp)
Repack: re-packed 10000 records so far
Repacking database from v1 to v2 format (first record CN=pKICertificateTemplate-Display,CN=406,CN=DisplaySpecifiers,CN=Configuration,DC=teo-en-ming,DC=corp)
Repacking database from v1 to v2 format (first recor...
2005 Dec 06
4
BIG Samba howto for debian only.
Hi everybody,
I made a pretty complete howto for samba on debian servers.
This howto covers samba + ldap + cups + recycle bin + samba-vscan
+ phpldapadmin + ACL + Extended Attributes.
this howto is also based on the idealx howto
If you do this setup, you should be able to use the NT4 Usermanager,
setup Point en Print Printing. set rights from explorer etc.
other nice tools is ldapadmin (