Displaying 20 results from an estimated 200 matches similar to: "ldif invalid per syntax"
2014 Jul 03
1
How to manipulate ldap access rights on Samba 4?
Hi,
I'm having hard time getting sssd_sudo to work: when sssd_sudo
accesses Samba ldap with host principal 'dc1$@teemu.local' it can't
read necessary attributes like objectclass: sudoRole. When accessing
as Administrator all attributes are shown. How can I enable other
users then Administrator to access sudoers' attributes? Below is an
example.
[root at dc1 var]# kinit
2014 Jul 02
1
sssd_sudo search results different from command line ldapsearch
Hi all! I'm attempting to configure sudo rights from Samba ldap. Alas,
libsssd_samba receives 0 rules and config doesn't work. I think I have
the problem identified here but I don't understand why. The way
sssd_sudo searches for sudoers leave all important attributes out and
of course filtering then fails. Can you help me to understand why
following search results are so different (and
2014 Aug 13
1
howto install sudo schema
Hi everyone
i wish to add the Microsoft Active Directory schema from the sudo
package to my samba4 ADC,
from what i have researched this is what i should do,
the Microsoft Active Directory schema and the instructions are from the
sudo package,
the sudo_user file is an example from the man page.
ldbadd -H /etc/samba/private/sam.ldb \
schema.ActiveDirectory \
--option="dsdb:schema
2010 Oct 29
2
migrating users to openldap
I noticed that when I migrated my users with the migrate_passwd.pl
tool from PADL it didn't migrate the actual passwords (just the rest
of the posixAccount info). I think I need to set the EXTENDED_SCHEMA
variable and then try running the tool again. does anyone know what
this should be?
I actually thought there might be a migrate_shadow.pl tool that could
accomplish this, but there
2016 Apr 21
1
[Solved] Samba 4 sudoers
On Thu, 21 Apr 2016, John Gardeniers wrote:
> Good news, I now have this working. Once I finish writing my notes I'll make
> them available to whoever might want them.
Good to hear. I tried to get his working by following some of the online
docs and the sudoers docs, and never did get it to work. It'd be great if
someone could put this up on the Samba wiki when it's
2014 Jan 19
1
sudo (+ldap+kerberos) not accepting password
So I have this centos 5.10 box which authenticates network users
against ldap(authorizing)+kerberos(authentication). And I now would
like to have sudo be able to allow admins (netgroup chinbeards) to
sudo about. I am not using sssd though (yet).
Here is the output of me trying sudo (debug on):
[raub at centos5-x64 ~]$ sudo pwd
LDAP Config Summary
===================
uri
2011 Feb 22
1
openldap problems authenticating
Hello list,
I am running an openldap 2.4 server under FreeBSD that was working
well until the config was tweaked by someone on the team without
properly documenting their work
# /usr/local/etc/ldap.con on ldap server (FreeBSD 8.1)
host LBSD.summitnjhome.com
base dc=summitnjhome,dc=com
sudoers_base ou=sudoers,ou=Services,dc=summitnjhome,dc=com
binddn
2010 Oct 28
2
adding user ldif to ldap
hi list.. I am trying to add an ldif with my users that I have derived
from /etc/passwd. for some reason ldapadd is choking on the first
entry... I've also tried removing the first one and predictably each
one fails in exactly the same way...may I ask how best to correct
this?
Here is the error:
LDAP# ldapadd -x -D "cn=Manager,dc=summitnjhome,dc=com" -W -f /tmp/passwd.ldif
adding
2010 Sep 24
2
grep contents of file on remote server
Hello,
I am attempting to grep the contents of a key file I have SCP'd to a
remote server. I am able to cat it:
[code]
[bluethundr at LBSD2:~]$:ssh root at sum1 cat /root/id_rsa.pub
root at lcent01.summitnjhome.com's password:
ssh-rsa
2010 Nov 16
5
ssh prompting for password
hello list
I have a network mounted home directory shared between all hosts on my network:
[bluethundr at LCENT03:~]#df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
140G 4.4G 128G 4% /
/dev/sda1 99M 35M 60M 37% /boot
tmpfs 1.6G 0 1.6G 0% /dev/shm
nas.summitnjhome.com:/mnt/nas
2010 Jan 21
0
Samba/Winbind 3.4.4 on AIX 5.3 TL 10 does not retrieve ANY User's Secondary Groups
Hi folks !
Has someone any idea on this issue on AIX 5.3 TL 10 with winbind ?
I'm really stuck now ...
I think everything is working pretty well with WINBIND and AD 2k3 ,
but not my most important point : I absolutely need the Secondary groups of
each AD user which get connected to the AIX to use this filter with sudo...
I only get Primary Group (which is by default "Domain Users"
2019 Apr 12
3
Sudo rules in samba with winbind
Hello All,
I am currently changing my samba linux clients (Debian) from sssd binding
to winbind.
With sssd I had all sudo rules within the samba active directory.
The configuration was based on:
https://lists.samba.org/archive/samba/2016-April/199402.html
Is there some guideline like the one mentioned available/has someone
already experience with this for winbind based clients?
Within the
2010 Dec 12
1
heartbeat configuration for lb
hello list!
I am attempting to setup haproxy using a shared up I am trying to
setup using the heartbeat package that I currently have installed:
[root at VIRTCENT01:~]#rpm -qa | grep heartbeat | grep -v -e stonith -e pils
heartbeat-2.1.4-11.el5
heartbeat-2.1.4-11.el5
I have /etc/ha/.d authkeys setup this way:
#
auth 2
#1 crc
2 sha1 {SHA}secret
I have /etc/ha.d/resources setup like this:
2011 Oct 18
3
haproxy ssl
hello list,
I am attempting to load balance SSL web servers using haproxy on centos 5.7.
I am using HA-Proxy version 1.4.18
Here is the stanza in the config regarding SSL:
listen https 192.168.1.200:443
mode tcp
balance roundrobin
option forwardfor except 192.168.1.200
option redispatch
maxconn 10000
reqadd X-Forwarded-Proto:\ https
2011 Feb 09
2
file serving error
hello again list!!
I am attempting to work out how to serve files with puppet.
Here is my fileserver.conf file
# This file consists of arbitrarily named sections/modules
# defining where files are served from and to whom
# Define a section ''files''
# Adapt the allow/deny settings to your needs. Order
# for allow/deny does not matter, allow always takes precedence
# over
2013 Jun 29
1
samba4 pdc: Import sudoers active directory schema to ldb
Hi guys and congrats for bringing a fantastic project to the open source world. I' ve setup a samba4 pdc succefully and i am able to do domain logins. I was also able to add the automount schema into the ldb. But when it comes to sudoers schema i cant import it in.
Further system details:
Debian wheezy 7,
samba 4.0.6 compiled from source,
sudo-ldap standard binary package from repos.
I have
2023 Nov 24
1
Sudoers in Samba LDAP
Hi,
I have a DC on samba 4.17.12
I want store sudoers in LDAP, and use sssd for get rules from LDAP.
I was configured sssd.conf
[sssd]
config_file_version = 2
services = nss, pam, sudo
user = _sssd
domains = TEST.ALT
[nss]
[sudo]
[pam]
[domain/TEST.TLD]
dyndns_update = true
id_provider = ad
auth_provider = ad
chpass_provider = ad
access_provider = ad
default_shell = /bin/bash
2023 Nov 24
1
Sudoers in Samba LDAP
On Fri, 24 Nov 2023 13:30:13 +0500
Anton Shevtsov via samba <samba at lists.samba.org> wrote:
> Hi,
>
> I have a DC on samba 4.17.12
>
> I want store sudoers in LDAP, and use sssd for get rules from LDAP.
>
> I was configured sssd.conf
>
> [sssd]
> config_file_version = 2
> services = nss, pam, sudo
> user = _sssd
> domains = TEST.ALT
>
>
2010 Nov 28
2
ssh-agent fails to hold values
Hello list
I am attempting to manage my key logins with ssh-agent. However EVERY
time I try to ssh I have to go through the same exact routing and it's
getting a little old...
[bluethundr at LCENT01:~]#ssh sum3
Enter passphrase for key '/home/bluethundr/.ssh/id_rsa':
[bluethundr at LCENT01:~]#exec ssh-agent bash
[bluethundr at LCENT01:~]#ssh-add
Enter passphrase for
2023 Nov 24
1
Sudoers in Samba LDAP
24.11.2023 14:57, Rowland Penny via samba ?????:
> On Fri, 24 Nov 2023 13:30:13 +0500
> Anton Shevtsov via samba<samba at lists.samba.org> wrote:
>
>> Hi,
>>
>> I have a DC on samba 4.17.12
>>
>> I want store sudoers in LDAP, and use sssd for get rules from LDAP.
>>
>> I was configured sssd.conf
>>
>> [sssd]
>>