similar to: small problem: password expiration

hi ! i have a problem with ldap+pdc too, and since no one answered ingo's request, i will try again. this is my setting: i want to maintain a central authentification for my small but mixed (debian/linux vs w2k) network i am using debian:samba-2.2.3a; compiled it with ldapsam enabled. i am using openldap2-2.0.23; compiled it with TLS enabled simple file-sharing works (at least, none of my

hi ! my systems started to behave weird today. i am running a debian/linux-fileserver (woody/2.4.18) that exports the user-homes and acts as a PDC via samba (2.2.4 --with-ldapsam) to my windoze-clients (w2k/nt). i am using ldap as authentification database. everything worked like a charme, until today. suddenly some users cannot authenticate against the windoze-machines any more. other users

Hi I have serveral questions about groups in ldap. Is it possible to use different groups with the same well known SID or is a well known SID only allowed once? Is it allowed to uses spaces in groupnames, e.g. "domain admins"? Afaik groups with spaces are not posix conform. In Samba-Developers-Guide.pdf included with samba 3.0 page 72f. In the document well known groups have special

Hello, I recently moved a samba fileserver and PDC to a new server. Since then, all Windows Users have very limited permissions, not allowing changing even the time settings. Before moving the server, each windows user had the same rights as a "Standard User" or "Main User" (not sure about the english term, using a German windows. In German its called

I would like to have sync'd Unix and Samba passwords. My Unix passwords are stored in OpenLDAP for uniformity across machines and services. I have some problems with the standard solutions to this problem though: * if I have Samba authenticate from OpenLDAP directly (using the smbPassword attribute), then I get sync'ing problems when the password is changed via normal Unix means. We

Hi, I have setup samba on redhat 7.3 and configured it as a windows 2000 Primary Domain Controller. Everything works fine, however, everytime that Windows NT or 2000 clients log onto the domain they get a message stating that their password has expired and asking them if they want to change it. It doesn't matter if you answer Yes and change it or answer No and just continue on, the message

hello list! first: sorry for my english and the long mail, but i REALLY need help! i want to kick the nt4 pdc in our network and thought to realize single sign on with samba and ldap. i made two testserver: the first test was with suse linux 7.3 with latest openldap, pam_ldap, nss_ldap and samba 2.2.3a (i compiled all components myself!). the second was with suse linux 8.0 with openldap,

Hi, We are planning to move all of our win2k server (currenty around 50!) alongwith AD to Linux, we are planning to use LDAP based samba domain controllers for authentication and file/print serving. We are doing a pilot and things are fine till now, just one simple problem, what should we do with our password policy, we have three restrictions relating passwords minimum password length password

Hello every body, i am using samba (2.2.8a) with ldap support. In the samba.schema, there are special attributes relatives to the user passord: pwdMustChange, pwdCanChange, kickoffTime, logoffTime, logonTime and pwdLastSet. All the samba's documentations i can found described those attributes as "currently unused", execpt the last one that represent the time modification since 1970.

I need capabilities, for my data analysis, like the Pinheiro & Bates S-Plus/R package nlme() but with binomial family and logit link. I need multiple crossed, possibly interacting fixed effects (age cohort of twin when entered study, sex of twin, sampling method used to acquire twin pair, and twin zygosity), a couple of random effects other than the cluster variable, and the ability to

> my solution (found in some ldap-samba-pdc-howto) was to set the > pwdMustChange to 2147483647 (which is far in the future: 2030 or > something) thank you very much! your solution solved this problem. >> 2. the unix password sync doesn't work. but i think there are two >> different problems, but let me describe: if i activated the password >> sync, i got on >

I've got a Samba 2.2.7a domain with an LDAP backend. It's been working for nearly 3 months now without much bother. By the way: Great work and thanks for all of the effort! I have been missing one minor thing from the setup since I moved away from NT 4: Password Expiration. In the past I have posted questions about this on the list and I've gotten two answers: "Wait for

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I'm on the way to implement samba with ldap on five servers (each owns a different nt-domain) and a master server which maintains the central user database which gets replicated to all the other servers. Now I have just one more problem, namely homedirs. I want every user to have a homedir to store for example his profile. This has to

Hi, i've compiled samba 2.2.4 on a Redhat 7.1 machine, working with openldap 2.0.23. I also downloaded smbldap-tools from IDEALX which i fixed myself to fit my needs. Everything work very fine when running the scripts in shell mode... but! In smb.conf : ============= add user script = /usr/local/sbin/smbldap-useradd.pl -w %u This line don't work and it should, because when running

Hello folks, I am kinda confused as to how to get some values for ldap. For example, here is an ldif entry: dn: uid=gcarter, ou=people,dc=plainjoe,dc=org logonTime: 0 displayName: Gerald Carter lmPassword: 552902031BEDE9EFAAD3B435B51404EE primaryGroupID: 1201 objectClass: posixAccount objectClass: sambaAccount acctFlags: [UX ] userPassword: {crypt}BpM2ej8Rkzogo uid: gcarter uidNumber:

I am updateding my LDAP presentation (ftp://kalamazoolinux.org/pub/pdf/ldapv3.pdf) to include a section on the Samba 2.2.x LDAP backend. But I can't find any definititive documentation on the "time" attributes: pwdLastChange, pwdMustChange. Either how the time is encoded or exactly what they mean. I've seen post saying they are hexidecimal (although they don't look it)

Hi I have a PDC/BDC samba/ldap environment. PDC: samba 3.0.24 slapd 2.3.30 BDC: samba 3.2.5 slapd 2.4.11 Ldap replication is working fine, but I have noticed two issues 1- when a windows user change password on BDC, sambaPwdMustChange and sambaPwdCanChange is not synced on PDC (using ldap passwd sync = yes and unix password sync = no) 2- when using 'net sam set pwdmustchange' on

Did anybody get to work password change enforcement with Samba PDC running LDAP ? It looks like it is "semi-working". I was able to enforce password change with USRMGR, but now it keeps asking me for the password change every time. I checked the pwdMustChange attribute and it is still set to 0 for some reason (hence checkbox for the password change enforcement in USRMGR is still checked

Ok, I've got a Samba/LDAP PDC built. I've got my groups added and even have users in those groups. But now I have a few administrative questions. If these questions have be simple answers, be gentle - I'm a newbie. 1). How do I/Can I script the installation of a generic password into these accounts? I'm looking to put some common password in for all users and then allow the

hi, I've a problem with adding workstations to my samba/ldap pdc - if i add the workstation with win2000 to the pdc then the workstation gets registered in ldap with the following entry: (i am using smbldap-useradd.pl -w -d /dev/null -g computers -c 'Computer Account' -s /bin/false %u) which seems to me to be ok, but the workstation tells me that it couldn't get attached to the