similar to: Winbind/nsswitch issue on Solaris 9 (Sparc)

Hi all Maybe a stupid question, but I'm not able to figure this out from the manpage nor from the HOWTOs... How can I force a user to change his password at next logon? I tried: # pdbedit -P "user must logon to change password" -C 0 -u username # pdbedit -u username -P "user must logon to change password" -C 0 # pdbedit -P "user must logon to change password"

Hi all For several days I've been doing tests for our upcoming migration from an NT domain to Samba PDC with ldapsam. We have ~200 clients, mostly NT4 and some Win2k. We want all of our users eventually switch from Windows to KDE on Linux with thin clients through NX :-) I managed to net rpc vampire all user and machine accounts into LDAP, but then I realized some problems: - The

Hi list I just compiled 3.0rc1 on Solaris 9 (UltraSparc IIe) with gcc 3.3. Seems to work fine but I am surprised by the enormous size of the binaries: (ub-blade1):/usr/local/samba/sbin # ll total 232272 -rwxr-xr-x 1 root other 44719632 Aug 28 15:07 nmbd -rwxr-xr-x 1 root other 89726544 Aug 28 15:07 smbd -rwxr-xr-x 1 root other 44807356 Aug 28 15:07 swat -rwxr-xr-x

Hi all. I've been struggling for weeks now to get Samba 3 working on Solaris 9... At least, configure is happy now with my iconv, but still I get these: # testparm Error loading module '/usr/local/samba-3.0.0rc4/lib/charset/ISO8859-1.so': ld.so.1: testparm: fatal: /usr/local/samba-3.0.0rc4/lib/charset/ISO8859-1.so: open failed: No such file or directory In fact: # ls -l

Hi group Quick question before I switch my domain from NT4 PDC to Samba-LDAP: Can I leave the old NT-PDC in my subnet, if I just disable it's netlogon service? Reason: This old NT-Server has a database running which is still needed after the migration to samba, but it doesn't need to have any NETBIOS-NTDomain functionality after the switch, just TCP-IP. I know of third-party tools

Dear all We've been running sucessfully a 2.2.8a Fileserver, member of our NT domain, authentication with winbind, on a Solaris box. As I've experienced stability issues with winbind and some minor problems with missing unicode support, I'm very happy that these problems hopefully will be gone with version 3. Now I noticed, that it seems not to be possible any longer to have an

John, I finally decided to go for it and kick off our NT-PDC (UB-SERVER). I want to transfer our domain (UB) to Samba 3.0.1 with OpenLDAP (2.1.23-1) as backend on Debian Woody (this machine's netbios-name in my test environment is UB-KIOSK). I read all documentation I could get a hold on and followed these procedures you suggested, but I am stuck... > * From: John H Terpstra >

Hi all This seems simple, but I can't figure how tho acheive it. I have: - NT4-PDC - Fileserver (Solaris 9), Samba 3.0.2 member server with winbind I want to migrate my NT4-PDC to Samba PDC with ldapsam. How can I make sure that after vamprie my old PDC to Samba-PDC, the user and group ids will be the same as in the winbind-idmap of my Samba member server? Thanks and regards Paul --

Hi all How can I prevent my Samba PDC from setting the D flag (Disabled) in SambaAcctFlags of all machine accounts created on the fly? smbldap-useradd -w from Idealx which is called by the add machine script directive doesn't do that, so i must be Samba... I use Samba 3.0.7, Debian Sarge, ldapsam Backend (OpenLDAP 2.1.30). Here is my conf: [global] workgroup = UB

Dear Torsten, dear samba list reader Three days ago I switched our domain from a NT 4 domaincontroller to Samba-OpenLDAP, controlled by a Debian Sarge system. I installed the following inofficial Debian OpenLDAP 2.2 packages (I know these are not supported, but TLS with OpenSSL is essential to us...): Package: slapd Version: 2.2.20-1.hrz.1 Package: libldap2.2 Version: 2.2.20-1.hrz.1

Hello, I'm having some problems using winbind on Samba 3.0.1 with /etc/nsswitch.conf on a Solaris 8 server. The Solaris 8 release is 10/00. The basic problem that I have is that there are restrictions on what nsswitch.conf can contain if password ageing is used. My setup is that users connecting to shares on the Solaris samba server are authenticated against a accounts on a Windows Active

Hi, I have the exact same problem (described in this archived mail below) but couldn't find any solution in the archives or on google. So far, I have tried renaming one of the "allowed" libraries like ldap and then creating a symlink named nss_ldap.so.1 to point to nss_winbind.so.1 and also tried renaming in different versions of the /etc/nsswitch.conf file before and after

A few days back, I asked whether it was possible to have winbind co-exist with password aging on a Solaris system. Seems like there is no easy way around this. After a few more days of frantic poking and truss-ing around, I found a crude but seemingly workable workaround. It seems the the library /usr/lib/passwdutil.so.1 is the one responsible for checking that the passwd entry in

Hi I'm new to this list. I'm running samba 2.2.2. on Solaris 8 and trying to get winbind to work. I've modified my nsswitch.conf file to include: passwd: files winbind shadow: files winbind group: files winbind I have compiled samba with the --with-winbind option and copied the libnss_winbind.so files to /lib problems: 1. getent passwd only returns local users (passwd

Hi- I am running Samba 2.2.5 on Solaris 8 with winbind and pam configured. I have the following in my nsswitch.conf: passwd: files winbind group: files winbind Now local users on the Solaris 8 machine cannot change there password using the passwd command: Here is the sample output: # passwd michasp1 Enter new password: Enter new password again: Supported configurations for passwd

Hay together, is the following entry in nsswitch.conf possible ? passwd: compat passwd_compat: winbind I want to use the compat mode, so i can use the +/- semantic. But in this case i cant login with username/password. If i configure the nsswitch.conf like: passwd: files winbind The login works, but so i cant use the +/- semantic. Andy ideas ? Thanks, Andy

I'm hoping this is an easy question, but the way my day has gone I seriously doubt it is going to be. Today, I installed Samba 3.0.24 with winbind support on my FreeBSD 6.2 server. I am able to join my domain and get information concerning groups and passwords from the domain controller (Windows 2003) without any problem. Where I have run into a problem is using getent to get a copy of the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been unable to find any up-to-date information on the problem with solaris and winbind nsswitch.conf. It seems that Solaris doesn't like the winbind option in /etc/nsswitch.conf very much at all. When using the passwd program, it complains: <snip> # passwd pad passwd: Changing password for pad Supported configurations for passwd

I have created a Samab AD-DC on a FreeBSZD-10.3 host. The setup checks out and I am able to join the domain from a Win7 workstation and run the ADUC management console in RAST. I have opened the UNIX Attributed properties tab for "Domain Admins" in the ADUC and set the unix properties. However, I get this notice "UNIX Attributes Unwilling To Perform" and after making the

Hi all This question came up several times in this list in the last couple of weeks, but nobody seems to have found a solution... so I post this again, hoping that anybody out there has the answer. I compiled Samba 3.0.0beta3 on Solaris 9 with the following options: --with-winbind --with-acl-support --with-included-popt --with-pam Starting the daemon or doing testparm gives me always: Error