similar to: samba-ldap and password expiration

Hi, We are planning to move all of our win2k server (currenty around 50!) alongwith AD to Linux, we are planning to use LDAP based samba domain controllers for authentication and file/print serving. We are doing a pilot and things are fine till now, just one simple problem, what should we do with our password policy, we have three restrictions relating passwords minimum password length password

hi ! sorry for posting this question, i think it is an easy one, but i cannot get the answer myself. i am using samba-2.2.3a + ldap running on a debian system with w2k-clients. now the problem is: everytime i log into my w2k-client, i get something like "your password expires today! would you like to change it ??" well, i do not really want to change my password everytime i log in,

Hi, i've compiled samba 2.2.4 on a Redhat 7.1 machine, working with openldap 2.0.23. I also downloaded smbldap-tools from IDEALX which i fixed myself to fit my needs. Everything work very fine when running the scripts in shell mode... but! In smb.conf : ============= add user script = /usr/local/sbin/smbldap-useradd.pl -w %u This line don't work and it should, because when running

Hello folks, I am kinda confused as to how to get some values for ldap. For example, here is an ldif entry: dn: uid=gcarter, ou=people,dc=plainjoe,dc=org logonTime: 0 displayName: Gerald Carter lmPassword: 552902031BEDE9EFAAD3B435B51404EE primaryGroupID: 1201 objectClass: posixAccount objectClass: sambaAccount acctFlags: [UX ] userPassword: {crypt}BpM2ej8Rkzogo uid: gcarter uidNumber:

I've got a Samba 2.2.7a domain with an LDAP backend. It's been working for nearly 3 months now without much bother. By the way: Great work and thanks for all of the effort! I have been missing one minor thing from the setup since I moved away from NT 4: Password Expiration. In the past I have posted questions about this on the list and I've gotten two answers: "Wait for

I am updateding my LDAP presentation (ftp://kalamazoolinux.org/pub/pdf/ldapv3.pdf) to include a section on the Samba 2.2.x LDAP backend. But I can't find any definititive documentation on the "time" attributes: pwdLastChange, pwdMustChange. Either how the time is encoded or exactly what they mean. I've seen post saying they are hexidecimal (although they don't look it)

Hi I have a PDC/BDC samba/ldap environment. PDC: samba 3.0.24 slapd 2.3.30 BDC: samba 3.2.5 slapd 2.4.11 Ldap replication is working fine, but I have noticed two issues 1- when a windows user change password on BDC, sambaPwdMustChange and sambaPwdCanChange is not synced on PDC (using ldap passwd sync = yes and unix password sync = no) 2- when using 'net sam set pwdmustchange' on

hi, I've a problem with adding workstations to my samba/ldap pdc - if i add the workstation with win2000 to the pdc then the workstation gets registered in ldap with the following entry: (i am using smbldap-useradd.pl -w -d /dev/null -g computers -c 'Computer Account' -s /bin/false %u) which seems to me to be ok, but the workstation tells me that it couldn't get attached to the

Did anybody get to work password change enforcement with Samba PDC running LDAP ? It looks like it is "semi-working". I was able to enforce password change with USRMGR, but now it keeps asking me for the password change every time. I checked the pwdMustChange attribute and it is still set to 0 for some reason (hence checkbox for the password change enforcement in USRMGR is still checked

Hello, I am doing a samba pdc with ldap. When I try to login to the domain, or access some shares I get this in my ldap logs: Mar 7 16:46:16 localhost slapd[3588]: conn=25 op=4 SRCH base="ou=People,dc=test,dc=org" scope=1 filter="(&(objectClass=posixAccount)(uid=DOMAIN\5CTD))" Mar 7 16:46:16 localhost slapd[3588]: conn=25 op=4 SEARCH RESULT tag=101 err=0 text= My

Hello, Users on our domain can change their password because of the "passwd program" directive in smb.conf The script called by this program only update user's passwords. I would like to add security for the choosen passord, ie i would like to add control on the number of upper case, lower case, digit... This is not a problem. I'd like to know: if the passord is not conformed

Hi, I'm trying to run samba 2.2.6 + OpenLDAP as user/group database ( not /etc/passwd). nss_ldap+pam_ldap is installed and working OK, as I can login using ssh, or trough console with one of ldap user. But trying to connect to samba, when samba is ran as #samba -d 2 -i I get: ... init_sam_from_ldap: User [ldapuser] does not ave a uid! pass_check_smb failed - invalid password for user

Ok, I've got a Samba/LDAP PDC built. I've got my groups added and even have users in those groups. But now I have a few administrative questions. If these questions have be simple answers, be gentle - I'm a newbie. 1). How do I/Can I script the installation of a generic password into these accounts? I'm looking to put some common password in for all users and then allow the

All of my users are defined in LDAP. The Samba server is configured as a PDC and all the users can change their passwords. The problem i have is when i change the following field in the ldap tree : PwdMustChange set to 0 in order the have them to change their passwords. At this point the client workstation replies : The system cannot change your password now because the domain dc_stgeorges is not

the following problem occurs when using samba 2.2.4 or 2.2.5 with ldap support as PDC: any time when a user logs on he is asked to change his/her password. whether he change it or not he will be asked again next time he logs on. this is annoying. the reason is, that the LDAP attribute 'pwdMustChange' is not updated at all. the easiest way to solve this to set the attribute to the

hi, i am at time trying to setup up a samba pdc as replacement for a windows nt pdc (thats the good message). I've already a running openldap 2.1.4-86 with ou's people, groups and computers. I've also already added users to it (with a modifiied version of the migration tools). Also working is pam_ldap and nss_ldap (i can login in into my unix machine with the ldap users - and i can

I can't get a Win2k computer to execute a login script. Also, on both the XP computer and the w2k computer I get this message in their log file [2002/07/24 13:27:17, 0] rpc_server/srv_netlog_nt.c:get_md4pw(188) get_md4pw: Workstation sales1$: no account in domain sales1 is the XP computer, but I get the exact same error for win2k. Both computers (appear) to log on to the domain (as in, I

Hello, I'm new in Samba Ldap. I use samba-2.2.3a and openldap2-2.1.4-46. I am going to load in Ldap a lot of users in a ldif file as it is shown below. But I don't know how to put samba password. I can use: smbpasswd juan1 and then the fields lmPassword and ntPassword are changed. In this way, after load all users in Ldap I would need a script to do a smbpasswd for each user

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I'm on the way to implement samba with ldap on five servers (each owns a different nt-domain) and a master server which maintains the central user database which gets replicated to all the other servers. Now I have just one more problem, namely homedirs. I want every user to have a homedir to store for example his profile. This has to

Hello, I have installed / configured samba-ldap (compiled SAMBA_2_2 from CVS) Whe i try to change the password for the root user, there is no problem. If i try to change the password of an ordinary user, i get the error: nas:~# smbpasswd -U william New SMB password: Retype new SMB password: No user to modify! Password changed for user william. Failed to modify entry for user william. Failed to