similar to: samba+ldap passwd sync

Hi ! I'm desperately looking for an answer here... I've been fighting all week-end with samba-3.0 and there's still something I can't do... Basically: how can I add some of my users to the Domain admin group ? I use FreeBSD-5.1+samba3.0RC3. My group maps: Admins du domaine (S-1-5-21-xxxx-512) -> domainadmins Utilisa. du domaine (S-1-5-21-xxxx-513) -> domainusers Invites du

Hello, I'm using Samba 3.0.0rc2-Debian on Debian unstable. At the time being it does everything I want it to except one: I'm in the wrong workgroup. Despite the line workgroup = BETASIG in my smb.conf, I show up in the workgroup "WORKGROUP." There is no mention of "workgroup" or "WORKGROUP" anywhere else in my smb.conf other than this. Would be happy

How do you add an "Administrator" account to ldap. I want to leave root in /etc/passwd but have "Administrator" in ldap I have checked Howto Collection and the Samba-Ldap-3 but they contain no information. The Ldap-Howto has a suggestion but then says not to use. Godfrey

Hi ! I was just wondering if that piece of code was important (for security and such), because I had to comment it in smbldap.c before compiling samba-3.0; otherwise, I would have errors like: "(Insufficient access)smbldap_open: cannot access LDAP when not root" #ifndef NO_LDAP_SECURITY if (geteuid() != 0) { DEBUG(0, ("smbldap_open: cannot access LDAP

Hello, We have an otherwise working Samba PDC+LDAP setup but for one minor detail. The shadowLastChange is not updated when the user sets his password from a Windows workstation (all the necessary Samba*-fields as well as userPassword is updated in LDAP). We've enabled 'ldap passwd sync = Yes' in smb.conf. slapd.conf contains the appropriate access rule for the said field. The

In the course of correcting directory references for Mandrake in smbldap-tools I came acrossed the following: samba-2.2.7a/examples/LDAP/ldapsync.pl on line 72 we have: > $ntpwd = `/usr/local/sbin/smbencrypt '$oldpass'`; On Mandrake this would be: > $ntpwd = `/usr/sbin/smbencrypt '$oldpass'`; Except that I can't find anything by that name (i.e.

We've got the 'ldap auth sync = yes' working perfectly, but we'd like to have the SMB's passwords updated via passwd an PAM aware apps. We tryed pam_smbpass.so but without any effects no matter of the different required, sufficient or optionnal keywords in the /etc.pam.d/passwd : passwd sufficient pam_ldap.so passwd optionnal pam_smbpass.so audit nullok use_authtok

When I am setup external passwd change script (syncldap) for sync my smb pass and unix pass, and change smb password on my windows client client, him return error, but password change is successful! It's log from samba for my windows client machine: [2004/08/04 11:46:52, 3] smbd/chgpasswd.c:chat_with_program(424) chat_with_program: Dochild for user g-marchenko (uid=0,gid=0) (as_root =

Hi all, I'm running Samba 2.2.7a on RedHat8.0 with LDAP (latest RPM from redhat) Well I configured samba to act as a PDC with LDAP following IDEALX recommandations. Everything works fine BUT the password change, I cannot change the passwords from the Win2000 or WinXP WS, it always says that the password or username doesn't match .... Of course it matches, I tried too many things to

Hi ! Is there the need for a root account when using samba-3.0+ldap ? I'm asking this because I cannot add XP workstations to the domain (I made the registry changes), I get an "access denied". Under NT, there's no problem, it does not even ask for a login/password as long as the workstation account is created in samba. With XP, I use a user account who is also part of the

hi list, i am playing with samba 3.0 alpha 17 from cvs 20020701 and global groups running as pdc. i installed to /usr/local/samba30 (having the lock dir under /var/lock/samba30). i mapped some unix groups, but the dont appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it

Hi ! I'm using samba-3.0RC3 as a PDC (for testing). I'm using the ldap backend. I created 1 user, 1 computer and some groups. I mapped the unix groups domainadmins to "Domain admins" with my_personnal_sid-512. I added my user to domainadmins. I set "admin users = @domainadmins" in my smb.conf, but I still do not have domain admin rights on workstations :( Any idea

We want to build a Debian's unstable samba 3.0.0beta2-1 as PDC with plenty of Windows 2K clients. Joining the domain, Domain Logons, Roaming Profiles, Domain Groups, are Ok. As we thought that Samba 3 cannot handle Win2K's GPOs (isn't it?), we tried NT4 style Group Policies to restrict a bit users posibilities (as we have students as users). Our opinion is that Mandatory Profiles

I have one server windows2000 mixed mode with active directory and samba 3.0 PDC. This is my smb.conf [global] workgroup = TESTIPLANET netbios name = TEST server string = DOMINIO TEST interfaces = 10.10.6.158 bind interfaces only = yes preferred master = Yes domain master = Yes wins support = Yes domain logons = yes

Hello * in my samba installation the unix password sync program is not run as suer root. instead it runs as the user whw want's to change the password: this is a recompiled debian samba_2.999+3.0.alpha23-4 with ldapsam enabled (no other changes to the debian build script) # Global parameters [global] workgroup = SVFMG server string = %h server (Samba %v) obey pam

Hi ! First of all, I am sorry if this is not the list for that, but I've been learning (a little bit...) a way to implement a freeBSD firewall. So far I came up with a set of rules I would like to show you for commenting. I am sure there're a lot of errors and/or stupid rules (I am not sure the rules order is good for what I need) and I would be really pleased if one could have a look

Hi, I found your posting below... I am in a very similar situation and just want to understand what this means a little better. I have compiled openldap and samba on a netbsd box... Not sure if your aware, but nsswitch on netbsd is not modular, and ldap is not an option for the name service backend. (freebsd and linux are not options since its not an x86 box I'm using) Anyway, my ldap

I've setup an LDAP server with a slave server on Centos 5.3 X86_64, replication works, most of the time client logins work fine but I'm starting to get a error I can't seem to eliminate, it's starting to cause login failures for users and I think it's causing other application failures when they try to auth against ldap. on the client side /var/log/messages shows Oct

I host a server where the files on the server are licensed such that only one user can access each file at any one time. To clarify: There could be 100 files on the server, and each file can only ever be read by one user. I'm trying to find a way of either allowing only 1 TCP connection per file, or perhaps forcing a read-lock on every file opened such that no other users can access a file

hi, we using samba3.0.7 with a ldap(tls). it works fine. no problems with dns (reverse) lookups etc. all 20 xp clients can logon fast into the samba machine and access all shares. the problem since 3 weeks is, that after a while all shares freeze for 10-20 seconds in a user session and the user have to wait to continue. not all user at the time. the user get no response from explorer, the