similar to: Change password from member server

After a long battle with the having the password hash types that samba sets in LDAP being incompatibile with anything else that I wanted to do I finally have the idealx tools set to give me crypt passwords. Now however I'm running into the familiar "You don't have permission to change your password" problem, but the passwords are actually set correctly. My test machine is

For several versions now, we've been unable to get password changing to work *without errors*. Now management would like to see it working fantastic so that we can age passwords, but without errors. No matter what I do, I get a couple of errors. The first time I try to change from a 7 letter password to '#1password', which should be complex enough for any rule, I get: The username

---------------------------- Original Message ---------------------------- Subject: Re: [Samba] posixAccount for Machines in LDAP? From: kent@www.warehamportal.mec.edu Date: Wed, July 14, 2004 12:19 pm To: "Paul Gienger" <pgienger@ae-solutions.com> -------------------------------------------------------------------------- Hi Paul, Finally got it to work. This is great!!

I realize this may not/probably does not have anything to do with samba per se, but it didn't happen before I upgraded/rebuilt this particular server on 3.0.7. I'll ask anyway in case somebody has seen this... I have ONE user on ONE workstation that occasionally gets locked out of his workstation with the message about a corrupt/inaccessable profile, using a temp (sorry for not

Well folks this is getting irritating. When we map our Solaris Home directory to a network drive on the NT side of life then attempt to "make a new folder" it actually does make the new folder in the home directory, but it just hangs up on the Windows side. Any ideas why we don't get a return response? Another thing is that if we select a ".txt" file to view, the log files

I've got an issue with a fresh (and I mean really fresh) 3.0.5 + ldap server where doesn't seem to recognize unix group membership. The server was 2.2.8a last night and things were working. The unix side works flawlessly, in other words if I log in as myself I can get where I need to, but under samba I get nothing. Here's some supporting info: my group membership information:

Paul, Deryck, et al., Thanks for all of your help (OP isn't savvy--what was your first clue? <g>). After sufficient prodding, I went and looked and found the following URL, at our very own samba.org, for rpms for Samba v 3.0.14a:

I'm curious, why is it that most samba programs take -U as the username flag, but pdbedit uses -u? This one gets me every time that I run pdbedit. -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Systems Architect Fax: 701-281-1322 URL: www.ae-solutions.com mailto: pgienger@ae-solutions.com

Does anyone know if there is a way to disable roaming profiles, for a particular user, from the server side? I thought of trying to blank the server profile string in their account attributes, but of course that says 'use the default' which will be to do whatever smb.conf says. Will setting it to something nonsensical, like a space, make it think to not have one? I'd rather do

Here is my scenario: I have two directories that have their access controlled by secondary groups of the users. \\server\coolguys is available to the group 'admins' while the directory \\server\averagejoes is accessible to the group 'lusers'. I have a user, we'll call him joe, that is primarily in the admins group, but is also in lusers. If joe is to copy a directory or a

Hi, as far as i know, samba reads it's configuration every 30 secs or so. Just add a share to smb.conf and you will see.... Mit freundlichem Gru?, Dirk Laurenz Systems Engineer PSO - Professional Service Organisation Fujitsu Siemens Computers Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 (511) 84 89 - 18 08 Telefax: +49 (511) 84 89 - 25 18 08

---------------------------- Original Message ---------------------------- Subject: Re: [Samba] posixAccount for Machines in LDAP? From: kent@www.warehamportal.mec.edu Date: Tue, July 13, 2004 4:54 pm To: "Paul Gienger" <pgienger@ae-solutions.com> -------------------------------------------------------------------------- Thanks for getting back to me, Paul. Here's

We are in the process of updating samba on our Solaris servers from (2.0.5) to (3.0.2) I have completed one host and all seems to working ok. However I have noticed that for both versions of samba, as users map shares the smbd process which starts can be either own by root or the users id. This seems to be random. Can anyone shed light as to what controls the owner of this process. This is

>i've seen your posts on this forum > >http://www.24help.info/showthread.php?t=155267 > > Bringing this on list so that someone else can drop in some wisdom if I miss... Good logs btw. Could we get some sysinfo here? What passdb backend are you using? OS and Samba version too if you don't mind, for posterity. >seems that i've quite the same problem, but i

We have our 2.2.8a network functioning, well with the standard smbpasswd backend. Lately people have started getting messages about their password expiring. I haven't seen anyplace in this version that a person can enforce password aging. One person has changed their password and then it stopped, I believe that if I change their (samba) password on the server it stops as well.

Here's an issue I don't think I've seen come up since I've been trolling that is going to be a headache for me: Say I have a user on a laptop, when he is constantly on the network, everything is happy. Say the user goes home, does some work, monkeys around with his settings, and comes back. As soon as said user logs on he gets the copy of his profile from the last time he

The situation I've got is that I want to make one domain, and then use it on several different subnets. I have 3 subnets, 10.1.x.x, 10.2 and 10.3, all physically remote, but connected by a frees/wan tunnel that is working just fine. We also have working LDAP logins and all that is fine. I have gotten as far as getting my domain going on LDAP within one subnet, but now I'm trying

Actually, my problem turns out to be even more basic and foolish than that. I assumed that since the relevant Kill files were present in the ls listing, then the Start files would be, too. Nope. I had to make those soft links; when I did, everything worked properly. Eric Hines -------- Forwarded Message -------- From: Paul Gienger <pgienger@ae-solutions.com> <snip> Date: Sun, 27

The Samba 3.0.5rc1 server is configured as a PDC. [global] # client code page = 866 # NetBIOS name of that comp netbios name = TOLTEC #Name of Domain workgroup = liin #Comment server string = Samba PDC %v #Interface where samba works interfaces = 10.0.0.4/24 127.0.0.1/24 bind interfaces only = yes hosts allow = 10.0.0. name resolve

I'm trying to setup a PDC (and later on a BDC as well) using samba 3.02a and openLDAP 2.2.13 and I'm having some trouble with the idealx scripts. When I run the command /usr/local/sbin/smbldap-useradd alex I get the message: Can't locate object method "new" via package "Net::LDAP" (perhaps you forgot to load "Net::LDAP"?) at