similar to: Practical guide to migrate from tdbsam to ldapsam

Hi guys/girls, How are you ? I'm looking at migrating my Samba-3.0.1 server which has the standard tdb backend to Samba-3.0.2a with an LDAP backend. I plan to use nss_ldap too. What would be the best way of doing this ? Any assistance would be greatly appreciated. Kindest regards David Wilson D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 83 267 7500 http://www.dcdata.co.za

Hi, I've migrated from an old samba installation (Samba as PDC) that used TDB backend for password. I've setup a box with ubuntu and samba 3 + ldap and I imported the old users. Old users works fine. I have problems with new users and machines. Old users works but they don't show up with smbldap-usershow command and I've problem in changing their passwords. If I check the ldap

Is there anything like "nss_updatedb" [1] for ldapsam account information backend? nss_updatedb caches unix account information, so it is available even when the LDAP directory isn't available But ldapsam stores additional account information. How can I cache this additional account information, so it is also available even when the LDAP directory isn't available? [1]

Robert, First off, the Samba Technical mailing list is not a help facility. Its purpose is purely for discussion of samba design and code implementation issues. Please confine your email to the normal Samba list. There are several avenues for Samba support: 1. The official documentation that consists of: Samba-3 by Example - a book that provides detailed deployment gudiance The Official

System: Sid ; Samba 3.0.0 ; using tdbsam ; no problems Goal: Would like to move password, group, and user data to ldap backend. Problem: I've read Samba-HOWTO-Collection.pdf and don't see exactly how to do this as the Howto addresses primarily the password backend. What I've done so far: 1) Created the openldap bdb and the dc=domain,dc=com base and the admin with password. 2) Run

I am stuck with Samba -Active Directory communication. Trying to bring my SUSE 10.0 to speak with AD Domain. net rpc testjoin - brings a unable to find suitable server message net join - kerberos_kinit_password preauthentication failed and ads_connect preauthentication failed wbinfo -u works fine wbinfo -t works fine getent passwd/group works too smb is running nmb is running winbindd is

Hi, i finally made it working to logon via ldap and roaming profiles... but a new problem is in front of me. i logged in as user already in db, all data is loaded from the roaming profile. but windows complains about securtiy settings (they are risky) in internet explorer, also i have u.s keyboard layout i dont' need. there are also error messages regarding mapping via net use. the

I noticed that when I migrated my users with the migrate_passwd.pl tool from PADL it didn't migrate the actual passwords (just the rest of the posixAccount info). I think I need to set the EXTENDED_SCHEMA variable and then try running the tool again. does anyone know what this should be? I actually thought there might be a migrate_shadow.pl tool that could accomplish this, but there

Hi All, Any thoughts on why, while everything seems ok at the OS level (getent , id -a ) Samba doesn't pickup any supplementary groups when Solaris is configured with 'group: files ldap' in nsswitch.conf and using it's own native nss_ldap.so.1 but does when using PADL's nss_ldap? Everything else is equal. Do they use/accept different calls or could it be an

As some of you may know, I'm trying to set up Samba BDC on a disk- and fan-less tiny mipsel_CPU router running OpenWRT distribution. I already managed to compile Samba 3.0.21a and OpenLDAP 2.3.18 for it, and they seem to work fine. The problem is, this tiny distribution for routers doesn't seem to have anything like Name Service Switch (NSS), and relies solely on /etc/passwd and

I have Samba 3.0.13 and LDAP 2.2.24 installed. I have placed the following directive in my slapd.conf file. TLSVerifyClient demand I have the PADL stuff configured and working fine. ldapsearch with -ZZ works fine. I even have the Idealx smbldap-tools working fine. Samba won't work though unless I set TLSVerifyClient try According to the slapd.conf man page, "try" causes a

I've also noticed that my SIP phones (snom [12]00) seem to deregister themselves after some time, and not be able to re-register until Asterisk is restarted. This problem only manifested with the latest CVS. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com

Hi all! On http://lartc.org/howto/lartc.adv-filter.html I read that a classifiers available bases the decision on how the firewall has marked the packet and on http://lartc.org/howto/lartc.qdisc.filters.html the following example: "tc filter add dev eth1 protocol ip parent 1:0 prio 1 handle 6 fw flowid 1:1" "iptables -A PREROUTING -t mangle -i eth0 -j MARK --set-mark 6" My

A question for the best winbind SID-UID/GID mapping in our situation: I'm building a new infrastructure with Windows 2003SP1 ADS Domaincontrollers and some Debian Servers (File: Samba+NFS; Mail; Web; ....) and varios XP and Debian Clients. After reading Chapter 12. (Identity Mapping) in the Samba-HOWTO is IDMAP_RID in couple with winbind an easy way to solve the problem with syncr.

First, my config: Solaris 8 PADL pam_ldap v165 and pam_nss v211 OpenSSH 3.7.1.p2 All compiled with gcc 2.95.3 that ships with the Sun companion CD LDAP PAM authentication is working well with OpenSSH, privsep is disabled, challenge-response authentication is enabled. I would like to turn on password aging, which seems to be well supported by pam_ldap. Logins going through /bin/login correctly

I am going to have to find a fix for this problem or I'm going to have to quit using iconnect. About one call in 10 or so, iconnect's gateway gives me an error (console output appended below). So upon receiving the error, which as a 4XX error means, "Fatal," asterisk gives up and drops the call. But not iconnect!! The phone at the other end starts ringing, and rings

Hi list Does anyone know if there is a simple way to import standard linux users into the directory server? I have found some but they don't seem to be so flexible since I have to import from several servers into different ou's Regards Per Qvindesland

On 05/05/2015 06:47 PM, Gordon Messmer wrote: > On 05/05/2015 03:02 AM, Ulrich Hiller wrote: >> /etc/openldap/ldap.conf contains the line: >> ------------------------------------------ >> pam_check_host_attr yes > > /etc/openldap/ldap.conf is the configuration file for openldap clients. > It is not used for system authentication or name service. > >>

I'm having trouble getting tls working. It used to work until I changed the smb.conf file to to poing to a different host. I think I have tracked it down to ldap servers ssl cert issuer(CA). I keep getting errors like "self signed certificate in certificate chain" while using openssl commands or a ldapsearch w/ tls and debug mode. So my question is... Where can I put a

Hi Eric and thanks for your answer, What I mean is that I want to find the number of line on the IR code of a specific instruction. I found out that I can use: DebugLoc Loc = CurrentInstruction->getDebugLoc(); unsigned Line = Loc.getLine(); But this works only if DEBUGFLAG is True. I'd like to be able to get the Line number without being on a 'Debug' mode. Is