similar to: smbpasswd and rpcclient differences between 3.0.14a and 3.0.21a

I have been searching for information about implementing Logon Hours with a Samba 2.2.5 PDC (or for that matter any version of SAMBA) but haven't yet noticed any postings or correspondence. I have set up a a Samba PDC and have mapped shares, authenticated users, blah blah blah, .... everything seems to work fine. I checked with 'rpcclient' to see what sort of information is

We are using W2K domain with Samba3 servers. The implementation of samba servers with winbind authentication was successful. Now we are looking for winbind idmap ldap backend for distributing winbind users ID's, and I have following question: 1. Do I need put all users from W2K domain to LDAP by hand (with export - import tools)? 2. Or it is possible to automatically put successfully

On Sat, 31 Mar 2018 12:25:14 +0100 Rowland Penny <rpenny at samba.org> wrote: > > On Fri, 30 Mar 2018 20:19:02 -0400 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > > On Wed, 28 Mar 2018 20:14:00 +1300 Andrew Bartlett > > > <abartlet at samba.org> wrote: > > > > > > > > On Wed, 2018-03-28 at 03:09 -0400, Mark

On Mon, Jun 18, 2018 at 11:36 PM, Andrew Bartlett <abartlet at samba.org> wrote: > On Mon, 2018-06-18 at 15:56 -0400, pisymbol wrote: > > I have a binary based off of rpclient that prints out the raw share > > SD as a binary stream instead of trying to parse it into human > > readable format (the default behavior). That is what I'm after. > > > >

On Mon, Jun 18, 2018 at 3:53 PM, pisymbol <pisymbol at gmail.com> wrote: > > > On Mon, Jun 18, 2018 at 2:39 PM, Andrew Bartlett <abartlet at samba.org> > wrote: > >> On Mon, 2018-06-18 at 10:35 -0400, pisymbol via samba wrote: >> > Small addendum, I did try: >> > >> > ./configure --nonshared-binary=ALL >> > >> > ERROR:

OK, I'm having issues with the problem. To summarize, I'm trying to have a normal user change his password from a domain member. I've tried: passwd, kpasswd and 'samba-tool user password -U $USER --ipaddress=<IPofAD/DC>'. All mechanisms do change the domain password and I can log into Windows and Linux domain members, and website requiring domain authentication.

On Tue, 2018-06-19 at 12:41 -0400, pisymbol wrote: > > > On Tue, Jun 19, 2018 at 5:31 AM, pisymbol <pisymbol at gmail.com> wrote: > > > > On Mon, Jun 18, 2018 at 11:36 PM, Andrew Bartlett <abartlet at samba.org> wrote: > > > On Mon, 2018-06-18 at 15:56 -0400, pisymbol wrote: > > > > I have a binary based off of rpclient that prints out the

I succesfully setted up the winbind with "idmap backend = ldap:ldap:..." LDAP is used only to store idmap's. The problem: On the server with OpenLDAP and winbind, all is working fine! Thanks to the SAMBA team and OSS community! But on the second server, where winbind is used to authenticate users and retrieve uid's from server with ldap, users get error message: "id:

On Fri, 3 Feb 2017 07:44:39 -0700 Jeff Sadowski via samba <samba at lists.samba.org> wrote: > This seems to work for maxPwdAge > > ldapsearch -LLL -Q -s base -h ad.mydomain.tld -b > dc=ad,dc=mydomain,dc=tld maxPwdAge > > now I just need to query a users pwdLastSetq > I tried the commands above but am not getting anything. I tried > looking at the ungrepped output

Winner this worked wonderfully On Fri, Feb 3, 2017 at 8:51 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 3 Feb 2017 07:44:39 -0700 > Jeff Sadowski via samba <samba at lists.samba.org> wrote: > > > This seems to work for maxPwdAge > > > > ldapsearch -LLL -Q -s base -h ad.mydomain.tld -b > > dc=ad,dc=mydomain,dc=tld maxPwdAge

Sorry that was easy enough let seconds=`date -d "${EXPDATE}" "+%s"`-`date "+%s"` let days=$seconds/86400 echo $days > /na/homes/$1/.pwd_exp On Fri, Feb 3, 2017 at 11:15 AM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > Actually is there a way to show it more like a timestamp. It is hard to > compute days left with a date format like that. I

On Sat, 31 Mar 2018 11:42:07 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > On Sat, 31 Mar 2018 12:25:14 +0100 Rowland Penny <rpenny at samba.org> > wrote: > > > > This will then prompt the user for their 'oldpassword' and then the > > new password (twice). There is a gotcha though, as given it will > > only work on a DC, to do the

Actually is there a way to show it more like a timestamp. It is hard to compute days left with a date format like that. I guess I could use date to do the conversion but I was wondering if there is a cleaner way On Fri, Feb 3, 2017 at 8:51 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 3 Feb 2017 07:44:39 -0700 > Jeff Sadowski via samba <samba at

We have 2 Samba Domain Controllers and 1 Samba Domain Member Server, running on Solaris 9. The Solaris servers are native LDAP clients to two OpenLDAP servers. All user-info is available on these servers (getent passwd). Before upgrading to Samba 3.0.21a, we were running Samba 3.0.14a. On the Domain Member Server, when selecting the security-tab of a file or folder, the users were listed as

On my ubuntu machines I added auth required pam_exec.so /scripts/password_expire.sh to the beginning of /etc/pam.d/common-auth it looks pretty similar to what I did below. In the /etc/bash.bashrc I added a check to wait for the file to be less than 1 second old before looking at it. break out after 5 seconds in case something failed or is taking longer then it should. now people get

Hi all, I've been messing this this for the last few hours trying to trust an NT domain. I make it down to where it says "Success!" and the domain trust is added to the secrets.tdb file. However, connecting with rpclient and doing 'enumtrust' gives back no results. I also don't have the trusted domain available for login on my workstation. Oh yeah, I'm using

Hi all! Question about idmap=ldap backend in domain with win2k PDC: Should I manually add all domain users to ldap and then retrieve the idmap from ldap, or in case of sucessfull authentication againt Win2k PDC, users are addedd automaticaly to ldap? Or I can use idmap ldap backend only in SAMBA LDAP PDC case? Thanks! Gints

I had a working "Samba-2.2.7a-SuSE" domain (with roaming profiles,etc.) but this server crashed. So I copied the samba directory with the config files (including secrets.tdb, passwd, ...) from my backup to the second server and started nmb and smb, but the Clients could'nt log onto the domain. The error was something like: "You couldn't log on. Please check username and

On Mon, 2018-06-18 at 10:35 -0400, pisymbol via samba wrote: > Small addendum, I did try: > > ./configure --nonshared-binary=ALL > > ERROR: source source3/smbd/notify_msg.c is in more than one subsystem of > target 'smbstatus': ['smbd_base.objlist', 'smbstatus.objlist'] > > This is CentOS 7.5. > > -aps Building more than smbd and

Sorry for the cross post, but I can't find the original mail I don't know if it was sent to the OpenAFS or the Samba list... I've managed to fix some compilation/build problems when using '--with-afs' to Samba. Something about undefined attributes: ----- s n i p ----- Linking bin/smbd lib/afs.o: In function `afs_createtoken':