similar to: (no subject)

Thanks to Buchan Milne, I'm looking into the Active Directory Password Cache overlay for OpenLDAP, which seems to offer more or less what I'm trying to do. Is anyone here experienced with it? Is this the right place to ask or is there an openLDAP overlays list? I understand this description of ADPC: Active Directory Password Cache =============================== Active

On 11.12.18 18:19, walk2sun via samba wrote: > Am 11.12.18 um 15:36 schrieb tseegerkrb via samba: >> On 11.12.18 15:23, Rowland Penny via samba wrote: >>> On Tue, 11 Dec 2018 15:09:39 +0100 >>> tseegerkrb via samba <samba at lists.samba.org> wrote: >>> >>>> Hello list, >>>> >>>> a quick question. Right now I have a

Am 11.12.18 um 15:36 schrieb tseegerkrb via samba: > On 11.12.18 15:23, Rowland Penny via samba wrote: >> On Tue, 11 Dec 2018 15:09:39 +0100 >> tseegerkrb via samba <samba at lists.samba.org> wrote: >> >>> Hello list, >>> >>> a quick question. Right now I have a combination of MIT Kerberos, >>> OpenLDAP and SSSD for authenticating my

Two openldap overlays that may be of interest to others. In the first, I've hacked up Howard Chu's smbk5pwd openldap overlay to include the automatic addition of sambaNTPassword, sambaLMPassword, and sambaPwdLastSet attributes to any sambaSamAccount entries that are being ADDED to the directory. WARNING: This overlay is ONLY useful with cleartext passwords. In the second, I've

Hello everyone, I'm writing you a topic because i have a problem with smaba and LDAP. This is my problem, when I type in the shell slapcat, i've got this message : str2entry: invalid value for attributeType objectClass #1 (syntax 1.3.6.1.4.1.1466.115.121.1.38) slapcat: bad configuration file! There is my slapd.conf : include /etc/ldap/schema/core.schema include

I have an strange issue with ldap passwd sync = only on FreeBSD 6.1 with Samba 3.0.25a + OpenLDAP 2.3.37 I have the OpenLDAP smbk5pwd overlay which successfuly synchronizes LM and NT passwords: $ ldappasswd -D 'cn=sambamgr,ou=managers,o=stars' -w sambapass -s secret1 'uid=lacoste,ou=Users,ou=Accounts,o=stars' Result: Success (0) My OpenLDAP auditlog file confirms that smbk5pwd

Hello everybody, I've setup a SAMBA 3.0.X (3.0.32 right now) PDC with a LDAP backend running on FreeBSD 6.3 some time ago and users can't just login on unix box when the password their password, modified from Windows, include non-ascii character (such as french letter like "?" for example) I guess that they must some kind of charset issue but i just don't know how to debug

Hi, (sorry for my english I'm a telecomunications student from spain) I'm building a PDC with samba from a ldapbackend which was created without samba attributes...it's a very big database...does someone know how can I add the samba attributes to all users..? and what attributes I have to add so that the pdc have the next characteristics: - backend openldap(replica-server,it's

Hey list, Recently I've gotten my Samba PDC to successfully use an OpenLDAP backend, while using the smbk5pwd and ppolicy overlays for OpenLDAP. However, Samba appears to incorrectly handle responses from LDAP's ppolicy overlay, even though it very clearly receives them. If I enter in a password (be it through Ctrl+Alt+Delete or when a password expires and the user is prompted at logon)

Hi, I have an existing OpenLDAP directory, that I want to use as the backend for a Samba 3 instance. I do not want for now making Samba a Domain Controller, but only define in it some shares accessible by users on LDAP. I have imported in my slapd.conf the samba schema, and I have inserted in my smb.conf all the directives for connecting to an LDAP server: passdb backend =

Hey List, I'm using Samba 3.0.24 and OpenLDAP 2.3.30 (with the ppolicy and smbk5pwd overlays). While testing Samba as a PDC with an OpenLDAP backend, I've hit a snag on password change. I currently have the following in my smb.conf related to password changes: passwd program = /usr/bin/ldappasswd -x -W -S -D uid=%u,ou=Users,dc=example,dc=com passwd chat = "*Enter

??? This is solved. ? Problem was, incorrect settings in slapd.conf and dynamic / config file setup was mixed. ? str2entry: invalid value for attributeType objectClass #1 (syntax?1.3.6.1.4.1.1466.115.121.1.38) slapcat: bad configuration file! The core.schema and the core.ldif are bit different. debian installs slapd with dynamic ( in database ) config, when switch back to config file setup. The

Hi, i'm trying to set up a samba (samba 3.0.25a) PDC with the ldapsam backend on FreeBSD (FreeBSD 6.2) and i have some trouble with the "ldap passwd sync" option. I must say here that my goal is to use the ldap smbk5pwd overlay in order to keep in sync the unix and samba password when the user change his password from a unix workstation either via ldappaswd or passwd (configuration

On 11.12.18 15:23, Rowland Penny via samba wrote: > On Tue, 11 Dec 2018 15:09:39 +0100 > tseegerkrb via samba <samba at lists.samba.org> wrote: > >> Hello list, >> >> a quick question. Right now I have a combination of MIT Kerberos, >> OpenLDAP and SSSD for authenticating my users. Is there a way that >> Samba can use this setup to perform user

Hello I have exactly the same trouble as described here: http://www.nabble.com/ldap-passwd-sync-on-3.0.25a-tf4261008.html on samba-3.0.25b-2.fc7. When i set "ldap passwd sync" to "only" and I change password on some ldap samba user, password in attribute userPassword is never changed by samba daemon (to update NT and LM password I use smbk5pwd overlay). If i set pwd sync to

Hi, If you look at both: samba-tool user getpassword --help samba-tool user syncpasswords --help You may be able to find the information that you're looking for. Samba does store all the hashes in the LDAP directory, but you have to normally access them directly from the system (not over LDAP). You should also note that our Kerberos server reads and updates the password stored in the

Hi, I am using both syncrepl (for replication) and smbk5pwd (for password synchronisation between samba and ldap account) overlays. I have configured replication in the simplest way: a read-only producer that forwards updates to the provider thought updateref. If I change my password thought passwd command on a client with pam modules configured for gaining information from the provider

Thanks Craig for your soon answer.. I've now the FDS up and running... I am now creating my users in FDS because I want to unify the authentication of my 3 centos servers. BUT, When I create my users in FDS I don't see any option of UID, GID, home directory, etc, so the FDS server return an error and my remote users can't authenticate....... my question is? 1. Can I use FDS to

Hi there, this is my config, I have a CentOS 5.3 x86_64 full updated with Xen enabled with Samba 3.5.4 sernet RPMs. I have a virtual machine running Windows 2008 R2 Foundation running full virtualized on the same machine. When i tried to join the Windows 2008 to the domain i get this message: The following error ocurred attempting to join the domain "MYDOMAIN": A device attached

On 4/13/23 15:28, Daniel Lakeland via samba wrote: > I have a server that runs stand-alone with an LDAP directory and a KDC > . The linux machines have sssd to allow unified users etc. The clients > are mostly MacOS and Windows machines that aren't part of an AD. > > > This config has worked for 15 years, but after upgrading Debian and > bringing in Samba Version