similar to: pdbedit -U -- recreating a set of Domain users...

On my Samba PDC, using tdbpass: 'pdbedit -Lv agrotera$' produces: Unix username: agrotera$ NT username: Account Flags: [W ] User SID: S-1-5-21-4211105910-4270789338-3787013593-1414 Primary Group SID: S-1-5-21-4211105910-4270789338-3787013593-513 ..... 'getent passwd agrotera$' gives: agrotera$:x:207:200:SMB

I have been having some problems since I updated from Samba 3.0.23 to 3.0.25b. I have installed the latest version of smbldap-tools but I am still not able to make certain changes to a user's account. I have created a new user named JROLFE. After I set up a new user, I will set it so they are required to change their password when they first login. I usually do this through LDAP Account

Hi, I would like to change the Logon script name attributes of a samba user account to something like logon%u.cmd using pdbedit with the --script option. It does not work because the string logon%u.cmd is litteraly taken as the value, loosing the variable substitution at evaluation time. pdbedit -v output gives "Logon Script : logon%u.cmd" .? When creating a user account without

Hello I have samba-3.0.2 installed into /usr/local/samba/ by means of cd /usr/src/samba-3.0.2/source ./configure --with-acl-support make make install When I run pdbedit -L I get a segfault: oberon root # pdbedit -L Segmentation fault (core dumped) This occurs after samba of unknown version from these two: 3.0.1pre2 3.0.2 has been reinstalled with samba-3.0.2 (gdb) bt #0 0x400f9bf9 in free

Dear Gaiseric, Yes, according to testparm the backend is a plain text file : smb passwd file = /etc/samba/smbpasswd passdb backend = smbpasswd Therefore I wonder where the User SIDs are stored ?! About "getent passwd", yes all users (active users at least) have a Unix account. About the users that are missing in pdbedit, there is not error in smb.log when they log in. (But I

Hello After spending quite a few hours building a completely new domain with samba as a pdc for a local school I now have everything working(shares, printers, multiuser addscripts, etc). The only problem I have is that it is impossible to force user to change password on next logon from pdbedit. It is possible to set this trough usrmgr.exe but its not really convenient when adding multiple users

[Environment: Samba 3.0.2a with "passdb backend = tdbsam" ] I want to be able to reset user passwords from the command line on the Unix server, without knowledge of the existing password. If I was using an smbpasswd file, I could call the "smbpasswd" command and it would edit the file. But with a backend, that's not available to me. The "pdbedit" command will

And I must admin that I really don't know where to search. Does someone knows where pdbedit is reading the information displayed ? Denis Le 15.12.2014 23:01, Denis BUCHER a ?crit : > Thank you very much for your answer. > > It's the default, internal backend. (smbpasswd) > > a) If I do : > > tdbdump schannel_store.tdb dump | grep BWPC |grep SECRET | wc

Hi. I'm trying to delete a machine account using pdbedit -x -m and it fails. Any idea why that might happen? The machine account exists.. # pdbedit -Lv 'ts$' Unix username: TS$ NT username: Account Flags: [W ] User SID: S-1-5-21-2594621239-3917873753-3682423317-3286 Primary Group SID: S-1-5-21-2594621239-3917873753-3682423317-515 Full Name: Home Directory:

I have been working to get pdbedit to expire passwords. I have seen several bugs related to pdbedit (bugzilla bug 4630 for example) on 3.0.25 so I upgraded to 3.0.25a, the latest Samba version as of this writing. What I am trying to do is set a particular user's password to expire on a certain date. If that can't be done, the ability to set it to expire "now" would be my

I have a couple of questions about pdbedit. I am having trouble using pdbedit in shell scripts. First, on a freshly installed system with no-one in the tdbsam database, trying to add multiple machine accounts via a loop construct in a shell script fails with a message that the database can't be found/doesn't exist. I then added root manually just to get the system going, which solves

If I try to do the following: /usr/local/samba/bin/pdbedit -a -u someusername -U 5000 This works as one would think, the account is created with a RID of 5000. But when I do: /usr/local/samba/bin/pdbedit -a -m -u somemachinename -U 3000 It does not work as you would think. The account is created but with the RID of the Unix UID*2+1000 not, a RID of 3000 as specificed on the command line. And

You think Microsoft's mailing lists and forums are better? Just wait (and wait, and and ...). Oh, that's right, you can call Microsft for help ,,, and shell out $295 per. Dimitri John McLoskey wrote: > Thanks everyone for your lack of any response whatsoever, I find it builds > character to be ignored throughout challenges I encounter in my life. Since > I was unable to

Hi, I'm having weird problems with pdbedit working with a Ldap backend. Basically I'm not able to join the domain (samba domain mode) with my XP Pro clients. The winpopup error is: no valid IDs mapping. Samba client log shows this: smbd/password.c:domain_client_validate(1558) domain_client_validate: could not fetch trust account password for domain xxx I tracked it down and I think

One of our users tried to change his password through Samba and was told that he was unable to do so. Samba logged the following error: user john.doe does not have permissions to change password I checked the Samba source code to see what this error meant, and I found that it meant that the "password can change" time was set to the maximum time allowed. However, when I ran pdbedit to

Hi I've been reading every documentation available for creating smb domain groups and users, mapping domain groups and users... still learning... Every document I read states that root should be modified to RID 500, by running ' pdbedit -U `net getlocalsid | cut -d ":" -f2 | tr -d ' '`-500 -u root -r', but I always get root to RID 1000 and its domain group RID

Since I have had trouble getting the net rpc vampire command to properly migrate passwords, I have been looking into stripping down the net rpc samdump results into a smbpasswd backend file, then importing from there into my tdbsam. The first problem I ran into is that the samdump produces RID values from the domain, whereas I need it to represent UIDs that already exist. No problem, since my

Hi, have you some idea/solving ? thanks, Lukas -- ---------- Forwarded message ---------- Date: Tue, 10 Nov 2009 15:01:19 +0100 (CET) From: extmaillist at linuxbox.cz To: samba at lists.samba.org X-Spam-Score: -1.0 (), 4 required Subject: [Samba] Pdbedit <-> /etc/passwd sync? Hi, i have a question about syncing without pdbedit (exactly iformations stored in passdb.tdb) and

Hi ! This is my firs post here. I've got a problem with password history policy -C 3 which doesn't work !! I set policy pdbedit -P "maximum password age" -C 777600 (90days) pdbedit -P "minimum password age" -C 691200 (80days) "user must logon to change password" -C 2 "password history" -C 3 On clients (XP PRO) some of people

Hi there, I'm trying to import a smbpasswd-file into a Samba 3.0 installation on Debian Sarge using tdbsam as sole passdb backend. Copying pdbedit's documentation I used pdbedit -i smbpasswd:/root/smbpasswd.old The error message returned was tdb_update_sam: Failing to store a SAM_ACCOUNT for [foo] without a primary group RID where foo is the username to be imported. This message was