similar to: LMPassword and NTPassword

Hi, I've reported this before but I guess I'll have to do it again, since it's not fixed yet or I'm understanding something wrong here. The problem is that smbldap-useradd -w 'machinename' will add only posixAccount entrys into ldap but it should add both posixAccount and sambaSAMAccount entrys. So if one doesn't add correct machine account entrys manually to ldap

I'm trying to set up my LDAP in preparation to configure my Samba PDC. In the Official Samba-3 HOWTO and Reference Guide it give instructions on howto setup slapd.conf (section 10.4.4.3) After modifying the file it instructs to run /sbin/splapindex -f /splapd.conf When I run this I get the following error: /etc/openldap/schema/samba.schema: line 423: AttributeType not found:

Hello, I have been using Samba for years (login onto the PC, files and printers sharing) and since recently I have a LDAP server running and serving authentication to few Unix systems (mail, web, Zope, ssh, etc.) Now that I set-up a new server to use with Samba, I would like to integrate Samba into the existing LDAP. All the doc I could find so far is about creating a LDAP service from scratch

I am running Samba ver 3.0.33 on Solaris 10 (sparc.) Initially I had the server configured as a domain controller with the "passdb backend = tdbsam" option. The underlying unix accounts were stored in LDAP (Sun Directory Server.) Those accounts are also used for non-Samba services. Since I have domain trusts with NT domains, I am using winbind and idmapping. The idmap data was

Hi We have some Samba servers using LDAP (389 DS) as backend. In the LDAP server, we have defined some policies to make the passwords stronger. When a user tries to change his password (Control-Alt-Del), this message appears in the LOGs: ==> /var/log/samba/xptest <== [2010/06/28 12:26:26, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [10000001S]

I want my Windows account to interact with my Linux user account. My usernames on both machines used to be the same, but now corporate is changing our name format (oh boy!). Now that the usernames no longer sync, Samba is refusing me access to my Linux box. When I check the logs, it claims that it can't find my new Windows username in the UNIX passwddb. When I manually add my new Windows

Samba experts, I am using Samba 3.0.8 on an AIX 5.1 system with ldap authentication. I have ldap working so that users can authenticate in their samba account via ldap. However, I am trying to figure out the best method for allowing users to change their ldap samba account password. What is the best method to allow end users to change their LM/NT passwords for Samba via LDAP? Should

Hey list, Right now I have Samba+LDAP working (like a charm acctually) I just have one issue. Right now Samba is authenticating the user against the sambaLMPassword and/or the sambaNTPassword attributes. I would rather it authenticated against the userPassword attribute like my unix boxes and mail servers do. Is samba capable of doing this? Otherwise I have to maintain two seperate passwords

I have a Samba-PDC installation (version is 3.6.3) with openLDAP. When I change the password from a client (Windows/XP and Windows/7) the attribute "sambaNTPassword" is changed and I can log-in with the new pssword. The problem is that the content of the attribute "sambaLMPassword" is deleted. I remember that in my previous version of Samba (3.0.28) both attributes were

Greetings All. First let me introduce my situation Machine1: Pdc Samba + OpenLDAP(master) Machine2: Bdc Samba + OpenLDAP(slave) LDAP stores Samba and POSIX information for each user. Case1: I login to Machine1 and invoke smbpasswd. I change my passwords (samba and posix without any problem). In next few seconds they get propagated to Machin2 wher I can login with new credentials. ldap log

Is it possible for a user to change his/her password from Windows? I tried it out last night as a test user against my PDC and it only changed for Samba; I was still able to log into the PDC via SSH using the previous password. (I changed it for the test user as root and it took for both SSH and Windows.) I tried to use smbldap-passwd as the test user, but I got a message back saying I had

Hi, there! When my XP users try to change passwords, they get a message saying that password has been changed. That's not true! NT and LM passwords are changed but unixPassword isn't. Look at this openldap.log lines: Feb 12 07:50:28 apolo slapd[22826]: conn=698021 op=40 MOD dn="uid=teste,ou=Users,dc=domain" Feb 12 07:50:28 apolo slapd[22826]: conn=698021 op=40 MOD

I'm switching from OpenLDAP to the newly released Fedora Directory Server (formely known as the Netscape Directory Server) as a LDAP backend for my Samba domain. I'm now faced with a problem regarding how Fedora DS handles the userPassword field. Unlike OpenLDAP it encodes it in base64 so instead of reading userPassword: {SSHA}0lP+r3Z1NVan7Caf4CG9oSgnTbQRrv/p it reads: userPassword::

Hi, what are the minimum permissions for the attributes sambaLMPassword/sambaNTPassword for the the LDAP administrator account so that Samba is just enabled to use it for authentication with ldapsam backend. It seems like auth is not enough, is this true?! Thanks, Arokux

Samba experts, Thanks to advice from this list, I am finally able to get smbpasswd to change ldap passwords for the Samba LM/NT passwords. However, I had to give write access to sambaPwdLastSet and sambaPwdCanChange attributes as well. Other Samba attributes don't seem to need write access. I have found plenty of examples with people assigning an ACL for sambaLMPassword and

Hallo, I'm asking myself, which LDAP attributes are mandatory which optional for user and workstation accounts. After using the smbldap-populate command there where different attributes set than for adding users with the smbldap-useradd command. --- snip --- sambaAcctFlags: sambaHomeDrive: sambaHomePath: sambaKickoffTime: sambaLMPassword: sambaLogoffTime: sambaLogonScript: sambaLogonTime:

Hi, I'm migrating a domain from Samba3 to Samba4. I now about the possibility to transfer the domain (users and computers) during the provisioning (Upgrade from Samba3 to Samba4). Due to problems with the domain name (I have to change the domain name), SIDs a.s.o. I want to create a new domain during provisioning. Then I want to create/add all users with a script. Is there a way to

Am 28.06.2015 um 19:50 schrieb robert k Wild: > i edited "dovecot-ldap.conf.ext" and added the lines > > hosts = 10.10.1.3 > auth_bind = yes > auth_bind_userdn = cn=%u,cn=home,ou=robina_users,dc=robina,dc=private > > i then edited "dovecot.conf" and added this line in > > auth_username_format = %Lu > > i edited "10-auth.conf" i

AIX 5.2, OpenLDAP 2.2.20 We've just moved to LDAP (this weekend) and when I do a smbpasswd -e to enable a user it is prompting for a "New SMB password:" I've secured the attributes like so: access to dn.subtree="ou=People,dc=hvcc,dc=edu" attrs=userPassword by self write by dn="cn=root,dc=hvcc,dc=edu" write by * auth access to

Hi all, I have found the smbldap-tools provided in the samba 3 tarball to have a few glitches with the samba 3 schema. I have made my changes and 'diffed' them with the source. root@localhost # pwd /usr/local/samba/sbin root@localhost # for i in *.p*; do echo $i; diff $i /usr/local/src/samba-3.0.0rc4/examples/LDAP/smbldap-tools/$i; done smbldap-groupadd.pl smbldap-groupdel.pl