similar to: samba password hashes exposed to ldapsearch

I experienced the following problem with an apparent permissions Catch-22 where there's no "root" user to bootstrap from with Samba-LDAP, and found several other people experienced it too. I eventually figured out why a few people are plagued by this problem while most have never seen it, and I solved it. For everyone else who experiences a similar problem, the explanation and

Dear Helpers, I have a dataset X, with no missing values, everything is in order, R reads it correctly, and I have already done some statistical analyses on the dataset. The data are in order by date (six sampling dates in one year, earliest to latest) and I now want to generate boxplots for each parameter for each date. However, R outputs the boxplots in some order that I do not understand (eg.

Sirs, Thank you for any time that you take to read about my problem. I have a Linux (redhat) 8.0 mail server set up with; qmail dhcp / dns transparent proxy to internet - adsl HTML & our web pages (nothing special) SAMBA This problem has been with me since RedHat 7.3 and thir packaged samba. If I transfer a file from the mail (linux box) box to a win98se box it takes a

hi, is there a way, to let Dovecot2 uses the base64 encoded passwords from a ldapsearch output, without decode them first? cu denny -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part URL:

Hi, I recently triied to set up a special PDF creation service for a customer. The Samba3 server is a AD2003 member server. Since the created PDF files need to be sent via e-mail to the creators, I need to issue an LDAP query against the AD, like ldapsearch -h 10.243.50.22 -Y GSSAPI -b "ou=user,ou=... ..." \ -LLL '(cn=lastname firstname*)' mail As long as I run this command

If I run a normal ldapsearch it gives me the gidnumber and uidnumber attributes. It looks like the AD is set up properly. ---------- Forwarded message ---------- From: Urs Golla <urs.golla@gmail.com> Date: Oct 4, 2007 9:47 AM Subject: could not read attribute 'gidNumber' To: samba@lists.samba.org Hi I am using samba 3.0.23c on RHEL5 with security = ads. If I use "idmap

Samba 4.0.0beta4, CentOS 6.3 (openldap 2.4.23-26.el6), samba-generated krb5.conf. I have joined a Linux client to the samba4 domain and extracted the kerberos5 keytab (using "kerberos method = system keytab"): # kinit Administrator (succeeds) # net ads join createupn=host/<client.fqdn>@REALM -k (succeeds) # net ads keytab create (succeeds) # net ads testjoin (is OK) #

On Tue, 2016-04-19 at 10:29 +1000, John Gardeniers wrote: > I'm setting up a test domain in order to try out Sudoers LDAP and > have  > run into a problem that has my puzzled. On our production domain I > can  > run a query such as: > > ldapsearch  -LLL -p389 -h DC -u me at ourdomain.com.au -W -X -LLL -b  > "dc=ourdomain,dc=com,dc=au" -s sub > >

On 19/04/16 01:29, John Gardeniers wrote: > I'm setting up a test domain in order to try out Sudoers LDAP and have > run into a problem that has my puzzled. On our production domain I can > run a query such as: > > ldapsearch -LLL -p389 -h DC -u me at ourdomain.com.au -W -X -LLL -b > "dc=ourdomain,dc=com,dc=au" -s sub > Try using ldbsearch instead:

Hi, testparm -v | grep 'ldap serve' Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" Loaded services file OK. Server role: ROLE_ACTIVE_DIRECTORY_DC Press enter to see a dump of your service definitions ldap server require

More information, making me more crazy: - ldapsearch without SASL is working from any host: ldapsearch -D 'CN=user-ldapmodify,OU=OurUsers,DC=ad,DC=domain,dc=tld' -w Passw0rd -x -ZZ -b 'dc=ad,DC=domain,dc=tld' -h dc106 sAMAccountName=administrator dn - ldapsearch with SASL is not working (Kerberos ticket existing following a working kinit) from any host but it works when launched

Hi, First of all thans for you answer. I have tried but is not working, we receive: # kinit administrator Password for administrator at DOM.COM: Warning: Your password will expire in 33 days on Fri 22 Jul 2016 07:52:12 PM CEST # ldbsearch -H ldap://debian8DC1 "cb=administrator" -k yes Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to connect to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 you can't use simple bind with Samba 4 AD. You need kerberos for authentication. you can add: ldap server require strong auth = no to your smb.conf of your ADDC to get it work with administrator as login credential. Am 25.07.2016 um 22:34 schrieb Jules Houantonon: > Dear all, > > i install samba-sernet-ad 4.2 on a Centos 7.2 Linux.

Hi, User issues should generally go to samba at lists.samba.org which I've cc'd. How large is your database/how many users do you have? Is it still slow if you reverse the search expression (&(sAMAccountName=XXXX)(objectClass=person))? There have been a large number of performance improvements made since 4.3, so upgrading to the latest versions might be a good idea before any

Hi, 25,000 is definitely higher than what I would reasonably expect Samba 4.3 to handle. It should be significantly better in more recent versions (preferably to 4.7.5 by joining a new DC). When you have slow responses, is that with a number of concurrent users (or is it possible that there are specific users that are consistently slow)? Cheers. On 07/03/18 01:49, Kitsda Yonpladyod wrote:

On 09/09/2019 16:55, Mauricio Tavares wrote: > On Fri, Sep 6, 2019 at 4:12 PM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 06/09/2019 20:14, Mauricio Tavares via samba wrote: >>> Quick-n-easy questions: >>> >>> Let's say user raub is added to group nosy using smbldap-groupmod >>> >>> smbldap-groupmod -m raub

On 01/02/2020 09:54, Palle Kuling via samba wrote: > Hello, > > Ldbsearch returns the correct result. However this particular query is > performed by an external system (that does not have access to the LDB > files), to check whether a certain user belongs to a specific OU or > not. The query is performed over LDAP against Samba, so it is not a > ldapsearch-only problem. I

On Thu, 2020-02-06 at 16:21 +0200, Palle Kuling via samba wrote: > Hello, > > I did a git bisect between 4.10.0rc1 and 4.11.0. The result is as > follows: > b6b5b5fe355fee2a4096e9214831cb88c7a2a4c6 is the first bad commit > Date: Wed Mar 6 15:28:45 2019 +1300 > > lib ldb key value: fix index buffering > > Is there anything else I should check? Thanks, that

Hi, I can search for deleted Objects in Samba-AD with: ldbsearch -H ldap://dc01 -U administrator --show-deleted cn=*\\0ADEL:* sAMAccountName does anyone know a solution to search for deleted Objects with ldapsearch? Not only to search for but also find all deleted objects ;-) Stefan -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature.asc

On Thu, 5 Dec 2024 10:12:40 +0100 Stefan Kania via samba <samba at lists.samba.org> wrote: > Hi, > > I can search for deleted Objects in Samba-AD with: > ldbsearch -H ldap://dc01 -U administrator --show-deleted > cn=*\\0ADEL:* sAMAccountName > does anyone know a solution to search for deleted Objects with > ldapsearch? Not only to search for but also find all deleted