similar to: Samba LDAP entries for Password Change

Hello, This must be set in LDAP: sambaPwdCanChange=1 ;or you will never be asked to change your password sambaPwdLastSet=0 sambaPwdMustChange=0; on my Suse this must be set too try it out for your machine And how you' ve been told the sambaMaxPwdAge must be set. Greetings Daniel -----Urspr?ngliche Nachricht----- Von: samba-bounces+mueller=tropenklinik.de@lists.samba.org

Hey Guys, I have just upgraded to version 3.0.21rc1. I decided to re-populate the database and test if everything is working. ./smbldap-populate -a root -k 0 -m 0 -> ok ./smbldap-useradd -m -a username -> ok ./smbldap-passwd username -> ok smbpasswd username - > fail [root@node1 sbin]# smbpasswd asender New SMB password: Retype new SMB password: ldapsam_set_account_policy: Could

Hi all, after an upgrade of my Ubuntu 8.04 64-bit box to a self-compiled samba 3.4.3 (Lenny backport dpkg), I see strange error messages in my OpenLDAP log: slapd[3388]: do_search: invalid dn (sambaDomainName=,sambaDomainName=<domain>,cn=<...>,dc=<...>,dc=<...>) Samba seems to work, though, but this message makes me somewhat nervous. Any ideas? Thanks, Albrecht.

Hi all, after upgrading a FC3 box to FC4 which comes with Samba 3.0.23a rpm's, I have the really strange effect that /only/ "admin users" can print to printers shared by the Samba server. Even a double click on the printer in Win gives an "access denied". The access to "normal" shares (homes etc.) still works fine. Any idea what went wrong? How could I debug

Hi Harry, When I install slapd , I didn't get the option to use MDB, so used hdb I went through your suggestions and cleaned up the smb.conf. Also added the unixidpool ldif dn: sambaDomainName=mydomain,dc=mydomain sambaDomainName: mydomain sambaSID: S-1-5-21-3936576374-1604348213-1812434911 sambaAlgorithmicRidBase: 1000 objectClass: sambaDomain objectClass: sambaUnixIdPool

Hi, I have an access problem related to local unix groups on a FC2 box running the samba-3.0.10-1.fc2 rpms. The goal is to have a read-only share with sub-folders accessible only by one user. All users lised in a local unix group "admin" shall have access to all folders. The samba box uses an external active directory machine for authentication. Winbind is running on the machine.

Hi everybody, I'm new to this mailing list, i need help about a configuration with Samba / Openldap. I have a samba server with shared folders, where users authenticate with a determined login/password. I would like to use my directory (openldap) to authenticate my users to access the shared folders. I do not want to use samba as a domain controller, just to authenticate the users with

Hello, I?m currently having a problem where a non-root user can?t change his/her own password using smbpasswd command after the password expiration and would like to know how I could solve this problem. Currently, I have a samba server running on CentOS 6.5 with its passdb backend configured to another LDAP server. The samba version I?m currently using is samba-3.6.9-169 which should be the

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

hai, im still on holiday but i did see some things a bit, also in addition about the smb.conf in classic mode dns forwarder is predecated, so i suggest avoiding the option. this part, you set ssl off but also set the ports to the ssl ports. ldap ssl = off ldap passwd sync = yes /etc/ldap/ldap.conf BASE dc=mydomain URI ldap://sam3dc.mydomain ldap://sam3dc.mydomain:666 use URI

Hi , I would really appreciate some suggestions re the following issue. We have a LDAP based PDC and a member server. We're use libnss_ldap to auth the users. The LDAP PDC is setup with self signed SSL , we're trying make sure the member server connects to the PDC using SSL. Here is the PDC , smb.conf [global] workgroup = SUNTECH netbios name = SERVER01 security = USER local master =

Hi, I have a strange problem with a Windows Server 2008 R2-System as a member of a samba domain (Samba-Version on PDC: 3.4.12). Join was successfully, but when I log on Windows I got an error "Unknown user name or bad password." (Event ID 4625). Here an abstract of logfile for Windows Server 2008 R2-System (log level 10). Maybe some of you has an idea:

Hi, I have an ldap provider and consumer that appear to work correctly, EG, new users are sync'ed and a search on either server (ldapsearch -x -b 'dc=example,dc=com' '(cn=djohn)') returns an oject. However when an XP user attempt to connect to the consumer server the authentication fails: [2011/06/10 16:11:21, 0] lib/util_sock.c:write_data(1059) [2011/06/10 16:11:21, 0]

Hi there, i got into some trouble after updating my samba installation to 3.0.27a. My installation uses Samba-3.0.27a,OpenLDAP-2.2.13,smbldap-tools-0.9.2 as a PDC NT4-domain.Originally I used the installation-guide from smbldap-tools and everything worked fine. I also limited the access to LDAP as told in the installation-guide with no problems. After updating to 3.0.27a i realized that when

Hi, I run a Fedora 2 box with Samba 3.0.10 as a domain member. The PDC is a Win server with AD. Running winbind, all domain users and groups are visible on the Samba box. To grant a special group of domain users access to parts of a samba share, I would like to - add a *local* group on the samba box (*not* in AD!) and - add some *domain* users to this new group. Unfortunately the trick of

Hello, I have problem with idmap configuration. I would like to use LDAP as backend for idmap in Samba+ADS environment, but i have following errors in log.winbindd-idmap: [2011/06/08 16:57:54.805575,? 0] winbindd/idmap.c:201(smb_register_idmap_alloc)????????????????????????????????????????????????????????????????????????????????? ? idmap_alloc module ldap already

Yes please for the notes. I re-ran the tests without the smbldap-tools. I installed phpldapadmin and am able to login to the apache page using the cn=admin, dn=mydomain and create entries. This kind of tells me that LDAP is working Then I run the pdbedit -Lv and it lists all the users. The following happens when I add the LDAP bits to smb.conf and restart samba.The issue seems to be with samba

Hi all, I am currently fighting with roaming user profiles which shall be stored on an Ubuntu 8.04 Xeon (64 bit) box. I'm running the stock Ubuntu packages (version 3.0.28a-1ubuntu4.4). The Ubuntu box runs as PDC with a LDAP backend. Adding a Win 2000 SP4 workstation to the domain works flawlessly. If I log on on the workstation with a root-like account (UNIX user id 0, UNIX

Hi Rob, please stay on list. Otherwise I will charge you :-) By the way I have no problem to get payed. > Hi Harry, > > The one very obvious difference is the result of this command: # > ldapsearch -xLLL -b dc=afrika,dc=xx -s sub -D > cn=admin,dc=afrika,dc=xx -w 'sambadomainname=*' > dn: sambaDomainName=SCHULE,dc=afrika,dc=xx > > I get dn:

Hi, guys, I'm trying to create a PDC using Samba with an LDAP backend. According to all the guides I read, this should be fairly easy really, but I've done nothing else for the last week and it still doesn't work the way the manual says it should! As far as I can see, everything is set up and working correctly right up to the point when I try and join a machine to the domain.