similar to: BDC constantly rebinds to master ldap server causing browsing delay

I got more information ,after enable log_level to 10: ``` push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 push_conn_ctx(0) : conn_ctx_stack_ndx = 2 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 Security token: (NULL) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups Adding cache entry with key=[ACCT_POL/password history] and timeout=[Thu Jan 1 03:00:00 AM 1970 MSK]

For several versions now, we've been unable to get password changing to work *without errors*. Now management would like to see it working fantastic so that we can age passwords, but without errors. No matter what I do, I get a couple of errors. The first time I try to change from a 7 letter password to '#1password', which should be complex enough for any rule, I get: The username

Hi , I'm trying to migrate an old server with ubuntu 9.10 ,samba3 +ldap to a new server ubunut 14.04. I could follow the steps of https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_%28classic_upgrade%29 but when running samba-domain tool classicupgrade --dbdir = / util / tdb --use-xattrs = yes --realm = gruporesasco.local --dns-backend = BIND9_DLZ

Ok, this one is driving me nuts. I am using smbk5pwd to sync samba, ldap, and heimdal kerberos passwords. I have the overlay working if called from the ldappasswd command. However, if I set "ldap passwd sync = only", I get no joy from Samba. It does a series of searches, but doesn't send any kind of password update request to the server. If I use ldap passwd sync = yes, then

Hi people: I have a Debian etch stable with the latests updates. When I try to join a computer to the domain I create the machine on the ldap and its created with the following atributes: dn:cn=test$,ou=Machines,dc=domain,dc=org objectClass: top objectClass: inetOrgPerson objectClass: posixAccount uidNumber: 3123 uid: test$ cn: test$ sn: test$ gidNumber: 604 homeDirectory: /dev/null loginShell:

Dear Help, Initially, I thought that I had solved this problem, but it turns out that I haven't. I currently have Samba set up as a PDC with an eDirectory/LDAP backend. There are also a few Samba BDCs in play as well. If a user enters the correct password, there are no issues and everything authenticates fine. If I turn off the PDC and force a user to authenticate against a BDC with the

Sure. ``` [global] workgroup = EXAMPLE server string = dns proxy = no interfaces = eth0 bind interfaces only = yes log file = /var/log/samba/log.%m max log size = 1000 # new options log level = 5 netbios name = FILES #panic action = /usr/share/samba/panic-action %d server role = STANDALONE SERVER local master = no security = user encrypt passwords =

Hello Sorry to ask here, but all googeling doesn't helped. We have several samba domains (samba 3.5.6) with ldap backed and windows 7 clients, which worked fine so far. Know we begin to see that random machines begin to kick out of the domain with the error: _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client MBBUCHHALTUNG04 machine account

I'm trying to set up Samba on RHEL4 as a BDC for subnet 10.6.0.0/16. The PDC is located at another site and on another network. Its IP address is 10.2.0.2. There are other BDCs on subnets 10.1.0.0/16, 10.3.0.0/16, and 10.4.0.0/16 that all function fine. This is the only one on RHEL and this is the only one on a 64 bit box. We are using ldapsam for the passdb. The important config lines

Hi, I test samba 3.0.23a and I used a existant LDAP tree. But, samba 3.0.23a won't start : In smbd.log : ...... [2006/07/28 09:58:14, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2006/07/28 09:58:14, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2006/07/28 09:58:14, 10]

Hi Scott, Good to see 64bit, I would suggest doing something like this as follows> logon to a BDC that is currently accepting domain logons and is replicating the database from the PDC. as root > slapcat-v -l ldiif-transfer.txt ; to dump the database. root > scp ldif-transfer.txt root@RHE4BDC:/dir root > net getlocalsid | cat sidtransfer.txt # vi and check the file for sid number

I?m setting up our new server that will handle file storage. The new system is redhat running samba 3.0.23c. We currently have this same service running on DEC server running version 3.0.20 without any issues. Here is the smb.conf for both? [global] passdb backend = ldapsam:ldap://xxxxxxxxx ldap suffix = dc=temple,dc=edu name resolve order = wins bcast hosts ldap machine suffix =

Hi We have an all SAMBA Domain (all samba-3.0.23d) running with two OpenLDAP servers (2.3.27). We experience quite a few NT_STATUS_IO_TIMEOUTs when using smbclient. Windows clients just experience delays (up to several minutes). I've done some debugging: On the client i issue: smbclient -Umhansen //lfs1/mhansen lfs1 is a domain member server. On lfs1 (log level 10) i get the following in

I have a member server that is constantly querying the LDAP server with - (&(objectClass=sambaDomain)(sambaDomainName=SARDINE)) - when security=domain and workgroup=backbone. The server DOES authenticate domain users, and everything seems to work, but this draining resources. This is RH9, Samba 3.0.3pre2 (although I'm pretty certain I saw this on 3.0.2) and OpenLDAP openldap-2.1.25-1

Hello, I've got a problem using ldap support on my Ubuntu jaunty. Here are the versions : samba/jaunty uptodate 2:3.3.2-1ubuntu3.2 smbldap-tools/jaunty uptodate 0.9.4-1 First of all, smbldap-groupadd don't use the sambaNextRid to create a group, it compute it. Is this a normal way ? I've patch smbldap-groupadd to do this : - #$group_rid = 2*$_groupGidNumber+1001; +

Hello All, I am currently having an issue with my samba PDC. I have recently updated to 3.6.5 Samba, and have made what i believe to be the correct changes in my config to account for the changes to the idmap system. My setup is as follows, SAMBA PDC on RHEL 6.2, which authenticates passwords through Kerberos, and Deals with user profiles via LDAP. I had about 25 Windows clients which were able

After a long battle with the having the password hash types that samba sets in LDAP being incompatibile with anything else that I wanted to do I finally have the idealx tools set to give me crypt passwords. Now however I'm running into the familiar "You don't have permission to change your password" problem, but the passwords are actually set correctly. My test machine is

AIX 5.2 OpenLDAP 2.2.15 Samba 3.0.7 (no winbindd) I've got a stupid problem with referrals that I can't seem to ferret out. Each Samba DC has a localhost-based LDAP replica for scalability (my idea anyway). So the only way they will talk to the Master is if there is need for an update. Ok. If I make the updatedn the same as the rootdn of the replica, it updates the local database;

Hi everyone, I'm unable to make the account lockout to work properly. & this is driving me mad. I am running samba Version 3.0.23c-1.fc5 as a PDC with openldap 2.3.19 on a fc5 (all packages from yum). I was running a 3.0.21 with the same issue. I'm using as well the Idealx script to manage the LDAP. The fact: I have a very strange behavior. The domain policy have been setup with the

Hello all! Is there a reason that the "root" uid is sought after in "ldap suffix" and not in "ldap user suffix","ldap suffix" when smbd is started? This seems incorrect to me. I have three domains in the same tree and it's arranged like so (varying the last dc on each suffix): ldap group suffix = cn=Groups,dc=devex ldap idmap suffix