similar to: samba / openldap upgrade

RedHat enterprise v4 openldap 2.2.13-4 cyrus-sasl 2.1.19-5.EL4 samba 3.0.10-1.4E.9 krb-libs 1.3.4-27 server1: openldap and kerberos server server2: samba server We have openldap working as posix source for all of our *nix logins - with passwords stored in kerberos accessed via sasl. We have an exiting samba server running on redhat for macintosh/windows user access to network storage. Our

Hi, I have troubles when trying to login to my SAMBA Domain, joinung the workstations to the domain was no problem, browsing shares is no problem, but no damain login. I'm running centos 4.3; rpm -qa |grep samba system-config-samba-1.2.21-1 samba-client-3.0.10-1.4E.9 samba-3.0.10-1.4E.9 samba-common-3.0.10-1.4E.9 rpm -qa |grep openldap openldap-clients-2.2.13-6.4E

Hi, I'm trying to use samba3+openldap as our PDC. I installed the server using CentOS4.4 single service CD and then use yum install openldap-servers to install openldap server. I already ran "smbpasswd -w secret". When I invoked "smbpasswd -a root" the following error showed up: [root@localhost samba]# smbpasswd -a root smbldap_search_suffix: Problem during the LDAP

Hi, I have been running Samba with OpenLDAP for a few years. We recently upgrade the OpenLDAP server from 2.2.13 to 2.4.11. When users change their passwords now, only the Windows password is changed the UNIX password is not changed anymore. Samba server does not log any errors The samba configuration file did not change when the LDAP server was upgraded. I do have "ldap passwd

Hello, I would like to share few things I have learned over time in my attempt to integrate all my Linux clients to an existing corporate Windows 2000 Active Directory (AD). I am a Linux admin for a small division in a large company and do not posses any special rights as far as AD goes. I ONLY have privileges on my division part of the tree in AD. Goals: - Integrate all Linux client to

Ok, I may have my other problem taken care of, but now I have a more theoretical question. I'm using CentOS 4.3, which is based on RHEL 4.3 and the OpenLDAP supplied is 2.2.13. I can hand compile a newer version but then odd things happen and the RHEL directories aren't as RH expects. (In short, I feel unexperienced enough to compile OpenLDAP for CentOS 4.3 properly.) I also can't

Anyone have password aging working in Openldap 2.2.13-7 on Centos? The system continues to prompt for a new password regardless of whether it's been changed or not. Thanks -- Flambeau Inc. Technology Center - Baraboo, WI Email : tblader at flambeau.com Keyserver: http://pgp.mit.edu KeyID: 0x00E9EC2C

I have been testing with openldap_2.2.13-2 and have experience on 2 occasions lockups where the ldap server does not respond (slapcat will just hang). I have upgraded to openldap_2.2.13-4. Is there a recommended version of openldap for SambaPDC? Does anyone have a system in production using openldap_2.2.13-2 or openldap_2.2.13-4? I'm currently using samba3-20b any recommendations for a

Hello, I have also installed LE certs. But nothing helps, I have double-checking all certs. ldapsearch with -ZZ works see: https://gwarband.de/openldap/ldapsearch.log I have also uploaded the TLSCACertificateFile, maybe I have a failure in the merge of the two fiels: https://gwarband.de/openldap/LetsEncrypt.crt And also I have uploaded my complete openldap configuration:

i have CentOS 4.5 with OpenLDAP 2.2.13. OpenLDAP contains users with SSHA-ed and CRYPT-ed passwords. the one and ugly thing is that users with CRYPT-ed passwords cannot bind to this LDAP server. however users with SSHA passwords do can. is there any solution without recompiling anyhting? -- Be Secure, Stay Open - live w/ OpenBSD -------------- next part -------------- An HTML attachment was

Hello guys, actually I'm trying to configure dovecot to access openldap for passwordcheck. My openldap is only allow access over "secure ldap". The dovecot can communicate with the openldap server but there is maybe a failure in the sslhandshake. Additional information you can find in the logs or in the dump below. Also I have my ldap config from dovecot in the links below. I

Hi all, after an upgrade of my Ubuntu 8.04 64-bit box to a self-compiled samba 3.4.3 (Lenny backport dpkg), I see strange error messages in my OpenLDAP log: slapd[3388]: do_search: invalid dn (sambaDomainName=,sambaDomainName=<domain>,cn=<...>,dc=<...>,dc=<...>) Samba seems to work, though, but this message makes me somewhat nervous. Any ideas? Thanks, Albrecht.

I've replicate the settings from ldapsearch to dovecot but no success. To the certificate: Yes it's a *.crt file but I have linked the *.pem file to it and dovecot has read access to that file. I have enabled the debugging in dovecot and have uploaded the output: https://gwarband.de/openldap/dovecot-connect.log And the other site with ldapsearch:

Hello I've installed Fedora Core 3 (Test 3, kernel 2.6.8x), with Samba 3.0.8 and OpenLDAP 2.2.13 . I've smb.conf, slapd.conf, ldap.conf, /etc/pam.d/system-auth, nsswith.conf almost same as described on Idealx site. I've very strange thing. If I add user ( for this operation I use smbldap-tools), I can log on by this user at my unix host (for example by ssh), I can logon by this user

Here is the output from yum -y upgrade without the error parts... Its odd because it updated all of these first time round. I have dared reboot the box yet, for fear it won't come back up... Setting up Upgrade Process Setting up Repos Reading repository metadata in from local files Resolving Dependencies --> Populating transaction set with selected packages. Please wait. --->

The serverlog of openldap with loglevel "any": https://gwarband.de/openldap/openldap-connect.log Note: openldap waits 1 Minute before he says "TLS negotiation failure" after the connect. and dovecot says direct "Connect error" I've also delete the TLSCipherSuite from openldap. Tobias Am 2017-03-18 14:01, schrieb Tomas Habarta: > Increase log level on server

Hi all, All clients are Win 7. How can I transmit rules defined in gpedit for users (for example forbid execution of regedit) to the Default User roaming profile? Is it done with a ntconfig.pol ? If yes, how can I make it ? Thanks ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

Dear Team, The OpenLDAP stuff on this page: http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html is not the preferred backend, i.e. ldbm, it really, really needs to be bdb. See: http://www.openldap.org/faq/index.cgi?_highlightWords=bdb%20ldbm&file=1085 "ldbm uses a neutral storage interface which in principle could wrap dbm, ndbm, gdbm or sleepycat as underlying storage;

I've tested your soulution, but it also says the same error. I've tested all combinations of: - tls_ca_cert_file = <cert> - tls = yes - tls_require_cert = demand Every time it says "Connection error". Only when tls is uncommented it says "TLS required". Additional information from my contact with the openldap-technical mailing list: The

Hi! I would like to ask you Samba gurus if it is possible to set up Samba PDC which uses OpenLDAP replica as backend. I had two separate OpenLDAP master servers (2.2.13-4) for two different Samba PDC servers (3.0.14a-2) with TLS support in different virtual networks (VLANs), and all worked fine. However, I decided that it would be nice (from an administrative point of view) to have all