similar to: Samba authentication against 389 DS

Greetings. I have problem with password expiration problem i cannot handle myself, so i wrote in this list. Recently i discovered that a newly created samba account has already expired password. smbldap-useradd -a -d /home/tommy -G education -s /bin/bash -M tommy -c "Tommy T." tommy smbldap-passwd tommy getent shadow user:*:::::::0 user2:*:::::::0 user3:*:::365::::0

Hi- I'musing the smbldap tools to create ldap entries for user logins through samba. I was just wondering if anyone knew what format userPassword is stored in. Is it an md5 hash? Thanks!! --Greg _________________________________________________________________ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail

Greetings! It is premature for me to send out a "success procedure for migration" yesterday. I overlooked things and I appologize for to this group. Anyway, after migration, computers, users, groups are all created and filled up with the correct membership. However, I still have the same problem with machine password and user password. Further looking into the detail, it looks

I'm switching from OpenLDAP to the newly released Fedora Directory Server (formely known as the Netscape Directory Server) as a LDAP backend for my Samba domain. I'm now faced with a problem regarding how Fedora DS handles the userPassword field. Unlike OpenLDAP it encodes it in base64 so instead of reading userPassword: {SSHA}0lP+r3Z1NVan7Caf4CG9oSgnTbQRrv/p it reads: userPassword::

Dear Lists, I try to configure Samba as PDC LDAP backend with Linux-Suse-9.1 and smbldap-tools form www.idealx.org, I follow guide from SMB-3 by Example book. Step by step installation and configuration came with no error. except i couldnt join w2k workstation to the new domain with administrator account. # /var/lib/samba/sbin/smbldap-usershow administrator dn:

Hello and happy new year :) I have to set up a samba server as a PDC with a openldap backend. My openldap server is fully functionnal and it is not secured yet (so no problems with tls). I must use debian etch or lenny. My server's IP is 192.168.9.10/24. I have set up a dns server (bind9) for my domain named "mik". It's a local domain for testing only. There is a piece of

Hi ! I'm running a samba domain controler under rhel 5. It's version 3.0.33-3.7.el5. I've also installed a ldap server to store users and groups and so on. When I try a pdbedit -v david, I get the following : Unix username: david NT username: david Account Flags: [U ] User SID: S-1-5-21-215069222-2822928016-2390355089-1016 Finding user

I am using Samba PDC with OpenLDAP2 and smbldap-tools. As part of my logon.bat, I call a script called ifmember.exe. This script can list out the groups a user is a member of. It is reporting that my root user is a member of the group 'engr.' I don't know if this is a bug with ifmember.exe or if it's an issue in Samba or in LDAP. Here is some relevant data:

Hello, Is it really possible that just the user root with the samba password can join workstations into the domain? I have also some other users who are domain administrator, but with this users i can't join any workstations into the domain. This is mor me a important security point, because I want to give some people the acces right to join workstations into domain and only this function.

Hi all, I have smb.conf with: add machine script = /usr/local/sbin/smbldap-useradd -w "%u" add user script = /usr/local/sbin/smbldap-useradd -m "%u" add machine script = /usr/local/sbin/smbldap-useradd -w "%u" add group script = /usr/local/sbin/smbldap-groupadd -p "%g" add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u"

Hi. Excuse my English. I've installed Samba+OpenLDAP as a PDC. Everything works fine but Samba ignores completely group information. Linux is ok. Any clue? I'm going crazy here! Here's the sittuation: user: fish1 home dir: /home/reaml/swim/fish1 primary group: swimmers other groups: smokers Directory of smoker's group: /home/realm/smokers Here's an 'ls -l' on

Hello, am I right, that dovecot can't cope with ldap so authentification is handled by ldap itself? And, for that I have to use {CRYPT} and cannot use other mechanisms as {SMD5} Are there any other possibilities? A --

Hi there, I desperatly trying to store a BLF-CRYPT password hash in an LDAP userPassword Attribute and get dovecot to authenticate against it. I use a thunderbird as client and send the password plain with starttls. what worked so far but is kinda problematic for my smtp authenticaton was to store the has with the prefix {CRYPT} or {BLF-CRYPT}. Is there a way to get dovecot to authenticate

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

Hi everybody, I have one SAMBA server (with PDC configuration) which is configure to use an OpenLDAP server (on the same local server) where users and computers account are store (I want to have the two Unix/Linux and Samba account attributes stored to use Name Service Switch and Pluggable Authentication Module). My problem is as follow : If I don't put the following line : ->

Hi, i plan to mass creat user in ldap to use with samba I tried with ldiff like the structure below, the user is created but no home directory is created, user in not member on any groups. 1) how to do with ldiff file to put a user member of a group ? So i plan to use smbldap-useradd => home drectorie is created with the appropriated rights, user is member of "Domain Users" :

I am running RHES 3.0 with Samba 3.0.22 and Open Ldap 2.1.22 ldapsam and when I use User Manager for Domains and try to change a user password as root or any other Domain Admin account I get the following error: "The following error occurred changing the properties of the user jcampbell. The group name could not be found." When you look at groups under user manager Domain Users is set

Hallo. First of all I'm sorry for my bad english. I have a question about how dovecot use passwords. I have all my mail accounts in a ldap database. The user password are stored in form: {crypt}mypasswd. In dovecot-ldap.conf I have default_pass_scheme = CRYPT. All is working fine. The problem in the crypt scheme is that I can't have passwords more than 8 characters long. So I've tried

Hello, I've the following goal to reach : modify the attribute userPassword via a Java method in a Samba LDAP tree. I successfully changed the SSHA password in the LDAP. But I can't open a session with this new password. It seems, that sambaNTPassword et sambaLMPassword must be changed too ... but i don't know how to do it ... Any idea ? Regards -- Herv? H?noch Responsable

Dear lists... But this still un-solved the real problem to join w2k to samba3-ldap . I'm here with the same situation. I even switch my distro to SuSe with same result, still cant join domain. Please give us hint how to solve or debug this problem. regards reza -----Original Message----- From: Craig White [mailto:craigwhite@azapple.com] Sent: Tue 7/20/2004 9:48 AM To: