similar to: Samba4 Schema credentials

Dear Samba & Users. I have spent some time going over the documentation, however I still no not fully understand what the cause is. I am focusing on Samba 3 by Example chapter 5 & 6 specifically Chapter 5 smbpasswd -w 123456 [root@node1 data]# smbpasswd -w 123456 Setting stored password for "cn=Manager,dc=ddesign,dc=com" in secrets.tdb Chapter 6 indicates in the smb.conf to

Hi, I was trying to get a new keytab in samba4 for my apache service. So I tried the following command: sh ktpass.sh --out /etc/apache.keytab --princ HTTP/myhost.samba.my.domain at SAMBA.MY.DOMAIN --pass VerySecure123 --enc des-cbc-md5 I get the following error: Unable to find kvno for principal HTTP/myhost.samba.my.domain at SAMBA.MY.DOMAIN Am I doing something wron or shouldn't I be

Hello, I'm running samba4 and I installed phpldapadmin to connect to the samba ldap. When I am logged in as administrator i can't see the password hashes of my users or myself. Does samba need any extra configuration/ compile parameters to view the password hashes? Or does samba has a default "manager" ldap account? Best Regards Tim Vangehugten

Well I am glad that there has been alot of input on this topic, alot of people are having different opinions but that is because we are not focusing with the problem at hand. The documentation provides full details on how to get samba + ldap working from scratch; but there seems to be a gap between chapter 5 & 6; Once again I will say I love this book; by far the best technical reference

I am trying to create a Samba Admin account in FDS as per the final steps of http://directory.fedora.redhat.com/wiki/Howto:Samba I've asked about this on the FDS mailing list with no luck, I am hoping someone here will be able to help me. I've created a file with contents: Administrator:x:0:0:Samba Admin:/root:/bin/bash I then ran: /usr/share/openldap/migration/migrate_passwd.pl

Hi, I have 2 samba4.0.5 DC controllers running ubuntu 12.04 in my network which are in sync. Everything works fine but I still get the following error on the first samba4 DC I installed when running /usr/local/samba/sbin/samba -i Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for e3514235-4b06-11d1-ab04-00c04fc2dcd2 at ncacn_ip_tcp

Hello, I setting up a new PDC for a new domain using samba 3.2.0 I use LDAP as passwd/idmap backend. I started from scratch just creating the OU for the users/groups/machines/idmaps in the ldap directory, + a user used to bind to ldap. So from there I started winbind and ran net sam provision, which worked great. Now I plan this domain will have a one way trust with one other domain, and as I

Hi, we had this setup working for quite some time but after upgrading the samba package things look different: we now have the following samba/ldap setup: samba-3.0.34p1-cups-ldap openldap-server-2.3.43 the samba-ldap configuration is: doing parameter ldap suffix = dc=foo,dc=ch doing parameter ldap machine suffix = ou=Computers,ou=Samba,ou=system doing parameter ldap user suffix =

Hello, After setting up Samba 3.5.6 on CentOS 5.5 (built from sources) I have noticed a strange problem. Windows 2003 servers participating in this Samba domain do not receive domain groups list when I, say, try to assign security credentials for a file/folder. When I choose domain as source, search reveals only technical group names and individual domain users names. No domain group names

I can't update the users within our LDAP database using smbpasswd. I have attached the output from the smbpasswd debugger below: isun02$ smbpasswd -D 256 -U hoferpa Netbios name list:- my_netbios_names[0]="ISUN02" New SMB password: Retype new SMB password: Trying to load: ldapsam Attempting to register passdb backend ldapsam Successfully added passdb backend 'ldapsam'

Hi There seems to be a discrepancy in the s4 schema concerning security groups. Domain Users comes with gidNumber: 100. This is however contrary to what the schema allows. You can show this as follows: Create a new group. samba-tool group add mygroup. Use phpldapadmin to add the gidNumber attribute. There is an error because gidNumber is provided by the posixGroup class and that objectclass is

Hi all, I have a samba pdc running 3.0.20 + the patches on http://hostopia.samba.org/samba/patches running RHEL4 on an x86_64 platform. I have configured it to use an ldapsam backend per http://us2.samba.org/samba/docs/man/Samba-Guide/2000users.html Since there is not much in the way of testing listed in the "2000users" section I used the tests listed under the making users happy

Hi I think I've managed to get the automount classes into the the schema: ldbsearch --url=/usr/local/samba/private/sam.ldb.d/"CN=SCHEMA,CN=CONFIGURATION,DC=HH3,DC=SITE.ldb" | grep "dn: CN=automount" dn: CN=automountKey,CN=Schema,CN=Configuration,DC=hh3,DC=site dn: CN=automount,CN=Schema,CN=Configuration,DC=hh3,DC=site dn:

Hi guys and congrats for bringing a fantastic project to the open source world. I' ve setup a samba4 pdc succefully and i am able to do domain logins. I was also able to add the automount schema into the ldb. But when it comes to sudoers schema i cant import it in. Further system details: Debian wheezy 7, samba 4.0.6 compiled from source, sudo-ldap standard binary package from repos. I have

I looked all over the place, and cannot find current answer. I want to store passwords/password hashes on my RODC, so that when my DC (Windows) fails, my users can still connect using RODC. The current state that is described (by 3 years old docs) says its WIP, so I'm not sure what to expect? Also, in documentation there is no option, to allow for preloading whole group of users, is that

This is my first attempt at creating a samba pdc. I am receiving the following error when I try joining the samba pdc. The following error occurred attempting to join the domain "MAGABOOKS.ORG": The network path was not found. I am using SuSE 11.0 with: samba-3.2.3-0.1 smbldap-tools 0.9.5-1 openldap-2.4.9-7.4 bind-9.4.2-39.2 dhcp-server-3.0.6-86.1 My config files are as follows:

We currently have an OpenLDAP server with many nodes authenticating to it for various things. We have an existing server that is now using LDAP to authenticate, but would like to have Samba in turn authenticate to it. We've configured the smb.conf file accordingly and can get this working. Our dilemma is in adding the "Manage samba account parameters" plug-in via the Yast

Hi, Is there a possibility that we can add schema in Samba4? like sudo, nis et al. Or do we need an a separate ldap server like OpenLDAP to do it? Hope someone enlighten my confusion and thank you. Regards, Mario

Hi All Experts, I am about to extend our production Samba4 schema to add a few intra-organizational attributes (Employee ID,Passport No., Date of Joining, Date of Leaving) . How can I make change in my samba4 schema. I have already make a post in the forum, but got no reply. Sorry for posting again. But precaution should be taken in to prevent the server from any damage. Kindly help. With

Hi, I am trying to get the Microsoft LAPS working in my samba-4 AD environment. Microsoft LAPS requires us to extend the schema and add two attributes "ms-Mcs-AdmPwd" (Stores the password in plain text) and "ms-Mcs-AdmPwdExpirationTime" (Stores the time to reset the password). I have added the Group Policy part of Microsoft LAPS to Windows RSAT (on Windows Server 208 R2)