similar to: Additional indexes in Samba4

Hi, I'm trying to modify the objectSid of a group using python-ldap. I've found that I need a server control to do it but doesn't work. The code that I'm using: modlist = [ (ldap.MOD_REPLACE, 'objectSid', s3sid_packed) ] LDB_CONTROL_PROVISION_OID = "1.3.6.1.4.1.7165.4.3.16" LDB_CONTROL_RELAX_OID = "1.3.6.1.4.1.4203.666.5.12"

Hello, lists. I'm struggling to find out, how one can change password of an active directory (based on samba4) user via LDAP. The problem is that if I try to use userPassword parameter: dn: CN=John Smith,cn=Users,DC=domain,DC=com changetype: modify replace: userPassword userPassword: newPassword ldapmodify -v -c -a -f filename.ldif -H ldaps://server.domain.com -D\ administrator at

Hi all, System is Centos 7 and Samba is 4.2.1 sernet version. The database contains 120k users and 150k computers. It's size is 3.3GB on DC01 where the imports were performed and 2.8GB on the second DC. I was trying to index uid attribute and I have a strange behaviour. According to https://msdn.microsoft.com/en-us/library/ms679765%28v=vs.85%29.aspx it is the "searchFlags"

Thank you a lot Luca! I was able to change searchFlags using ldbedit command and I can't test right now the ldbmodify tool as samba seems to be indexing it's database (one thread eating 100% CPU for several minute, since I launched a ldbsearch on "uid" field). I'll try without my typo error (thank you again :) the ldbmodify command (to stop telling it doesn't work when

Hi, I have a domain with several Samba4 servers installed in different locations. I need to use roaming profile but the only way that I get them working is using fixed profile path. I need to use variables, because sometimes users move from one location to another. I've tried with: %LOGONSERVER%/profiles/user //%LOGONSERVER%/profiles/user %SERVERNAME%/profiles/user

Hi, I am trying to get the Microsoft LAPS working in my samba-4 AD environment. Microsoft LAPS requires us to extend the schema and add two attributes "ms-Mcs-AdmPwd" (Stores the password in plain text) and "ms-Mcs-AdmPwdExpirationTime" (Stores the time to reset the password). I have added the Group Policy part of Microsoft LAPS to Windows RSAT (on Windows Server 208 R2)

Hi, I''m researching for WAN optimizations with linux. My network is composed for MPLS network connecting 200 branches against a central site. I use Linux machines to provide security with IPSEC in the branches and in the central site. Now I''m lookup for techniques for optimization the link. My first ideas was use IPCOMP and proxy to cache traffic of HTTP applications. Somebody

I''ve attached a python script that collects stats from DomUs (HVM and PVM). I hope this would be useful for somebody else. See comments for more info. regards, Diego -- -------------- Diego Woitasen XTECH _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users

Hai, I need to add some extra indexing on my AD DB, and im not sure if what the correct/best methode is. And is there any reason i should not do this, i did search on the wiki, but could not find the info i searched for. I know the following. Checked the current index. ( source info : https://wiki.samba.org/index.php/LDB ) ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b @INDEXLIST

Hi! somebody knows how to avoid that samba mantains the files open on the server side while the clients close them. I have problems with a samba file server and windows/linux clients with the message "text file busy". The clients doesn't have the files open, the problem is in the server. I tried with oplocks=no without sucess. regards, diegows -- ------------------- Diego

Hi, AFAIK, the "logon path" parameter doesn't apply anymore in Samba 4. If you want roaming profiles you have to use profilePath user attribute. This works fine but I have an issue. In my environment we have multiple sites. Each one has its own DC and its own file server. We want to store the profile in the file server, but I couldn't fine a way to fine this. I have to do it

Hi, I'm running a Active Directory domain on Samba 4.0.1 and I'm trying to join a Solaris 11 machine this domain: # smbadm join -u Administrator DOMAIN After joining DOMAIN the smb service will be restarted automatically. Would you like to continue? [no]: yes Enter domain password: Locating DC in DOMAIN ... this may take a minute ... Joining DOMAIN ... this may take a minute ... failed

Hi! I'm following the idealx setup on setting up Samba as a PDC with a LDAP backend. It says, to add a user, one should do: smbldap-useradd.pl -a -m -g 900 administrator This gives me the following error message: ldap_modify: Object class violation additional info: object class 'sambaAccount' requires attribute 'rid' ldif_record() = 65

I have a samba 3 dc where users log on with their win xp workstations and I have a w2k3 domain where there is an exchange server the users connect to with outlook. I would like to do an ldapmodify command on active directory to initially align time password was set for both samba and exchane and then have the users notified when logon samba pwd is near to expirate and so they receive also

Hello all! I operate two-dc domain, based on samba 2:4.1.9+dfsg-1~bpo70+1 Forest function level: (Windows) 2003 Domain function level: (Windows) 2003 Lowest function level of a DC: (Windows) 2008 R2 AD Recycle bin not enabled (it can be enabled only on Dom.Level 2008R2) Previous week one of our administrators delete computer accounts from AD by accident, and we are not able to restore it. I

Hi, i have configured a Samba PDC based on idealx.org. now, whenever i set the sambaMustChangePassword flag to 0, then from the subsequent logon, there is a popup urge me for changing password. now, the problem is after i have changed the password, the sambaMustChangePassword is set to 2147483647(unix timestamp), which if i converted it into human readable format, it will be 2038 year,

Hello, on Samba 4.1.12 server ip6.test.lan I tried to correct a mistake in schema, because there is a wrong OID: # ldbedit -e vim -H /usr/local/samba/private/sam.ldb -b 'cn=Schema,cn=Configuration,dc=test,dc=lan' '(cn=myxxxAllowSend)' Result is: schema_data_modify: we are not master: reject request failed to modify CN=myxxxAllowSend,CN=Schema,CN=Configuration,DC=auth,DC=lan -

On 28/07/16 13:59, Jim Seymour wrote: > On Thu, 28 Jul 2016 13:15:43 +0100 > Rowland penny <rpenny at samba.org> wrote: > > [snip] >> Yes it does sound strange, but, on windows, groups can and do own >> directories & files. An xidNumber is just that, a number, it is the >> context in how that number is used that is important. If you give >> Domain

How could I migrate these fields to CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=local? dn: cn=abuse,ou=Aliases,DC=mydomail,DC=local cn: abuse objectClass: nisMailAlias objectClass: top rfc822MailMember: root dn: cn=noc,ou=Aliases,DC=mydomail,DC=local cn: noc objectClass: nisMailAlias objectClass: top rfc822MailMember: root dn: cn=security,ou=Aliases,DC=mydomail,DC=local cn:

Mon, 20 Jul 2020 11:56:57 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 20/07/2020 11:11, RhineDevil via samba wrote: > > How could I migrate these fields to CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=local? > > > > dn: cn=abuse,ou=Aliases,DC=mydomail,DC=local > > cn: abuse > > objectClass: nisMailAlias > > objectClass: