similar to: Dovecot authentication LDAP SSL-TLS againts SAMBA4

Hi, i would like to know if anybody have implemented the authentication of dovecot against samba4 via secure ldap (SSL/TLS). I made it but in plain text through dovecot?s offical page: http://wiki2.dovecot.org/AuthDatabase/LDAP/AuthBinds http://wiki2.dovecot.org/AuthDatabase/LDAP But when i try to do it in a secure way i can?t make it work. Samba4 is listening by port 636 and dovecot is speaking

Hi, I am trying to configure Dovecot (2.2.27) with LDAP passdb, specifically with authentication binds (https://wiki.dovecot.org/AuthDatabase/LDAP/AuthBinds). Atribute shadowExpire has a unix time stamp value. Is there a way to write pass_filter like shadowExpire<ToDay? Or maybe there is better way to implement password expiration in Dovecot? -- Pagarbiai Mantas Gegu?is VU

---------- Forwarded message ---------- From: Dania Ramirez Moya <dania181087 at gmail.com> Date: Fri, 9 Jan 2015 12:12:18 -0500 Subject: Samba 4 two DCs no matching UID/GID To: samba <samba at lists.samba.org> Hello list: I have a install of two Debian7 machines with samba 4.1.7. On DC1 I made a domain provision with --use-rfc2307. On DC2 I made a join as DC exactly as

Hello, I'm playing with allow_nets function. It is really cool! In a filebased passwd backend you simply add "allow_nets=192.0.2.143/32" as mentioned in http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets But if I use an LDAP backend it looks different. Following http://wiki2.dovecot.org/AuthDatabase/LDAP/AuthBinds and

Hi list Does anyone has experience in setting up dovecot or any other mail system with user auth against a Samba4 AD ? If yes could I get some advice on that Topic or even a link to a ressource where I can get some Information. Googled a lot but didn't find something yet. Thankx in advance. -- Mit freundlichem Gru? Carsten Laun-De Lellis Hauptstrasse 13 D-67705 Trippstadt Phone: +49

Hi Karsten, > You should be able to add multiple userPassword attributes to your directory: > > userPassword: {CRAM-MD5}xxx > userPassword: {DIGEST-MD5}xxxx > userPassword: {SCRAM-SHA-1}xxxx > userPassword: {NTLM}xxxx > > > Karsten Did try this, didn't end end well. Jun 14 12:59:43 auth: Error: ldap(leonkyneur at itest.com,192.168.99.3,<SQn6QD41TpvLhgGR>):

Hello thank you for you response: I would not like to give up.I'll try to see if I can change my domain to the correct dns structure , maybe then I could be migrated to samba4 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>: > Looks like Windows also does not support single label dc's anymore, see > http://support.microsoft.com/en-us/kb/300684 for the

What if I use uidNumber to avoid messing up with idmap.ldb? In the first domain controller works fine, ignores idmap and use uidNumber, but this attribute is not being replicated when a new user is created. I explain myself a little deeper: 1-I have an AD DC, all users contain uidNumber. "wbinfo -i user" returns uidNumber as expected. 2-I join a second DC. LDAP is replicated

Hello list Has someone migrated w2k3 single label dc to samba4? I am trying but i get several errores I would appreciate any help Best regards

Am 27.06.2015 um 00:36 schrieb robert k Wild: > i have made a file "/etc/dovecot/dovecot-ldap.conf.ext" > > hosts = 10.10.1.3 > base = dc=robina,dc=private > ldap_version = 3 > auth_bind = yes > auth_bind_userdn = cn=%u,cn=home,ou=robina_users,dc=robina,dc=private > pass_attrs = uid=user > pass_filter = (&(objectClass=posixAccount)(uid=%u)) Why do you

Sorry for top posting, don't mean to, looks like my outlook mobile client does it by default Ok great thanks Daniel for this, also do you know if I have to change/edit the config files for postfix/openldap as well or just for dovecot Thank you Rob Sent from my Windows Phone -----Original Message----- From: "Daniel Tr?der" <troeder at univention.de> Sent: ?26/?06/?2015

---------- Forwarded message ---------- From: Dania Ramirez Moya <dania181087 at gmail.com> Date: 2015-03-30 16:45 GMT-04:00 Subject: Re: Fwd: samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm) To: Rowland Penny <rowlandpenny at googlemail.com> Cc: samba <samba at lists.samba.org> Hello rowland I tested

> On 05 Mar 2015, at 10:45, Rowland Penny <rowlandpenny at googlemail.com> wrote: > > On 03/03/15 09:56, Izan D?ez S?nchez wrote: >> Hi again. I apologize for my vague previous question. After some investigation I can be much more precise in my consult. Furthermore, I think I found a bug? >> ... >> >> User "ids" is requesting a ticket to connect

On 05/03/15 15:23, Izan D?ezS?nchez wrote: > > > schnaggy <schnaggy <at> schnaggy.de> writes: > >> >>> On 05 Mar 2015, at 10:45, Rowland Penny <rowlandpenny <at> > googlemail.com> wrote: >>> On 03/03/15 09:56, Izan D?ez S?nchez wrote: >>>> Hi again. I apologize for my vague previous question. After some > investigation I

Hello list Why my windowsxp clients do not *automatically* synchronize their time against DC Samba4?. If I run this command on the client *net time \\ nombre_DC / set / yes*, the pcs update their time but if I change the date on the DC, but if I change date on the DC , computers don't do it. I will appreciate any help you can give me Best regards Dania

Hi, i have one centos 4.3 box, exposed to the internet. since several weeks ago, i found numerous attemps to connect through SSH, but failed. they tried with many username, including root. it's comes from different IP. some of them are foreign website. How do i make my centos become smarter in handling this kind of attacks. eventhough i've disable all the user accounts, left only the

schnaggy <schnaggy <at> schnaggy.de> writes: > > > > On 05 Mar 2015, at 10:45, Rowland Penny <rowlandpenny <at> googlemail.com> wrote: > > > > On 03/03/15 09:56, Izan D?ez S?nchez wrote: > >> Hi again. I apologize for my vague previous question. After some investigation I can be much more precise > in my consult. Furthermore, I

Hi again. I apologize for my vague previous question. After some investigation I can be much more precise in my consult. Furthermore, I think I found a bug... Context: -Samba4 AD DC working fine with many user and machine accouns. -Windows7 client trying to connect via sqlplus to an oracle database residing in a Windows2008 server. Both machines are in the domain. -Server database is using

I'm interested in using authentication via a UNIX socket as documented at http://wiki2.dovecot.org/AuthDatabase/Dict. (We are currently using a checkpassword script to enable us to authenticate against a django app that stores passwords in pbkdf2 format, but I'm concerned about scalability as we grow - specifically the comment about performance on

On 03/03/15 09:56, Izan D?ez S?nchez wrote: > Hi again. I apologize for my vague previous question. After some > investigation I can be much more precise in my consult. Furthermore, I > think I found a bug... > > Context: > -Samba4 AD DC working fine with many user and machine accouns. > -Windows7 client trying to connect via sqlplus to an oracle database > residing in a