similar to: Changing LDAP Password from Windows failes if referral is configured

hi, i see the same error message with samba 3.0.14a and OpenLDAP 2.2.23 (Debian Packages) with Master/Slave setup. i did not set up a referral to the master, so why does samba get a referral when attempting to write to a slave? is this an in-build samba feature? do i have to enable referrals to get this to work properly? any advise is appreciated! thx! micha Zwonarz Ivo wrote: > We use

We use sambaPDC + LDAP On our BDC we have a replicated ldap slave. Everything seems to work fine. Hower, in the smbd log file we have the following messages (only on the BDC's) [2006/05/31 15:25:08, 1] passdb/pdb_ldap.c:ldapsam_modify_entry(1495) ldapsam_modify_entry: Failed to modify user dn= uid=pc01233$,ou=Machines,dc=brrc,dc=be with: Referral [2006/05/31 15:25:08, 0]

Hello everyone! I'm having problem with the parameter ldap passwd sync = yes. If my ldapsam points to a master ldap server, it works perfectly. If it points to a slave ldap server, the samba attributes are update but not the userpassword. I'm using samba 3.4.3 with Fedora Directory 1.2. Viewing the log files I saw same strange messages when I trying to change my password: [2009/12/08

AIX 5.2 OpenLDAP 2.2.15 Samba 3.0.7 (no winbindd) I've got a stupid problem with referrals that I can't seem to ferret out. Each Samba DC has a localhost-based LDAP replica for scalability (my idea anyway). So the only way they will talk to the Master is if there is need for an update. Ok. If I make the updatedn the same as the rootdn of the replica, it updates the local database;

If I were going to do this, I would probably try moving to a Windows 200x AD domain controller, and implementing RSA SecurID on that machine. I have not worked with other OTP solutions. As far as I understand, if Samba is configured as a domain controller, it expects to be able to handle the authentication itself. OTP is , in my opinion, most valuable when you are exposing resources to the

Hi Damien, thanks for you answer. Here is the output of ssh -vvv for both versions: http://paste.ubuntu.com/13576087/ http://paste.ubuntu.com/13576243/ If you need any more info let me know. Regards the2nd On 2015-11-29 12:14, Damien Miller wrote: > On Tue, 24 Nov 2015, the2nd at otpme.org wrote: > >> Hi, >> >> i'm unsure if the problem we encounter is a bug in

Hi, i'm unsure if the problem we encounter is a bug in openssh or in gnupg. But as everything was working with openssh 6.7p1 and earlier i guess that there where at least some changes in openssh that leads to the problem. You can read the latest discussion about the problem here: https://www.mail-archive.com/gnupg-users%40gnupg.org/msg29421.html https://www.mail-archive.com/gnupg-users

Hi, I have a setup with two CentOS 5 machines running OpenLDAP 2.3.x, right now the primary uses slurpd to send the updates to the second server, and the second server is using "updatedn" to allow updates (from what I understand! I'm no OpenLDAP guru here.) Clients are using pam_ldap and nss_ldap to get the users and authenticate them in LDAP. Right now hosts query only the primary

Greetings, I have Samba 3.0.10 set up with ldapsam (OpenLDAP 2.2.13) and smbldap-tools 0.8.8, using start tls. Account info etc. is read properly from ldap, and adding/removing/modifying users with the "net" command works fine. Oddly, if I try to use USRMGR, for instance, to add a user, only the posix account gets created (by the smbldap-tools script) but the samba sam account add

Okay I try this thing : mastok:/etc/samba # smbldap-useradd root mastok:/etc/samba # smbldap-usermod -u 0 -g 0 root mastok:/etc/samba # smbldap-usermod -a root mastok:/etc/samba # smbldap-passwd root ##### Administrator:x:998:512:Netbios Domain Administrator:/home/data1/samba/Administrator:/sbin/nologin nobody:x:999:514:nobody:/dev/null:/sbin/nologin root:x:0:0:System

Hi We have some Samba servers using LDAP (389 DS) as backend. In the LDAP server, we have defined some policies to make the passwords stronger. When a user tries to change his password (Control-Alt-Del), this message appears in the LOGs: ==> /var/log/samba/xptest <== [2010/06/28 12:26:26, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [10000001S]

I've upgrade to Samba 3.0.4 a System wich it's running SLES 8. The System is working with LDAP and smbldap-tools 0.8.4 for managing users and groups. I'd like to manage the user and group with usrmgr.exe running into a Windows 2000. When I tried adding new user the programs didn't work and it's reported an error. The log system running in the PDC [SLES 8], reporting:

Okay, if anyone can help me, I put all my config and log on http://www.arzurproduction.com/temp/ I cannot join the domain on my Windows XP (Access Deny) So I try : 1- An Administrator user create by smbldap-populate, I have root = Administrator on my /etc/samba/smbusers Error : [2005/03/21 10:09:03, 2] auth/auth.c:check_ntlm_password(312) check_ntlm_password: Authentication for user

I'm in the process of learning Samba and evaluating it as a possible replacement for Windows NT servers in our office next year. I have set up a small test network comprised of one NT 4 (SP6a) Workstation, one Windows 2000 Pro (SP3) and one Fedora Core 3 running samba 3.0.11 as a PDC. I'm using LDAP as the passdb backend with smbldap-tools 0.8.7-1. The Windows 2000 Pro machine can join the

Hi, I am using both syncrepl (for replication) and smbk5pwd (for password synchronisation between samba and ldap account) overlays. I have configured replication in the simplest way: a read-only producer that forwards updates to the provider thought updateref. If I change my password thought passwd command on a client with pam modules configured for gaining information from the provider

Hello OK, in my case, there is only one samba server acting as PDC. On the PDC, it has a openldap server as backend. I have configured another server as the slave ldap server. slave ldap server will pool data by syncrepl. There are some spaces in samba/smbldap-tool that we can configure multiple ldap servers (or load balance by use of DNS) What happen if the PDC write data to the slave ldap

I have successfully joined the XP machine to the domain. The strange part is, that it only wanted to be joined if it connected to the PDC and not the BDC. The way it is set-up is that the XP machine and a BDC is in one branch and the PDC is in another. Every time I would try to connect via the BDC, it would return a value ACCESS DENIED I stopped the smb service on the BDC, and got it to

I've been trying to get this to work for a few days now. I read that domain requests are sent via broadcast, and to use WINS to get around it. Well, I've enabled the WINS server on my Samba PDC, and told the BDC's on each VPN segment that the PDC is a WINS server. WINS resolution works apparently, I can sit on a VPN'd network segment and ping machines across the VPN via their

-----Original Message----- From: samba-bounces+toby-list=mail.nixa.k12.mo.us@lists.samba.org [mailto:samba-bounces+toby-list=mail.nixa.k12.mo.us@lists.samba.org] On Behalf Of s.jousse@free.fr Sent: Thursday, December 18, 2003 11:38 AM To: Craig White Cc: samba@lists.samba.org Subject: Re: [Samba] Samba 3 PDC with LDAP - Error when changing userpasswordfrom windows here my passwd chat log (sorry,

Hello! SuSE Linux 10.0 Samba 3.0.20b OpenLDAP backend IDEALX scripts v0.9.2 Windows XP SP2 client Everything seems to be working except when changing your password from the Windows client (CTRL-ALT-DEL and "Change password"). When I try to change the password I get the following error message. "The User name or old password is incorrect. Letters in passwords must be typed