similar to: linux ssh change passwd?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 "samba-tool user setpassword" works fine, but I don't want all "normal" Users to connect to the Domaincontroller to change their password. So I tried it with smbpasswd as it was mentioned in many places. I know that smbpasswd is normaly for NT-Domains but somehow also an AD-User must be able to change his password. passwd is

passwd: Authentication token manipulation error smbpasswd: machine 127.0.0.1 rejected the password change: Error was : Wrong Password best regards [FACILITY/btombul at samba ~]$ passwd Changing password for user FACILITY/btombul. Changing password for FACILITY/btombul (current) NT password: New password: Retype new password: passwd: Authentication token manipulation error [FACILITY/btombul at

I need to delete the DNS record and I could not have any idea something that is going bad root at zdtoe-02:~# dig axfr dtoe.etecsa.cu |grep zdtoe-01 *_msdcs\010CNF:946b89d3-b07b-4f43-a6b9-0de3bf3f3a10.dtoe.etecsa.cu. 900 IN NS zdtoe-01.dtoe.etecsa.cu.* *_msdcs\010CNF:4b642bd5-765f-4b16-93ce-3921b46ce220.dtoe.etecsa.cu. 900 IN NS zdtoe-01.dtoe.etecsa.cu. *root at zdtoe-02:~#*samba-tool dns

I could delete all records of this server that no longer exists no problem even record type NS I only have these two that there has been no way to erase any other ideas thanks samba-tool dns delete zdtoe-02.dtoe.etecsa.cu dtoe.etecsa.cu _msdcs\010CNF:946b89d3-b07b-4f43-a6b9-0de3bf3f3a10.dtoe.etecsa.cu. NS zdtoe-01.dtoe.etecsa.cu -U administrator GENSEC backend 'gssapi_spnego'

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I try to change a userpassword with smbpasswd. But I allway get an errormessage: - ----------- root at sambabuch-c1:~# smbpasswd -U EXAMPLE\\stefan -r `nslookup _ldap._tcp.dc._msdcs.example.net | awk '{print $2;exit;}'` Old SMB password: New SMB password: Retype new SMB password: machine 192.168.56.11 rejected the password change: Error

smbclient/mount.cifs stopped working when connecting to a Windows 7 server. The Windows machine is not part of a domain and smbclient is authenticating with one of its local accounts. Upon uninstalling the January Windows security patch (KB4480970) from the server, everything works again. The tests below are with a custom compiled copy of the latest smbclient (4.9.4) for troubleshooting purposes

On 19/01/16 17:24, Stefan Kania wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > "samba-tool user setpassword" works fine, but I don't want all > "normal" Users to connect to the Domaincontroller to change their > password. Hang on, you don't want your users to connect to the place where their passwords are stored ???? > So I tried it

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 19.01.16 um 19:38 schrieb Rowland penny: > On 19/01/16 17:24, Stefan Kania wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> "samba-tool user setpassword" works fine, but I don't want all >> "normal" Users to connect to the Domaincontroller to change >> their password. >

Hi, I setup a test envirement on a dedicatet server. OS: debian stretch samba: 4.5.8 smbclient: 4.5.8 I set it up as DC, the provision work well, yes I've delete the smb.conf in advance. When I test kinit I got an kerberos ticket, but I've problems with smbclient either I use kerberos or password auth. Myabee someone could help me? my smb.conf: # Global parameters [global]

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

[root at samba ~]# cupsaddsmb -U administrator -v hp4 Password for administrator required to access localhost via SAMBA: ********************* Running command: smbclient //localhost/print$ -N -A /tmp/075335545d5bf -c 'mkdir W32X86;put /tmp/07533554ccef1 W32X86/hp4.ppd;put /usr/share/cups/drivers/ps5ui.dll W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp W32X86/pscript.hlp;put

Hi, I've changed /etc/resolv.conf, rebooted, here is the output: cat /etc/resolv.conf domain rona.loc search rona.loc nameserver 192.168.19.2 ------ smbclient -L $(hostname -f) -UAdministrator%<password> -d5 INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5

Hello everyone, I've installed Samba 4.0.4 from source on an Ubuntu Server 12.04 machine. I've configured it as an AD DC following the instructions here: http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO Then I configured Winbind following the instructions here: http://wiki.samba.org/index.php/Samba4/Winbind Users can now login through SSH to the server and access their files and

hi everyone i'm having trouble figuring out why i'm getting NT_STATUS_NO_LOGON_SERVERS errors, i have two samba ad domain controllers running on raspberry pi's i think it a recent problem since an upgrade because i was able to list domain users on a joined member server but now getent only lists local users, i've read that the problem might be due to avahi which i stop with

Hi, I upgraded our servers from Wheezy to Jessie. I use samba in classic mode, with openldap backend. After the upgrade, on the PDC (srv3) everything seems to be ok, it authetnicates, the netlogon share is accessible on it, but on the BDC (srv7), what is the file server, the authentication doesn't work, shares are inaccessible. I compared and syncronized the configuration files to as similar

Hi, I have 2 DC in my network. DC master is a Samba 4 and the secondary is Windows Server 2008. I want to put another Samba 4 as DC to replace Windows Server, however the following errors are emerging: root at samba4-dc2:~# samba-tool domain join empresa.com.br DC -k yes -d 3 lpcfg_load: refreshing parameters from /etc/samba/smb.conf GENSEC backend 'gssapi_spnego' registered GENSEC

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

Good afternoon, tell me, this error occurs on the domain controller samba v 4.19.0, I paired the domain controller with sssd so that authentication occurs under domain accounts on the domain controller, but as you know, sssd changes the machine password every 30 days if this option is not disabled ad_maximum_machine_account_password_age = 0 I haven?t disabled it for 30 days and as I understand it,

OK, we're getting closer here I think. I repeated with -d 2 without much help. Here is -d 3, which may point us in the right direction. As I suspected, it seems to point to some corruption in the DNS still, perhaps? The key line seems to be here: Missing parent while attempting to apply records: No parent with GUID 60e25dda-6d35-4aab-bfa5-6137cb271e27 found for object remotely known as

Hello All I am seeing following error intermittently when I try to join the samba machine into AD controlled by windows machine. Failed to join domain: failed to lookup DC info for domain '3DFSTESTAD.COM' over rpc: The transport connection is now disconnected. If we repeat the same command with same configuration and credentials, it succeeds. Detailed logs at log level 5 are at end of