similar to: ldbadd with kerberos ticket => 00002020: Operation unavailable without authentication

On 01/09/15 21:59, Quirin Maier wrote: > Hi, > > I'd like to use ldbadd with kerberos authentication using samba > 4.2.3-SerNet-Debian-7.jessie, but it seems authentication is not being > processed. Executing... > > kinit Administrator at INTERNAL.DOMAIN.TLD -k -t /etc/admin.keytab > > root at dc01:/# klist > Ticket cache: FILE:/tmp/krb5cc_0 > Default

On 2/10/2016 4:39 PM, Rowland penny wrote: > On 10/02/16 20:58, Allen Chen wrote: >> On 2/9/2016 3:48 PM, Rowland penny wrote: >>> On 09/02/16 19:59, Allen Chen wrote: >>>> Hi there, >>>> >>>> I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). >>>> Everything is working fine. >>>> >>>> Issue: ldbadd

Hi there, I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything is working fine. Issue: ldbadd cannot re-add a deleted user account. What I did: 1. save user account # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb sAMAccountName=krtu > ./user-add.ldif 2. delete the user account # ./bin/ldbdel -H /usr/local/samba/private/sam.ldb

On 2/9/2016 3:48 PM, Rowland penny wrote: > On 09/02/16 19:59, Allen Chen wrote: >> Hi there, >> >> I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything >> is working fine. >> >> Issue: ldbadd cannot re-add a deleted user account. >> What I did: >> 1. save user account >> # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb

Interesting, I'm getting the same error using the LDB tools: ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H ldap://localhost ERROR(ldb): uncaught exception - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: Operation unavailable without authentication> <> File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run return

Hi, Trying to add an OU via ldbadd but I get the following error: root at araucaria:~# ldbadd --url=/var/lib/samba/private/sam.ldb /root/ou.ldif ERR: No such attribute : "objectclass top  is not a valid objectClass in schema" on DN OU=A1,DC=ad,DC=a1,DC=ind,DC=br at block before line 4 Add failed after processing 0 records root at araucaria:~# root at araucaria:~# cat /root/ou.ldif

Thanks for the example, Rowland. Does ldb work against remote servers as well? I thought it was only for local, file-based access. In general, I just wanted to use my Samba AD as an environment to learn more about writing software against using LDAP. There are a few applications I'm planning to develop, and I'd like to use actual LDAP so they could be applicable to Samba or Microsoft AD

On Sun, Apr 7, 2019 at 2:17 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > > On Sun, 7 Apr 2019 13:45:11 -0400 > Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > > > Interesting, I'm getting the same error using the LDB tools: > > > > ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H > >

On 10/02/16 20:58, Allen Chen wrote: > On 2/9/2016 3:48 PM, Rowland penny wrote: >> On 09/02/16 19:59, Allen Chen wrote: >>> Hi there, >>> >>> I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything >>> is working fine. >>> >>> Issue: ldbadd cannot re-add a deleted user account. >>> What I did: >>> 1.

Ok it seems like you are in the exact same situation I was. So here are the files in a tgz. Once uncompressed, you'll have to change each occurance of "DC=MYDOMAIN,DC=com" according to your configuration. you can do this with something like : perl -pi -e 's/DC=MYDOMAIN,DC=com/DC=Carlos,DC=com/g' * Then you will have to run ldbadd and ldbmodify in the correct order to upgrade

I have a system running Samba 4 Alpha 11, and I seem to have a corrupted LDB file in my directory. (Probably the result of taking a backup without using tdbbackup). Right now, running tdbbackup on the file produces an error message similar to the following: Failed to insert into DC=WWW,DC=EXAMPLE,DC=COM.ldb.bak.tmp failed to copy DC=WWW,DC=EXAMPLE,DC=COM.ldb If I run ldbsearch -H

On 09/02/16 19:59, Allen Chen wrote: > Hi there, > > I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything > is working fine. > > Issue: ldbadd cannot re-add a deleted user account. > What I did: > 1. save user account > # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb > sAMAccountName=krtu > ./user-add.ldif > > 2. delete the user

I have Samba in production (4.9.6-12 on Ubuntu 18.04) which is working well. However, we are several releases behind so I am gearing up to upgrade to the latest 4.9 release. As part of the preparations (and for other reasons), I spun up an upgraded DC cluster in our development environment (4.9.12-15 on Ubuntu 18.04). The initial setup seemed to work and now I have two DCs that appear to be

msDS-isRODC is introduced in version 32 of the schema. This is the problem I faced. You can have a look to https://lists.samba.org/archive/samba/2015-August/193258.html. --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe Leclerc -------------------------------------------- ----- Mail

You should run : ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=msSFU-30-Mail-Aliases,CN=Schema,CN=Configuration,DC=MYDOMAIN,DC=com" -s base possSuperiors If the result is : # record 1 dn: CN=msSFU-30-Mail-Aliases,CN=Schema,CN=Configuration,DC=DEVINLECLECLERC,DC=com possSuperiors: container possSuperiors: domainDNS possSuperiors: nisMap Then it's OK, the script tried to add a

Hi, anybody else having isssues on updating package index from sernet's https debian package repostory? I'm on debian wheezy. 'apt-get update' results in: W: Failed to fetch https://download.sernet.de/packages/samba/4.1/debian/dists/wheezy/main/source/Sources gnutls_handshake() failed: A TLS warning alert has been received. W: Failed to fetch

I tried joining the same AD before and succeeded, however after upgrading to Debian Buster and installing AD Certificate Services on the Windows DC my join does not work anymore: samba-tool domain join samdom.example.com DC -U?SAMDOM\adadmin? ?site=?KA-H9? fails during the ldap part with: Join failed - cleaning up Failed to bind - LDAP error 49 LDAP_INVALID_CREDENTIALS - <8009030C: LdapErr:

On Sun, 26 Mar 2017 14:32:53 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > as root: > > ldbsearch --url=ldap://mail -b "DC=hprs,DC=local" -s sub > "(&(sAMAccountType=805306368)(sAMAccountName=mark))" > msDS-UserPasswordExpiryTimeComputed > > search error - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: > Operation

On Sun, 26 Mar 2017 00:16:13 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > > ldbsearch --url="/var/lib/samba/private/sam.ldb" -b > "DC=hprs,DC=local" -s sub > "(&(objectCategory=person)(objectClass=user)(sAMAccountName=mark))" > msDS-UserPasswordExpiryTimeComputed > > returns 0 records. Certainly because the --url

On Sun, 7 Apr 2019 13:45:11 -0400 Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > Interesting, I'm getting the same error using the LDB tools: > > ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H > ldap://localhost Does the DC use itself as its first nameserver in /etc/resolv.conf ? if it does, it should work without authentication: root at