similar to: Password changes and syncing passwords with Linux accounts

On 16/02/16 07:47, Chris Hastie wrote: > Hi > > I'm experiencing some odd behaviour when trying to change passwords. > I have Samba 4.1.6-Ubuntu configured as an AD-DC on Ubuntu 14.04LTS. > When I change a password (either from a Win10 Pro client, or using > smbpasswd on the machine itself) it all reports that things have > worked. I can then login to Samba using the

Thanks a lot. I will check it. We do not use kerberos - is it necessary ? Bye, Peer On 03.01.2018 15:15, L.P.H. van Belle via samba wrote: > Hi Peer, > > This is my output, this account testaccount1 was created 2 minutes ago before the tests below. > > passwd testaccount1 > Current Kerberos password: > Enter new Kerberos password: > Retype new Kerberos password: >

Hi, a short question about changing passwords. Our linux login server is using winbind for authentication. Everything is working well, but changing the password for a user does not work. We see the following error: passwd Changing password for USER (current) NT password: passwd: Authentication token manipulation error passwd: password unchanged /var/log/auth.log pam_winbind(sshd:auth):

On 16/02/16 16:01, Rowland penny wrote: > Do you have the ldb-tools package installed on the DC ? if not can you > install it, then run this command: > > ldbsearch -H /var/lib/samba/private/sam.ldb > '(&(objectclass=user)(samaccountname=*))' | grep chris > > Can you post the results. Here you go, without any changes to generic names (ie I've kept my

Ok, i clarify a bit more. \\servername.internal.domain.tld\users2\%username% is used in my AD for the home folder of the users. %username% translates to the username. I tried 2 setups now, windows acl base setup and posix based setup. Both fail for me. THE SERVER with the shares ( and is nfs server) The samba/windows part. ( postix rights setup ) On the server this is /home/samba/users2

Dovecot version dovecot-1.0.rc14-7 (opensuse) Postfix is using Dovecot LDA. I'm getting this error message, and I guess it's going to be a problem on my next task, which is to set up sieve scripts. Is there something wrong/contraditory on my config or I forgot something? I want: /var/dovecot-tests/: where user's inbox resides /var/dovecot-tests/home/: home dir (users will not be

I know this question has been posed over and over (and over) again, but I'm at my wit's end. I've dug into the Samba docs, Gentoo specific docs, and PAM docs, and Googled the heck out of it... In any event, I'm running Gentoo 2006.0 (just built) running kernel 2.6.15 and Samba 3.0.21b. I'm 'trying' to set up a simple file server with SSO capabilities to a 2K AD

On 16/02/16 08:38, Rowland penny wrote: > You are not going to like this, but I am going to say it anyway: > > *Remove* any users that are in AD from /etc/passwd (the same goes for > groups) > > All your users & groups should now only exist in AD, you do not need > or can have, users & groups in AD *and* /etc/passwd & /etc/group. > > Your users will only have

Hi. I have a factor and I want to extract just those elements that appear exactly once. How to do this? Toy example follows. > a <- as.factor(c(rep("oak",5) ,rep("ash",1),rep("elm",1),rep ("beech",4))) > a [1] oak oak oak oak oak ash elm beech beech beech beech Levels: ash beech elm oak > table(a) a ash beech elm oak

Currently, LogLevel must be set to VERBOSE to see the fingerprint of an accepted key, and the default LogLevel is INFO. Since this is useful security information, I would like to propose that the 'Accepted publickey' message be modified to include the fingerprint of the accepted key. Is this a reasonable solution? Here is an example log snippet with LogLevel VERBOSE: Oct 1 15:23:24

Hi, Question: Can a TCP server (running on the same host as the OpenSSH server) know the user id/name of a user forwarding an TCP port ? I.e. if someone on some client machine does ssh -L9999:localhost:9999 someuser at somehost nc localhost 9999 and a service accepts the connection on port localhost:9999 on somehost, can it somehow safely read out the user name "someuser"? Long

On 16/02/2016 14:55, Rowland penny wrote: > This is strange, just logging in shouldn't create a user in AD and when > you see MYDOMAIN\chris this is just winbind i.e. > > How are you logging into the DC that causes the creation of a user in AD ? From another machine, in an Ubuntu terminal ssh chris at dc.domain No keys, just typing the password when prompted. The only odd thing

CentOS 5.3 w/ updates Puppet 0.25.1.rc2 (installed from source) Mongrel + Nginx Am I making a mistake or is this a bug? I''ve experienced this issue using 0.24.8 from EPEL also. Thu Oct 22 13:59:43 -0700 2009 //user::virtual-users_groups/User [someuser]/ensure (err): change from absent to present failed: Could not create user someuser: Execution of ''/usr/sbin/useradd -G

I'm trying to remove a DC from a Samba4 based AD network, but run into an error that I can't fathom. Can anyone point me in the right direction? # samba-tool domain demote -Uadministrator GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC

Hello listmembers, we have some trouble connecting postfix to dovecot. after a lot of hours the transport and delivery is working but dovecot can't get the correct user. postmap -q some.user at domain.com ldap:/etc/postfix/ldap-aliases.cf first returns: someuser The mailbox someuser exists and i can login with this user on imap and i can deliver directly using deliver -d but on mail

Here it is again, hope this is more clear I am using the following data (only a small subset is given): Habitat Fungus.yield Birch 20.83829053 Birch 22.9718181 Birch 22.28216829 Birch 24.23136797 Birch 22.32147961 Birch 20.30783598 Oak 27.24047258 Oak 29.7730014 Oak 30.12608508 Oak 25.76088669 Oak 30.14750974 Hornbeam 17.05307949 Hornbeam 15.32805111 Hornbeam 18.26920177 Hornbeam 21.30987049

Hello, I have install samba ad. On AD the config look like # Global parameters [global] netbios name = DC1 realm = SAMDOM.EXAMPLE.COM server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate workgroup = SAMDOM server role = active directory domain controller idmap_ldb:use rfc2307 = yes # Default idmap config for local BUILTIN accounts and

Hi, we get errors about corrupted indexes and we are losing flags with mdbox on NFSv4: Error: Recent flags state corrupted for mailbox Error: Corrupted dbox file Error: Corrupted transaction log file It looks like a LMTP director problem. The user has IMAP IDLE connections open and lmtp delivers to another host. This leads to nfs corruption problems. The user is logged into mail04 and has some

Hi, I'm using mdbox now (Dovecot 2.2.4), with indexes on a separate disk. Works fine, but the directories for indexes are also present in the storage folder, and are empty. Userdb (sql) returns this: home /var/vmail/domains/somedomain/someuser mail mdbox:~/mdbox:INDEX=/mnt/spool/dovecot/index/somedomain/s/someuser And the created directory structure is:

Hello. I wrote about this three weeks ago but got no answer. I'm going to officially "forward" the Debian bug this time, with all the details. The test case is just 840 bytes long. Please give it a try. ---------- Forwarded message ---------- From: Santiago Vila <sanvila at unex.es> To: submit at bugs.debian.org Date: Fri, 23 Jan 2015 22:32:28 +0100 (CET) Subject: