similar to: client specific debug log for ldap

On Tue, 2017-01-10 at 15:05 +0100, lists via samba wrote: > Hi, > > I am trying to debug an ldaps client that we would like use to change > passwords for end-users. Currently this is failing with this: > > [LDAP: error code 50 - error in module acl: insufficient access > > rights during LDB_MODIFY (50)]; remaining name 'CN=ted t. > >

Hi all I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50))

Hi Thanks all for your responses. The users can now change their own password adding and removing the unicodePwd attribute, using the correct method to generate the password value. Now, I have a problem, because the users who have the option to force to change the password in the next login checked, can't bind to the LDAP server in order to change their password. Is there any way to do this,

hi trying to create a user with ldap from a remote server. The user is created successfully. I'm failing setting the initial password. Setting the unicodePwd with kerberos administrator credentials with ldbmodify and the ldif below results in "00002035: setup_io: it's not allowed to set the NT hash password directly". searching the web I've found s4 mailinglist entries

Hello, I've started working with samba4-alpha6. I've been successful in setting up an AD with an openldap backend. I'm now shifting my focus to how I would go about migrating to a samba4 setup from a microsoft AD implementation. To that end I've written a perl script that uses Net::LDAP to create users in the samba4 LDAP backend. I can create the user in such a way that samba4

Hello, lists. I'm struggling to find out, how one can change password of an active directory (based on samba4) user via LDAP. The problem is that if I try to use userPassword parameter: dn: CN=John Smith,cn=Users,DC=domain,DC=com changetype: modify replace: userPassword userPassword: newPassword ldapmodify -v -c -a -f filename.ldif -H ldaps://server.domain.com -D\ administrator at

Op 27-10-2024 om 21:11 schreef William David Edwards: > Kees van Vloten schreef op 2024-10-27 20:45: >> Op 27-10-2024 om 19:58 schreef William David Edwards: >>> Kees van Vloten via samba schreef op 2024-10-27 15:37: >>>> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba: >>>>> On Sun, 27 Oct 2024 15:08:14 +0100 >>>>> William Edwards

Op 27-10-2024 om 19:58 schreef William David Edwards: > Kees van Vloten via samba schreef op 2024-10-27 15:37: >> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba: >>> On Sun, 27 Oct 2024 15:08:14 +0100 >>> William Edwards <wedwards at cyberfusion.nl> wrote: >>> >>>>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba

Kees van Vloten via samba schreef op 2024-10-27 15:37: > Op 27-10-2024 om 15:31 schreef Rowland Penny via samba: >> On Sun, 27 Oct 2024 15:08:14 +0100 >> William Edwards <wedwards at cyberfusion.nl> wrote: >> >>>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba >>>> <samba at lists.samba.org> het volgende geschreven: >>>>

Kees van Vloten schreef op 2024-10-27 20:45: > Op 27-10-2024 om 19:58 schreef William David Edwards: >> Kees van Vloten via samba schreef op 2024-10-27 15:37: >>> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba: >>>> On Sun, 27 Oct 2024 15:08:14 +0100 >>>> William Edwards <wedwards at cyberfusion.nl> wrote: >>>>

On Tue, 29 Oct 2024 10:57:38 +0100 Kees van Vloten via samba <samba at lists.samba.org> wrote: > > Op 29-10-2024 om 10:12 schreef Rowland Penny via samba: > > On Mon, 28 Oct 2024 17:48:53 +0100 > > William David Edwards via samba <samba at lists.samba.org> wrote: > > > >> Rowland Penny via samba schreef op 2024-10-28 15:32: > >>> On Mon,

Hello, I'm trying to synchronize users with samba4 and Google apps using Google Apps Directory Sync. It's asking me to enter the user Password attribute. May I know what attribute does samba4 use to store user passwords? Also, what hash does it use? SHA1? or MD5? I imported the users using pdbedit. Thank you in advance. Sincerely, Windell Shem Pasamba

Hi Juan, you can use the 'kpasswd' utility: kpasswd user at YOUR.REALM It can be run as unprivileged user. It first prompts you for your old password and the twice for the new password. Cheers, Roel Juan Asensio Sánchez writes: > Hi all > > I am trying to create a webapp to allow users to change their own passwords > in Samba4 (perhaps, also in AD), using LDAP(s).

Hi, I found some discussion here in 2010 about allowing/disallowing anonymous ldap access in samba4, however, nothing much recent comes up. I see that my samba4 does not allow anonymous access. Is there a way to enable it in samba4, like the way we had it with samba3/openldap? (we restricted access to sensitive info, but allowed anon search access to many user details like mail addresses,

Hi again, Am Montag, 14. März 2016, 00:44:47 CET schrieb Markus Dellermann: > Am Donnerstag, 10. März 2016, 10:41:34 CET schrieb mathias dufresne: > Hi, Mathias and all > thank you for your answer. > > > Hi all, > > > > SPN = servicePrincipalName > > > > A simple search returning all servicePrincipalName declared in your AD: > > ldbsearch -H $sam

On Mon, 28 Oct 2024 17:48:53 +0100 William David Edwards via samba <samba at lists.samba.org> wrote: > Rowland Penny via samba schreef op 2024-10-28 15:32: > > On Mon, 28 Oct 2024 15:01:35 +0100 > > William David Edwards <wedwards at cyberfusion.nl> wrote: > >> > >> As mentioned before, I'm able to log in with a password set using > >>

Op 29-10-2024 om 10:12 schreef Rowland Penny via samba: > On Mon, 28 Oct 2024 17:48:53 +0100 > William David Edwards via samba <samba at lists.samba.org> wrote: > >> Rowland Penny via samba schreef op 2024-10-28 15:32: >>> On Mon, 28 Oct 2024 15:01:35 +0100 >>> William David Edwards <wedwards at cyberfusion.nl> wrote: >>>> As mentioned

Hi, On 10/10/19 3:35 PM, Rowland penny via samba wrote: > However, I have tried several times to decode a unicodePwd, but have > never succeeded So, to make sure I understand: while decoding the AD unicodePwd should work in theory, it does not work for anyone, in actual practise? MJ

On Mon, 28 Oct 2024 12:17:02 +0100 William David Edwards via samba <samba at lists.samba.org> wrote: > I think I might've found a solution while debugging. > > To understand what I'm doing wrong with `unicodePwd`, I'm trying to > get the LDAP request that LAM does, and compare it to mine. > > As I temporarily switched to an unencrypted connection to be able

On Mon, 28 Oct 2024 13:37:27 +0100 William David Edwards <wedwards at cyberfusion.nl> wrote: > Rowland Penny via samba schreef op 2024-10-28 12:50: > > On Mon, 28 Oct 2024 12:17:02 +0100 > > William David Edwards via samba <samba at lists.samba.org> wrote: > > > >> I think I might've found a solution while debugging. > >> > >> To