similar to: Prevent password change from command line

On Tue, 16 Jan 2018 16:21:31 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Arnaud FLORENT via samba > In chel di` si favelave... > > > the UserAccountControl flag "PASSWD_CANT_CHANGE" can not be set via > > ldap > > No, it is not true. You have 'simply'' to OR 0x00010000 > userAccountControl attribute, eg:

Hi, We implemented a Samba4 server which syncs hourly with a database containing (among lots of other data) a list of users with their passwords, etc. So far everything works fine except that users shouldn't be allowed to change their samba4 password from within Windows, but only through the other database (which has its own GUI). I've been unable to find a linux command which allows me

In my current ''production'' NT-like domain (samba 4.2, OpenLDAP backend), password policies seems to ''get written'' to user data. EG, if i set: pdbedit -P "maximum password age" -C 7776000 and i change my password, 'Password must change' have a meningful value, eg 90 days more then the last password change: root at armitage:~# pdbedit -v

Here we go again! :) Setup: Ubuntu 12.04.4, Samba 4.1.6 compiled from sources running as AD DC, activated winbind following the wikipage. All on the same server. smb.conf: [global] workgroup = EXAMPLE realm = EXAMPLE.COM netbios name = DC1 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,

Thanks for pointing this out. I have read that again, now my profiles do not have "vfs objects = full_audit" and disabled the csc policy. I have verified that I have set up my profiles share properly and that it has all the right entitlements. I have reset the entitlements for the users that have issues (as Administrator right click on the folder and do the dance there with Windows).

Le 04/05/2017 à 10:01, Rowland Penny a écrit : > On Thu, 4 May 2017 09:39:17 +0200 > Arnaud FLORENT <aflorent at iris-tech.fr> wrote: > >> >> Le 04/05/2017 à 09:36, Rowland Penny a écrit : >>> On Thu, 4 May 2017 09:07:11 +0200 >>> Arnaud FLORENT <aflorent at iris-tech.fr> wrote: >>> >>>> Le 04/05/2017 à 08:45, Rowland Penny

Hi list, I have tried with all my might to get a samba3 server (Ubuntu 12.04.1 LTS) to join a Windows 2003 domain as a member server, without any luck. I have used,from memory, the official way of doing this (aka, from the samba.org website). No matter what settings I use in smb.conf, the server always joins as a domain controller. This doesn't seem to break the domain how ever. All I am

Hi everyone. I setup a samba AD domain on NT PDC,  i was using  'add machine script' to run a script to add static dhcp lease for joined computer. but this script is not called in "active directory domain controller" mode is there another way to run a script when a computer join the domain? thank you.

Mandi! Rowland penny via samba In chel di` si favelave... > yes, Provided you use the right attribute to search on ;-) Ah! ;-) Just i'm here, i test three condition in account flags, eg: UAC=$(ldbsearch ${LDB_OPTS} -b "${BASEDN}" "(&(objectClass=user)(sAMAccountName=$1))" userAccountControl | grep "^userAccountControl: " | cut -d ' ' -f 2-)

Hi! i am testing Louis van Belle backup script. it works quite well. Thank you for sharing this! https://github.com/thctlo/samba4/blob/master/backup-script/backup_samba4 but i think there is an error in the KEEP_DAYS code as the string '\-$KEEP_DAY1\-|\-$KEEP_DAY2-' is not interpolated so the egrep does exclude anything from rm call. So no files older than $DAYS are kept... # Remove

the host has first an address in dhcp pool between 192.168.1.100-200 (it is not known by dhcpd with a fixed ip address) i would like to add a dhcpd record to provide always same ip to host (ie fixed-address 192.168.1.1) when host is joined to my samba domain in NT PDC, i can do that with  "add machine script" in smb.conf but in AD DC, this script is not run so i m searching

I need to do some testing, but before to hit by head on a known wall, i ask here. My AD domain get used (via PAM/Winbind) to give access to some other dervice, most notably here dovecot. When password expire (or users change it) the MUA try the old password some times, then ask for a new password; users cleraly get scared, press randomly 'OK' or 'Cancel', but if they press 2-3

On Mon, 23 Oct 2017 16:52:05 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > Sorry, i came back on this, but: > > > In another, more generic, way: how password policies are enforced? > > still i need an answer on this question. > > > I've done some tests, using my account, that pdbedit say: > > root at vdcsv1:~# LANG=C

try to set smb ports = 139 max protocol = NT1 Le 22/05/2017 à 19:56, Marc Muehlfeld via samba a écrit : > Hi Guillaume, > > Am 22.05.2017 um 18:27 schrieb Guillaume Duteil via samba: >> We have been using for years the option "netbios aliases" with 9 >> aliases (+ 1 main host). >> Each one has it's own shares. > > Can you show me your smb.conf?

Hi, Is there anything known about ZFS under 10.0-BETA4 when FreeBSD was upgraded from 9.2-RELEASE? I have two servers, with very different hardware (on is with soft raid and the other have not) and after a zpool upgrade, no way to get the server booting. Do I miss something when upgrading? I cannot get the error message for the moment. I reinstalled the raid server under Linux and the other

Hi all, Is it possible and easy to make a CTI server with Asterisk? Florent,

Hello I was directed to discuss this issue here. As I understand the issue with using the unquoted variable is that it expand globs unless noglob is set. E.g. root at dy3:/# test="b*" root at dy3:/# a=($test) root at dy3:/# echo ${a[0]} bin It does seem a bit hypothetical that the output of sambatool dns query ... for an A record should contain a glob, but for the sake of robustness it

Hello everyone on the list, I?m borrowing a bit of your time in order to present a little CSS experiment I?ve been working on: a stylesheet which gives a Markdown-like aspect to HTML elements, especially those elements that the Markdown syntax generates in the first place. This means > signs for blockquotes, # signs or underlines for titles, etc. I wrote a mini-website for it:

On Fri, Aug 11, 2023, at 2:58 PM, Rowland Penny via samba wrote: > On Fri, 11 Aug 2023 14:03:01 +0200 > Kasper Brandt via samba <samba at lists.samba.org> wrote: > > > Hello > > I was directed to discuss this issue here. As I understand the issue > > with using the unquoted variable is that it expand globs unless > > noglob is set. E.g. > > > >

Hi, We have been using for years the option "netbios aliases" with 9 aliases (+ 1 main host). Each one has it's own shares. Since recently, we faced problems with some Windows 10 who fails to connect to any of those hosts. Windows XP, 7, Linux or MacOSX clients are fine. We can fix Windows 10 clients by commenting the "smb ports = 139", but with this configuration