similar to: Modify email entry on AD users

Hi all I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50))

Hi all, I've compiled 3.0.7 on a test box which also has an LDAP server running on it. This is the first time for me trying to use Samba with LDAP. I copied the IdealX scripts into /usr/local/sbin and edited the _config.pm file. It is attached at the bottom, stripped of comments. I then edited my smb.conf to the effect of the following: passdb backend = ldapsam:ldap://localhost ldap

Hi, I've found in the list how to add new indexes to Samba4. I read the you have to modify the searchFlags attr in the schema. I've tried but fails. # ldapmodify -f uid.ldif SASL/GSSAPI authentication started SASL username: administrator at mydomain.local SASL SSF: 56 SASL data security layer installed. modifying entry "CN=uid,CN=Schema,CN=Configuration,DC=mydomain,DC=local"

Sorry if I am being dense here. I want to add a gidNumber attribute to the existing group "Domain Users". Is this possible using samba-tool? If not, what's the recommended way - using ldapmodify? I can see that "samba-tool group add" supports a --gid-number flag, but as this is an important system group I don't want to delete and recreate it just to add this

Hi samba admins, I don?t know is this the right place for my question, but I can?t find a list for my problem. I have some trobble to configure the smbldap-tools. I have download and copy the scripts to /usr/local/sbin. But a /usr/local/sbin/smbldap-useradd.pl testuser breaks with this error message: get_user_dn2: error in ldapsearch : /usr/bin/ldapsearch -x -h _SLAVELDAP_ -D '_BINDDN_'

Hi everyone samba --version Version 4.0.0alpha18-GIT-bfc7481 openSUSE 12.1 If I do this: ldbmodify --url=/usr/local/samba/private/sam.ldb -b dc=hh3,dc=site dn: CN=steve6,CN=Users,DC=hh3,DC=site changetype: modify add: objectclass objectclass: posixaccount - replace: primarygroupid primarygroupid: 1134 I get an error something like: ERR: (Unwilling to perform) error 53 If however I do the

While this should work, neither is this particularly harmful. ?Links to objects that don't exist are ignored at runtime. Andrew Bartlett On Tue, 2023-04-04 at 14:39 -0300, Elias Pereira via samba wrote: > hi, > > Any clue? > > On Mon, Apr 3, 2023 at 10:17?AM Elias Pereira <empbilly at gmail.com> wrote: > > > hi, > > > > I have this DC in aws to

Hello, lists. I'm struggling to find out, how one can change password of an active directory (based on samba4) user via LDAP. The problem is that if I try to use userPassword parameter: dn: CN=John Smith,cn=Users,DC=domain,DC=com changetype: modify replace: userPassword userPassword: newPassword ldapmodify -v -c -a -f filename.ldif -H ldaps://server.domain.com -D\ administrator at

Thu, 16 Jul 2020 10:31:04 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 16/07/2020 10:14, RhineDevil via samba wrote: > > How could I add users and groups using ldif files without interacting with samba-tool? > > You will need to write your own scripts around ldapmodify or ldbmodify. > > Rowland > Yes but what fields are required and what

Hello, how can I add LDAp entry useing ldapmodify or ldapvi --ldif? Is there an example elsewhere? best regards

2016-08-04 17:49 GMT+04:00 Rowland Penny <rpenny at samba.org>: > On Thu, 4 Aug 2016 16:44:34 +0400 > henri transfert <hb.transfert at gmail.com> wrote: > > > Hi, > > > > On RSAT , we can see that there are some extra fields for users > > account like description, office, phone number or email address. > > > > I already have hundreds of

hi, I have this DC in aws to fulfill the authentication need of our moodle. # samba -V Version 4.17.7-Debian DNS with SAMBA_INTERNAL The replication of the users and groups happens correctly. Some errors in running samba_dnsupdate, but it is ok anyway. When I ran the command samba-tool dbcheck, I got the return below. # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes

Thu, 16 Jul 2020 10:56:58 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 16/07/2020 10:39, RhineDevil wrote: > > Thu, 16 Jul 2020 10:31:04 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 16/07/2020 10:14, RhineDevil via samba wrote: > >>> How could I add users and groups using ldif files without interacting with

using samba and ldap - redhat 7.3 trying to work on a short cgi to update samba password (it is a url with attributes username and password). I am not very good at all with perl, so if someone can take a quick ponder and help me out, that would be great. I think that it fails in theory however, because to change other users password, you need to be root ... So I was wondering if anyone knows

On 18/07/2020 16:51, RhineDevil wrote: > Sat, 18 Jul 2020 15:31:36 +0100 Rowland penny via samba <samba at lists.samba.org>: >> On 18/07/2020 15:19, RhineDevil wrote: >>> Sat, 18 Jul 2020 14:53:26 +0100 Rowland penny via samba <samba at lists.samba.org>: >>>> On 18/07/2020 14:47, RhineDevil wrote: >>>>> Sat, 18 Jul 2020 14:41:31 +0100

Hello, I have a Samba 4 (alpha 11) server acting as an AD and a Samba 3 client as a domain client, both runing under FreeBSD. To add an SPN for the client I run the command "net ads keytab add HTTP". There is no output but "net ads keytab list" does not show that SPN. Sniffing the network traffic I see that the client uses the control LDAP_SERVER_PERMISSIVE_MODIFY_OID with the

Thu, 16 Jul 2020 11:45:19 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 16/07/2020 11:24, RhineDevil wrote: > > Thu, 16 Jul 2020 10:56:58 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 16/07/2020 10:39, RhineDevil wrote: > >>> Thu, 16 Jul 2020 10:31:04 +0100 Rowland penny via samba <samba at lists.samba.org>: >

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

I found this one https://lists.samba.org/archive/samba/2015-September/194133.html It's a good point of start. thank you rowland. On 20.03.2017 21:37, Rowland Penny via samba wrote: > On Mon, 20 Mar 2017 21:17:00 +0100 > basti via samba <samba at lists.samba.org> wrote: > >> I need the unix password for mail. the user should not be able to >> change this, if win*

Thanks Sven, good Idea let's see if i am getting this right: 1) use MS ADSI editor to add few more attributes to the "users" class 2) use ldapmodify from my ubuntu server to populate those attributes would that work? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: