similar to: AD LDAP

---------- Původní e-mail ---------- Od: Rowland Penny via samba <samba at lists.samba.org> Komu: samba at lists.samba.org Datum: 27. 6. 2018 11:49:38 Předmět: Re: [Samba] AD LDAP "On Wed, 27 Jun 2018 11:31:15 +0200 (CEST) Michal via samba <samba at lists.samba.org> wrote: >   Hi, >   >  it there  any way how to look into samba ldap in the same way I can > look

---------- Původní e-mail ---------- Od: Harry Jede <walk2sun at arcor.de> Komu: Michal67M at seznam.cz Datum: 28. 6. 2018 0:17:29 Předmět: Re: [Samba] AD LDAP " Am Mittwoch, 27. Juni 2018, 11:31:15 CEST schrieb Michal via samba: >   Hi, >   >  it there  any way how to look into samba ldap in the same way I can > look into OpenLdap via LDAPAdmin, ldap tools etc, when

On Wed, 27 Jun 2018 12:12:42 +0200 (CEST) <Michal67M at seznam.cz> wrote: > ---------- Původní e-mail ---------- > Od: Rowland Penny via samba <samba at lists.samba.org> > Komu: samba at lists.samba.org > Datum: 27. 6. 2018 11:49:38 > Předmět: Re: [Samba] AD LDAP > "On Wed, 27 Jun 2018 11:31:15 +0200 (CEST) > Michal via samba <samba at

> This is problem. We used to be able get "public" data from ldap "> without authentification (password attributes can not be read without > user bind, of course). Is there any way how to do it? Yes, but before I tell you, why do you feel you need to do this, what are you searching for ? "     We use GroupOffice and it is configured to use LDAP; it is looking up

 Does anybody know any answer in this topic, please?  Michal ---------- Původní e-mail ---------- Od: Michal via samba <samba at lists.samba.org> Komu: samba at lists.samba.org Datum: 4. 7. 2018 8:58:45 Předmět: [Samba] classicupgrade questions "I am trying to do a classicupgrade.  (This is not 1st try, I went through it once time already; then I deleted all data and trying it

I am trying to do a classicupgrade.  (This is not 1st try, I went through it once time already; then I deleted all data and trying it again, with questions now.) Command samba-tool domain classicupgrade --dbdir=/etc/samba.PDC/ --realm=ad.nemuh.cz --dns-backend=BIND9_DLZ /etc/samba.PDC/smb.PDC.conf Problem a) ... init_sam_from_ldap: Entry found for user: pc0027$ init_sam_from_ldap: Failed to

Hi, I'm trying to migrate samba 3 NT domain to samba 4 AD, we have migrated data and it seems correct, but now we need to connect with ldapsearch but always receive errors like ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. command used is /usr/bin/ldapsearch -H ldap://server -x -LLL -z 0 -D

Hi samba admins, I don?t know is this the right place for my question, but I can?t find a list for my problem. I have some trobble to configure the smbldap-tools. I have download and copy the scripts to /usr/local/sbin. But a /usr/local/sbin/smbldap-useradd.pl testuser breaks with this error message: get_user_dn2: error in ldapsearch : /usr/bin/ldapsearch -x -h _SLAVELDAP_ -D '_BINDDN_'

Hi Samba Team and users, My question could seem very simple and possibly answer is also simple (if it's the case i'm sorry by advance), but i've found almost no doc about this topic in the wiki. I'm currently running Samba 4 AD in a test environment, preparing for production. Everything is working quite fine, but i'm struggling about some configuration; How (and where)

hai, im still on holiday but i did see some things a bit, also in addition about the smb.conf in classic mode dns forwarder is predecated, so i suggest avoiding the option. this part, you set ssl off but also set the ports to the ssl ports. ldap ssl = off ldap passwd sync = yes /etc/ldap/ldap.conf BASE dc=mydomain URI ldap://sam3dc.mydomain ldap://sam3dc.mydomain:666 use URI

Hi all, I've got on AD DC using Samba 4.4.3 on Centos7 which accept Kerberos connections (kinit is working), which accept ldapsearch with credentials but which refuse ldapsearch with GSSAPI. The issue does not seem to be coming from the client as I discovered this issue writing a script to test all 22 DC, and all 21 others DC are working well from that client. The error: SASL/GSSAPI

Hi, solved only making this changes : in /etc/ldap/ldap.conf add TLS_CACERT /etc/ldap/ca.pem.crt sample query with ldaps # ldapsearch -H ldaps://server -x -LLL -z 0 -D "CN=user,CN=Users,DC=domain,DC=com" -w "p" -b "CN=Users,DC=domain,DC=com" Solved! Thanks 2016-06-19 18:55 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > Hi, > > First of all

I have been running experiments and I found an interesting multiple representations of never expiring accounts. I see when I create an account using the ADUC in windows 10 pro on samba-dc-4.7.5-2.fc27 when I use ldapsearch to get accountExpires I get 9223372036854775807 if I set the account to expire I get the expected value for that date. Here is the strange part when I set the account back to

I managed to do migration using "classicupgrade". Doing tests with debian buster 2:4.9.4+dfsg-4. For the moment using samba internal dns and sub-domain of ad.advocap.org. Had issue forwarding dns if I used main domain. When it comes to real production will use bind that I understand better but don't want to mess with my other dns servers now. Had a w10 box join samba4 ad

Greetings, Kindly give me some advice on what tools that you use to extract a LDAP export from SAMBA into a CSV or better? Cheers, Jimmy

dear list On the samba.org pages there is an overview of Samba GUI's. I've recently (via a post on this mailinglist) discovered http://ldapadmin.sourceforge.net/ It looks very good. Anyone using it here? Experiences? A specific reason why it it not listed on the Samba GUI page? Regards, mj

Hi, I have a working ldap authentification for dovecot (with ldap based userdb query) for my Active Directory but iterations by doveadm -A runs in timeout. I tried now for three days and get it not to work. Best regards Holger /etc/dovecot/dovecot-ldap-userdb.conf is symlink to /etc/doveconf/doveconf-ldap.conf debug_level = 0 uris = ldaps://server1.office.hb-os.de:636 dn =

Hi all, I'd like to know if it's possible to add a custom field when the authentification is made by users. My boolean custom field will be for example "AllowUser" (false/true). I'm trying to do something like that but it's not working : /user_filter = (&(objectClass=posixAccount)(uid=%u)(objectClass=myclass)(AllowUser=TRUE))/ This is my dovecot/ldap

On 28/07/16 11:53, mathias dufresne wrote: > > > 2016-07-28 12:27 GMT+02:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>: > > On 28/07/16 10:32, mathias dufresne wrote: > > Can you explain why it would be an issue giving GID to "Domain > Admins" group? > > > This is because Domain Admins has to

Hi all, I've been working on shell scripts that allow to manage ldap accounts (users, groups, machines). They are similar to the smbldap-tools but do not need PERL to work (and so on...) and are *very* simple to configure - they may be a good alternative. The only tools you need are standard ldap client commands (ldapadd, ldapdelete, ldapmodify, ldapsearch). The scripts can be used as