similar to: Samba AD API

---------- Původní e-mail ---------- Od: Harry Jede <walk2sun at arcor.de> Komu: Michal67M at seznam.cz Datum: 28. 6. 2018 0:17:29 Předmět: Re: [Samba] AD LDAP " Am Mittwoch, 27. Juni 2018, 11:31:15 CEST schrieb Michal via samba: >   Hi, >   >  it there  any way how to look into samba ldap in the same way I can > look into OpenLdap via LDAPAdmin, ldap tools etc, when

I have been running experiments and I found an interesting multiple representations of never expiring accounts. I see when I create an account using the ADUC in windows 10 pro on samba-dc-4.7.5-2.fc27 when I use ldapsearch to get accountExpires I get 9223372036854775807 if I set the account to expire I get the expected value for that date. Here is the strange part when I set the account back to

---------- Původní e-mail ---------- Od: Rowland Penny via samba <samba at lists.samba.org> Komu: samba at lists.samba.org Datum: 27. 6. 2018 11:49:38 Předmět: Re: [Samba] AD LDAP "On Wed, 27 Jun 2018 11:31:15 +0200 (CEST) Michal via samba <samba at lists.samba.org> wrote: >   Hi, >   >  it there  any way how to look into samba ldap in the same way I can > look

I have a follow up to the question I asked and found a work around for today. Is there any tool in samba used to manipulate RFC2307 aka NIS Extensions that do not involve manipulating the ldap tree with a ldapmodify or directly editing the sam database with ldbedit? I see in the samba wiki that there is https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC that says ADUC can be used from

On 5 January 2016 at 15:02, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > I'll try to use ldbedit to grant myself permissions on the OU again .. Is > ldbedit safe to use: > > - on a running Samba server (or do I need to stop samba) > - in a multi-DC environment (or do I need to run it and make the same > changes on each DC) > Answering my own question here... it

I found this one https://lists.samba.org/archive/samba/2015-September/194133.html It's a good point of start. thank you rowland. On 20.03.2017 21:37, Rowland Penny via samba wrote: > On Mon, 20 Mar 2017 21:17:00 +0100 > basti via samba <samba at lists.samba.org> wrote: > >> I need the unix password for mail. the user should not be able to >> change this, if win*

Cool, I'll have a look at this too, thanks All! ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1 815 2236, eMail: mariopiorusso at ie.ibm.com IBM Ireland Product Distribution Limited registered in Ireland with number 92815. Registered Office: IBM House, Shelbourne Road,

Hi, A while ago I successfully set permissions on a section of my LDAP / AD tree, using either ADUC or ADSIEDIT (I forget which). These permissions allowed my own user to access this section of the tree; I removed permissions for 'Domain Admins' etc. to ensure that others would not be able to view or change the data - this has worked great for many months. I have just tried to add a new

Thu, 16 Jul 2020 11:45:19 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 16/07/2020 11:24, RhineDevil wrote: > > Thu, 16 Jul 2020 10:56:58 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 16/07/2020 10:39, RhineDevil wrote: > >>> Thu, 16 Jul 2020 10:31:04 +0100 Rowland penny via samba <samba at lists.samba.org>: >

Thu, 16 Jul 2020 12:36:58 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 16/07/2020 12:22, RhineDevil wrote: > > Thu, 16 Jul 2020 11:45:19 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 16/07/2020 11:24, RhineDevil wrote: > >>> Thu, 16 Jul 2020 10:56:58 +0100 Rowland penny via samba <samba at lists.samba.org>: >

On Wed, 27 Jun 2018 12:12:42 +0200 (CEST) <Michal67M at seznam.cz> wrote: > ---------- Původní e-mail ---------- > Od: Rowland Penny via samba <samba at lists.samba.org> > Komu: samba at lists.samba.org > Datum: 27. 6. 2018 11:49:38 > Předmět: Re: [Samba] AD LDAP > "On Wed, 27 Jun 2018 11:31:15 +0200 (CEST) > Michal via samba <samba at

  Hi,    it there  any way how to look into samba ldap in the same way I can look into OpenLdap via LDAPAdmin, ldap tools etc, when I know OpenLDAP "root" dn and password? Is there such "root" user for Samba AD LDAP?    We have a lot of scripts based on "ldapsearch" (without authentification) and "ldapmodify" (with ldap authentification). It would be very

On 04/01/16 23:26, Jonathan Hunter wrote: > The story gets deeper, also.. (nothing is ever easy, right? :-)) > > Using the ldbsearch command above, I could at least view the SIDs that have > access to the OU. > > One of them should be a group called "mysecretou Managers"; I can see from > ADUC that my user is indeed still a member of this group (so far, so good).

2017-07-27 16:33 GMT+02:00 mathias dufresne <infractory at gmail.com>: > > > 2017-07-27 15:14 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org> > : > >> On Thu, 27 Jul 2017 08:51:52 +0100 >> Rowland Penny via samba <samba at lists.samba.org> wrote: >> >> > On Thu, 27 Jul 2017 08:36:51 +0100 >> > Rowland Penny via

 Hi,   we want to migrate from samba3 NT4 domain (we were using it for a long time) to Samba4 AD. A lot of questions.   a) user homes mapping     From our v3 smb.conf       logon drive = S:   [homes]         comment = Home Directories         path = /home/%u         read only = No         create mask = 0700         directory mask = 0700         inherit acls = Yes         browseable = No        

On 2020-04-30 23:14, Rowland penny via samba wrote: > On 30/04/2020 21:40, Jelle de Jong via samba wrote: >> >> First logon is I use samba-tool to add the user then I go to an >> Windows 10 Pro domain member system and logon to the machine. The >> \\SAMBA01\users\lgaga folder will not be there..... > It will not be there, samba-tool doesn't have the code to

Hi, my organization uses samba3 with LDAP backend, several non-samba attribute are stored in LDAP to manage different service (webmail, web service) also LDAP storing many extra-domain users in a different directory. I would like to migrate to samba4 AD-DC but i need to keep extra-domain users and non-samba attributes. I would like keep all users in LDAP and syncing their passwords from samba

Hi all, I've compiled 3.0.7 on a test box which also has an LDAP server running on it. This is the first time for me trying to use Samba with LDAP. I copied the IdealX scripts into /usr/local/sbin and edited the _config.pm file. It is attached at the bottom, stripped of comments. I then edited my smb.conf to the effect of the following: passdb backend = ldapsam:ldap://localhost ldap

On 6/19/2020 10:00 AM, Rowland penny via samba wrote: > > The easiest way is to upgrade to 4.12.x and then use '_*samba-tool > group addunixattrs*_', otherwise you could use ldbedit or create an > ldif and use ldbmodify or ldapmodify. Another option would be to use > something like LAM. > > Rowland Sorry, but, there is what you told me to do in your first email

Hi, ? my problem is related to samba3 with openldap backend. i use syncrepl to replicate our openldap db to the slapd running on the samba server. slapd is configured to set a referrer for write requests via "updateref". ? if i use smbpasswd to change the samba/ldap password from the console everything works fine. i can see the referrer offered by the local slapd and also a rebind to