similar to: Samba AD, Attribute Editor, unixUserPassword

Am 04.12.18 um 10:17 schrieb Rowland Penny via samba: > On Tue, 4 Dec 2018 09:54:05 +0100 > basti via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> I have a samba 4 AD Domain, now I see in the Attribute Editor that the >> field "unixUserPassword" is plain text. This is also Plaintext in LDAP >> (seen via ldapvi). >> >>

I found this one https://lists.samba.org/archive/samba/2015-September/194133.html It's a good point of start. thank you rowland. On 20.03.2017 21:37, Rowland Penny via samba wrote: > On Mon, 20 Mar 2017 21:17:00 +0100 > basti via samba <samba at lists.samba.org> wrote: > >> I need the unix password for mail. the user should not be able to >> change this, if win*

Hello, I am running a Samba 4.1.6 AD DC on Ubuntu 14.04. I provisioned with --use-rfc2307 and have followed the instructions here to enable NIS Extensions: https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD I can see the UNIX Attributes tab in ADUC and have all of the attributes populated. I am attempting to authenticate a Solaris

Hello, i try https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record ldapvi '(invocationId=*)' --cross-ncs objectguid I get objectGUID:: i55tljAenUWun3ISCvEXoQ== When I do "samba-tool dns add dc1 _msdcs.foo i55tljAenUWun3ISCvEXoQ== CNAME dc2.foo -Uadmin" ERROR(runtime): uncaught exception - (8, 'WERR_NOMEM') File

On 06.02.2017 14:51, Rowland Penny via samba wrote: > On Mon, 6 Feb 2017 13:56:28 +0100 > basti via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> i try >> https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record >> >> ldapvi '(invocationId=*)' --cross-ncs objectguid >> >> I get objectGUID::

Hello, I want to delete a OU in my Samba AD. On RSAT I get "Access denied" When I try it with ldapvi I get "dsdb_access: Access check failed on" I have also try to repair the samba DB with samba-tool dbcheck --cross-ncs --fix --yes but that does not solve the problem. The OU is a self generated one. Best regards

Hello, how can I add LDAp entry useing ldapmodify or ldapvi --ldif? Is there an example elsewhere? best regards

[EDIT]: Sorry about the second mail. ignore the first one - it had try & and error mistakes in. Problem is still the very same as explaned below. Thanks a lot. Hi, since days I'm trying to substitude my SQL based Postfix/Dovecot mail server by a LDAP based setup. Everything seems to go smooth so far - thanks to the many how to and Dovecot wiki. Unfortunately I'm struggeling,

I need the unix password for mail. the user should not be able to change this, if win* password is changed. In the wiki i have read that you should not mix RSAT and samba-tool management, thats why i ask. is there a way to set a unix password after a domain user is created? On 20.03.2017 20:45, Rowland Penny via samba wrote: > On Mon, 20 Mar 2017 20:38:09 +0100 > basti via samba

Hi I keep on getting errors and can't connect/login to Dovecot. I did my research but unfortunately without success. It is for sure not ulimit because ulimit is set to unlimited per default already. Still , it complains about "Too many open files" but this is a test system and the service dovecot and postfix have just been started. No one except me is testing on this system.

Hello, dovecot users. I'm trying to cope with following problem I have single computer which will be going to be final destination for several virtual domains. Domains are stored in LDAP catalog. Dovecot will be working together with Postfix MTA running on same computer. I'm a bit confused how to achieve following thing: I want Postfix to use Dovecot LMTP server for mail delivery. All

Hi, I would like to provision a huge number of users to a Samba AD/DC and I would like to have the unix attributes set too. I don't want to use the RSAT GUI and manually set each. Is there any tool or script I can use to get that? I have identified some attributes in the AD that are added when I set unix attributes with RSAT GUI. However there must be more changes... These are the

Dear friends, We have samba-3.0.21c-1 under RH9 + openldap 2.3.11 under FC4. When a windows user changes his password using Ctrl-Alt-Del the password is stored on ldap in SSHA format but we need to work with CRYPT because we have some apps that don't support SSHA. These are the lines related with authentication defined in smb.conf: encrypt passwords = yes ldap passwd sync = Yes

> I think all is clean fine. You "think"..?? .. You must verify this ! Asumption is the mother of all fuckups an old boss of me always said.. And he is right. Run : samba-tool fsmo show And verify both servers. https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record#The_objectGUID_CNAME_Record And go through :

Hello, I am using dovecot-2.0.6 with NetBSD amd64. Active Directory is used as an authentication server. (Windows Server 2008 R2) However, the message of "Operations error" was displayed first and it did not move. It solved it by understanding that this is because the authority of the user who used it for bind was insufficient, and adding to "Account Operators" group. #

Hello, as is the link I have set a unix password. add: unixUserPassword unixUserPassword: ABCD!efgh12345$67890 # dummy unix password that ADUC gives to all Unix users But I can't login with this pass. Is this password clear-text? must it be a hash? Is there a way to config winbind to use this ldap attribute? Basti On 20.03.2017 22:10, basti via samba wrote: > I found this one >

Poking around in the code for dovecot-stable seems to indicate that support has been added for the {SSHA} password scheme. This is not reflected in dovecot-ldap.conf. Is the SSHA code actually functional? Thanks! -Ben

Hi I would like to simulate dovecot's dovecotpw with a perl script I tried / used use Crypt::SaltedHash; my $csh = Crypt::SaltedHash->new(algorithm => 'SHA-1'); $csh->add($passwd_string); my $salted = $csh->generate; also use Digest::SHA1; use MIME::Base64; $ctx = Digest::SHA1->new; $ctx->add($passwd_string); $ctx->add('salt'); my $salted =

Hallo. First of all I'm sorry for my bad english. I have a question about how dovecot use passwords. I have all my mail accounts in a ldap database. The user password are stored in form: {crypt}mypasswd. In dovecot-ldap.conf I have default_pass_scheme = CRYPT. All is working fine. The problem in the crypt scheme is that I can't have passwords more than 8 characters long. So I've tried

Hello, I migrated 140 users and computer accounts from NT4 to Samba 3.0.14 with ldap today. Smbldap-tools are the latest stable version from tarball. No errors during vampire and everyone came over and the groups and group memberships populated fine. We couldn't connect to the server as any user from client PC's. The smbldaptools were set to use SSHA encryption for password attribute