similar to: 'samba-tool user setpassword', PwdLastSet and expiration...

I resend this: > I've a script 'infrastructure' that manage password propagation between > some domains/password sources. > > When, in my AD domains, i ''consume'' a passord caming from another > domain, i run: > > samba-tool user setpassword ${USER} --option="check password script"="" --newpassword="$mypassword"

On Tue, 2019-08-27 at 18:19 +0200, Marco Gaiarin via samba wrote: > I resend this: > > > I've a script 'infrastructure' that manage password propagation > > between > > some domains/password sources. > > > > When, in my AD domains, i ''consume'' a passord caming from another > > domain, i run: > > > > samba-tool

On Tue, 27 Mar 2018 13:38:56 -0400 Mark Foley wrote: > > On Mon, 26 Mar 2018 08:08:53 +0200 Michael Wandel <m.wandel at t-online.de> wrote: > > > > Am 26.03.2018 um 06:31 schrieb Mark Foley via samba: > > > As a normal user, I want to change my Domain Password. I've tried: > > > > > > $ samba-tool user setpassword myuserId

Hello, I am stuck with a error when setting password for a couple of specific users. This error makes impossible to set the password for the affected users. In Windows I get an operation error but the samba-tool output is more informative: samba-tool user setpassword user2 --newpassword= New Password: ndr_pull_error(11): Pull bytes 2 (../librpc/ndr/ndr_basic.c:103) ERROR: Failed to set

Hi, I've detected a very strange behavior on samba 4.8.9 and 4.10.6. After setting a new password for a user with samba-tool the old password remains valid. The user can use both passwords. After setting the third password become the first password invalid: :~ # samba-tool user setpassword extisadm --newpassword=12AbCdEf Changed password OK :~ # samba-tool user setpassword extisadm

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

On Mon, 22 Apr 2024 08:56:41 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > New related issue. > > I upgraded the Domain Controller from 4.8.2 to 4.18.9 about 90 days > ago, and set the 'Maximum password age' to 90 days. Today, two of the > users' passwords were expired when they tried to log in this morning. > They got the messaage that their

Dear all, we are transitioning from an openldap / MIT KDC setup to a samba4 AD. I am doing this by setting up a samba NT4 domain, populating it from LDAP and sticking in the password hashes which I automatically extract from the MIT KDC arc4-hmac keys. Then I run the classicupgrade. I do this whole thing from cron in a script once a day to be able to slowly migrate services. The MIT / openldap

I have a new problem. I'm currently running Samba4 4.4.16 as an AD/DC. I've been running this AD/DC for several years now. I am using redirected folders. Up to now, domain users logging onto any domain member Windows workstation would get their desktop. Recently I discovered that users now only get their desktop on their "usual" workstation, and the Desktop Target is in fact

On Thu Apr 25 05:02:39 2024 Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Mon, 22 Apr 2024 08:56:41 -0400 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > New related issue. > > > > I upgraded the Domain Controller from 4.8.2 to 4.18.9 about 90 days > > ago, and set the 'Maximum password age' to 90 days.

Hello every body, i am using samba (2.2.8a) with ldap support. In the samba.schema, there are special attributes relatives to the user passord: pwdMustChange, pwdCanChange, kickoffTime, logoffTime, logonTime and pwdLastSet. All the samba's documentations i can found described those attributes as "currently unused", execpt the last one that represent the time modification since 1970.

On Wed, 30 May 2018 10:33:55 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > So, in AD LDAP lingo, a 'modify' is not atomic, and a 'delete/add' > > > yes? > > Ahem, i meant: > > So, in AD LDAP lingo, a 'replace' is not atomic, and a

New related issue. I upgraded the Domain Controller from 4.8.2 to 4.18.9 about 90 days ago, and set the 'Maximum password age' to 90 days. Today, two of the users' passwords were expired when they tried to log in this morning. They got the messaage that their password was expired and to change it, but when doing so they keep getting "your password has expired." I've

Mandi! Mark Foley via samba In chel di` si favelave... I'll go back to that old thread. > Actually, that didn't quite work. It did change the domain password, but didn't reset the > expiration days. So today, when the previous password was set to expire. My account was locked > out. I had to log onto the AD/DC as the Domain Administrator and do 'samba-tool user

The password encryption works because I can modify the password connected to a DC samba4, but the problem is when I try the same with the Windows DC. I'm using a LDAP java library. My question is: what is the samba-tool authentication method that you can reset password connected to a Windows DC using "samba-tool user setpassword Admin --newpassword=PASSWORD -H ldap://10.0.0.3 -U

Am 11.03.2019 um 09:24 schrieb Rowland Penny via samba: > On Mon, 11 Mar 2019 07:16:30 +0100 > Christian via samba <samba at lists.samba.org> wrote: > >> Dear all, >> >> we are transitioning from an openldap / MIT KDC setup to a samba4 AD. >> I am doing this by setting up a samba NT4 domain, populating it from >> LDAP and sticking in the password hashes

Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue.  Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution.  Now that I've found Samba does AD style domain, I'm excited to use it in several customer locations.  Since I

Hi, I understand that using options -H and --simple-bind-dn one could run samba-tool remotely. But how should I specify the DN to use for simple bind? I tried many syntaxes: cn=Administrator cn=Administrator at domain domain all with the Administrator password, but it always fail with: Failed to bind - LDAP error 49 LDAP_INVALID_CREDENTIALS - <Simple Bind Failed:

Hello. Samba 4.1.0pre1-GIT-aad669b, joined as a DC to an existing domain. At least 6 accounts behave like this: Kerberos: AS-REQ techgroup at KLIN.KIFATO-MK.COM from ipv4:192.168.1.31:33822 for krbtgt/KLIN.KIFATO-MK.COM at KLIN.KIFATO-MK.COM ldb: ldb_trace_request: SEARCH dn: <rootDSE> scope: sub expr: (&(objectClass=user)(userPrincipalName=techgroup at KLIN.KIFATO-MK.COM)) control:

On Tue, 31 Oct 2017 18:19:39 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > Seems a bit strange to me... > > Seems a bug to me, so i've fired up: > > https://bugzilla.samba.org/show_bug.cgi?id=13114 > > > Thanks. > I normally only use 'samba-tool user setpassword --random-password' when I create a user that will