similar to: Set a temporary password on user accounts (samba4)

On 05/09/2019 08:37, Daniel Berteaud via samba wrote: > Hi there. > > I'm looking for a way to temporarily change password for some users. > > I have a samba4 install in DC mode (running samba 4.8.3), everything is > working fine. I'm now migrating an email system which will use samba4 > auth (Zimbra, but doesn't matter here). > > I'd like to set a temp

Le 05/09/2019 ? 12:38, Rowland penny via samba a ?crit?: >> >> Can I backup the whole user entry, and restore it later ? Or just a set >> of attributes ? Only supplementalCredentials and unicodePwd are enough ? > > No, you cannot backup and restore the entire AD object, a lot of the > attributes are only writeable by the system. Even with ldbmodify ? > > You

Citando Andrew Bartlett <abartlet at samba.org>: > On Fri, 2017-04-07 at 20:32 +0000, Leonardo Bruno Lopes via samba > wrote: >> Hi everyone! >> >> I have a LDAP with all my users' accounts, each one with the >> sambaNTPassaword correctly defined. I also have a freshly installed >> Samba >> 4.2 running on a Debian 8.7 box. >> >> I

On Sun, 2017-04-09 at 16:12 +0100, Rowland Penny via samba wrote: > On Sun, 09 Apr 2017 14:47:59 +0000 > Leonardo Bruno Lopes via samba <samba at lists.samba.org> wrote: > > > > > Is there any chance that this could mean I only need to wipe   > > 'supplementalCredentials' attribute -- I saw that it is possible > > --   > > after set the

Hi Sébastien, >> I'm trying to synchronize user accounts from LDAP to Samba 4 AD >> (using LSC) but it seems that password update through ldap is not >> allowed. >> >> I failed to find details about it, but can someone confirm that >> unicodePwd cannot be read / wrote trough a LDAPS connection ? Is >> there any workaround ? The unicodePwd attribute

Le 03/03/2015 12:56, Rowland Penny a ?crit : > On 03/03/15 11:11, Jean-Fran?ois Morcillo wrote: >> Hello, >> >> I have a small test network with a Win2k8R2 DC. >> >> I've added a samba4 as second DC in this network. >> The join seems to run smoothly. >> >> But, after the join, this command: ldapsearch -LLL -x -H >>

On 05/09/2019 11:43, Daniel Berteaud via samba wrote: > Le 05/09/2019 ? 12:38, Rowland penny via samba a ?crit?: >>> Can I backup the whole user entry, and restore it later ? Or just a set >>> of attributes ? Only supplementalCredentials and unicodePwd are enough ? >> No, you cannot backup and restore the entire AD object, a lot of the >> attributes are only

Hello, I have a small test network with a Win2k8R2 DC. I've added a samba4 as second DC in this network. The join seems to run smoothly. But, after the join, this command: ldapsearch -LLL -x -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b "dc=test,dc=dom" "(SAMAccountName=Administrateur)" returns some strange results: ? some attributes like unicodePwd

Hi, We are (again) looking at syncing our samba AD to the azure AD cloud. I installed a win2016 server domain member server and set it up for syncing, including password hashes, so users can login azure/O365 using their on-prem passwords. We're using microsoft's latest tech: the new "Azure AD Connect cloud provisioning". We made sure to check "password hash sync".

Hi everyone! I have a LDAP with all my users' accounts, each one with the sambaNTPassaword correctly defined. I also have a freshly installed Samba 4.2 running on a Debian 8.7 box. I followed the instructions described by Steve ThompsSmabon here <https://lists.samba.org/archive/samba/2014-June/182196.html> and I am able to create a Samba 4 domain account ('samba-tool user add ...

Hi, i sync the passwords from samba to other backends using "samba-tool user syncpasswords" On my operative system (samba 4.10 and python2) all works fine. I upgraded my test-DC to samba 4.11 and python3 and now the samba-tool user syncpasswords --daemon crashes. Fri Oct 4 12:29:47 2019: pid[983]: Attached to logfile[/usr/local/samba/var/log.syncpw] Fri Oct 4 12:29:47 2019:

Hi, I'm trying to synchronize user accounts from LDAP to Samba 4 AD (using LSC) but it seems that password update through ldap is not allowed. I failed to find details about it, but can someone confirm that unicodePwd cannot be read / wrote trough a LDAPS connection ? Is there any workaround ? Regards. -- Sébastien BEAUDLOT Université d'Avignon et des Pays de Vaucluse - France

On Fri, 28 Sep 2018 11:49:47 +0200 Denis Cardon via samba <samba at lists.samba.org> wrote: > Hi Sébastien, > > >> I'm trying to synchronize user accounts from LDAP to Samba 4 AD > >> (using LSC) but it seems that password update through ldap is not > >> allowed. > >> > >> I failed to find details about it, but can someone confirm that

On 03/03/15 11:11, Jean-Fran?ois Morcillo wrote: > Hello, > > I have a small test network with a Win2k8R2 DC. > > I've added a samba4 as second DC in this network. > The join seems to run smoothly. > > But, after the join, this command: ldapsearch -LLL -x -H > ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b > "dc=test,dc=dom"

On Mon, 28 Oct 2024 13:37:27 +0100 William David Edwards <wedwards at cyberfusion.nl> wrote: > Rowland Penny via samba schreef op 2024-10-28 12:50: > > On Mon, 28 Oct 2024 12:17:02 +0100 > > William David Edwards via samba <samba at lists.samba.org> wrote: > > > >> I think I might've found a solution while debugging. > >> > >> To

Rowland Penny via samba schreef op 2024-10-28 12:50: > On Mon, 28 Oct 2024 12:17:02 +0100 > William David Edwards via samba <samba at lists.samba.org> wrote: > >> I think I might've found a solution while debugging. >> >> To understand what I'm doing wrong with `unicodePwd`, I'm trying to >> get the LDAP request that LAM does, and compare it to

Hi, Meanwhile we have discovered this bug report: https://bugzilla.samba.org/show_bug.cgi?id=10635 where Andrew is asking to test again with modern versions as a first step towards a solution. So I will start upgrading our DCs to latest in de coming period, to see if that helps anything. Strange also that the reporter of bug 10635 is seeing all kinds of error messages logged in azure, and

Hi all I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50))

Hi everyone, hi Metze, looking through the mailing list, it seems that there hasn't been much talk about the interesting features offered by syncpassword / getpassword that came out with 4.5.0. I was hoping to use this feature to pipe a ssha1 and HA1 hashes into an external ldap. Looking at the command line doc and then at the source code, it gets a bit more clear to me and I wanted to

Hi, I'm tying to set user's LDAP passwords using LDAP. `samba-tool user setpassword` does so by setting the write-only `unicodePwd` attribute, but turning it into binary and Base64-encoding it first: ``` if not isinstance(password, str): pw = password.decode('utf-8') else: pw = password pw = ('"' + pw + '"').encode('utf-16-le')