similar to: Set a temporary password on user accounts (samba4)

On 05/09/2019 08:37, Daniel Berteaud via samba wrote: > Hi there. > > I'm looking for a way to temporarily change password for some users. > > I have a samba4 install in DC mode (running samba 4.8.3), everything is > working fine. I'm now migrating an email system which will use samba4 > auth (Zimbra, but doesn't matter here). > > I'd like to set a temp

Le 05/09/2019 ? 12:38, Rowland penny via samba a ?crit?: >> >> Can I backup the whole user entry, and restore it later ? Or just a set >> of attributes ? Only supplementalCredentials and unicodePwd are enough ? > > No, you cannot backup and restore the entire AD object, a lot of the > attributes are only writeable by the system. Even with ldbmodify ? > > You

Citando Andrew Bartlett <abartlet at samba.org>: > On Fri, 2017-04-07 at 20:32 +0000, Leonardo Bruno Lopes via samba > wrote: >> Hi everyone! >> >> I have a LDAP with all my users' accounts, each one with the >> sambaNTPassaword correctly defined. I also have a freshly installed >> Samba >> 4.2 running on a Debian 8.7 box. >> >> I

On Sun, 2017-04-09 at 16:12 +0100, Rowland Penny via samba wrote: > On Sun, 09 Apr 2017 14:47:59 +0000 > Leonardo Bruno Lopes via samba <samba at lists.samba.org> wrote: > > > > > Is there any chance that this could mean I only need to wipe   > > 'supplementalCredentials' attribute -- I saw that it is possible > > --   > > after set the

Hi Sébastien, >> I'm trying to synchronize user accounts from LDAP to Samba 4 AD >> (using LSC) but it seems that password update through ldap is not >> allowed. >> >> I failed to find details about it, but can someone confirm that >> unicodePwd cannot be read / wrote trough a LDAPS connection ? Is >> there any workaround ? The unicodePwd attribute

Le 03/03/2015 12:56, Rowland Penny a ?crit : > On 03/03/15 11:11, Jean-Fran?ois Morcillo wrote: >> Hello, >> >> I have a small test network with a Win2k8R2 DC. >> >> I've added a samba4 as second DC in this network. >> The join seems to run smoothly. >> >> But, after the join, this command: ldapsearch -LLL -x -H >>

Hello, I have a small test network with a Win2k8R2 DC. I've added a samba4 as second DC in this network. The join seems to run smoothly. But, after the join, this command: ldapsearch -LLL -x -H ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b "dc=test,dc=dom" "(SAMAccountName=Administrateur)" returns some strange results: ? some attributes like unicodePwd

On 05/09/2019 11:43, Daniel Berteaud via samba wrote: > Le 05/09/2019 ? 12:38, Rowland penny via samba a ?crit?: >>> Can I backup the whole user entry, and restore it later ? Or just a set >>> of attributes ? Only supplementalCredentials and unicodePwd are enough ? >> No, you cannot backup and restore the entire AD object, a lot of the >> attributes are only

Hi, We are (again) looking at syncing our samba AD to the azure AD cloud. I installed a win2016 server domain member server and set it up for syncing, including password hashes, so users can login azure/O365 using their on-prem passwords. We're using microsoft's latest tech: the new "Azure AD Connect cloud provisioning". We made sure to check "password hash sync".

Hi everyone! I have a LDAP with all my users' accounts, each one with the sambaNTPassaword correctly defined. I also have a freshly installed Samba 4.2 running on a Debian 8.7 box. I followed the instructions described by Steve ThompsSmabon here <https://lists.samba.org/archive/samba/2014-June/182196.html> and I am able to create a Samba 4 domain account ('samba-tool user add ...

Hi, I'm trying to synchronize user accounts from LDAP to Samba 4 AD (using LSC) but it seems that password update through ldap is not allowed. I failed to find details about it, but can someone confirm that unicodePwd cannot be read / wrote trough a LDAPS connection ? Is there any workaround ? Regards. -- Sébastien BEAUDLOT Université d'Avignon et des Pays de Vaucluse - France

Hi, i sync the passwords from samba to other backends using "samba-tool user syncpasswords" On my operative system (samba 4.10 and python2) all works fine. I upgraded my test-DC to samba 4.11 and python3 and now the samba-tool user syncpasswords --daemon crashes. Fri Oct 4 12:29:47 2019: pid[983]: Attached to logfile[/usr/local/samba/var/log.syncpw] Fri Oct 4 12:29:47 2019:

On Fri, 28 Sep 2018 11:49:47 +0200 Denis Cardon via samba <samba at lists.samba.org> wrote: > Hi Sébastien, > > >> I'm trying to synchronize user accounts from LDAP to Samba 4 AD > >> (using LSC) but it seems that password update through ldap is not > >> allowed. > >> > >> I failed to find details about it, but can someone confirm that

On 03/03/15 11:11, Jean-Fran?ois Morcillo wrote: > Hello, > > I have a small test network with a Win2k8R2 DC. > > I've added a samba4 as second DC in this network. > The join seems to run smoothly. > > But, after the join, this command: ldapsearch -LLL -x -H > ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi -b > "dc=test,dc=dom"

Hi all I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50))

Hi, Meanwhile we have discovered this bug report: https://bugzilla.samba.org/show_bug.cgi?id=10635 where Andrew is asking to test again with modern versions as a first step towards a solution. So I will start upgrading our DCs to latest in de coming period, to see if that helps anything. Strange also that the reporter of bug 10635 is seeing all kinds of error messages logged in azure, and

Hi Thanks all for your responses. The users can now change their own password adding and removing the unicodePwd attribute, using the correct method to generate the password value. Now, I have a problem, because the users who have the option to force to change the password in the next login checked, can't bind to the LDAP server in order to change their password. Is there any way to do this,

hello list, What kind of hashing/encryption samba4 ADDC uses for user passwords? base64? Thanks! -- Elias Pereira

Hi everyone, hi Metze, looking through the mailing list, it seems that there hasn't been much talk about the interesting features offered by syncpassword / getpassword that came out with 4.5.0. I was hoping to use this feature to pipe a ssha1 and HA1 hashes into an external ldap. Looking at the command line doc and then at the source code, it gets a bit more clear to me and I wanted to

hi trying to create a user with ldap from a remote server. The user is created successfully. I'm failing setting the initial password. Setting the unicodePwd with kerberos administrator credentials with ldbmodify and the ldif below results in "00002035: setup_io: it's not allowed to set the NT hash password directly". searching the web I've found s4 mailinglist entries