similar to: Account locked and delayed user data propagation...

Mandi! Rowland penny via samba In chel di` si favelave... I came back on this, because still some glitches happen. Yesterday I'm locked out. 'pdbedit -vL gaio' say me that account IS locked. But: > yes, Provided you use the right attribute to search on ;-) > Something like this will give you if/when the account was locked out: > ldbsearch -H

On 15/11/2019 16:23, Marco Gaiarin via samba wrote: > I need to do some testing, but before to hit by head on a known wall, i > ask here. > > > My AD domain get used (via PAM/Winbind) to give access to some other > dervice, most notably here dovecot. > When password expire (or users change it) the MUA try the old password > some times, then ask for a new password; users

Mandi! Rowland penny via samba In chel di` si favelave... > If you go here: http://www.selfadsi.org/extended-ad/user-unlock.htm > It says: So, seems to me that 'Lockout-Duration' is an 'unused option'... -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via

Mandi! Rowland penny via samba In chel di` si favelave... > As I said, if 'lockoutTime' isn't set or it is set to '0', then the user > isn't locked out, anything else and it is, but I do not believe that you can > set it to anything else but '0' manually, only the system can do this. > This is where 'lockoutDuration' comes in, the account

Mandi! Rowland penny via samba In chel di` si favelave... > yes, Provided you use the right attribute to search on ;-) Ah! ;-) Just i'm here, i test three condition in account flags, eg: UAC=$(ldbsearch ${LDB_OPTS} -b "${BASEDN}" "(&(objectClass=user)(sAMAccountName=$1))" userAccountControl | grep "^userAccountControl: " | cut -d ' ' -f 2-)

On Fri, 2019-12-06 at 12:22 +0000, Rowland penny via samba wrote: > On 06/12/2019 11:47, Marco Gaiarin via samba wrote: > > Mandi! Rowland penny via samba > > In chel di` si favelave... > > > > > You cannot create an ldap filter using the above, you would have > > > to filter > > > the result of the ldap search. > > > > I can

Mandi! Rowland penny via samba In chel di` si favelave... > You cannot create an ldap filter using the above, you would have to filter > the result of the ldap search. I can confirm: root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b DC=ad,DC=fvg,DC=lnf,DC=it '(&(objectClass=user)(sAMAccountName=gaio))' msDS-User-Account-Control-Computed # record 1 dn:

On 03/12/2019 14:40, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > > I came back on this, because still some glitches happen. > > > Yesterday I'm locked out. > > 'pdbedit -vL gaio' say me that account IS locked. But: > >> yes, Provided you use the right attribute to search on ;-) >> Something

On 05/12/2019 09:15, Andrew Bartlett via samba wrote: > On Thu, 2019-12-05 at 09:44 +0100, Marco Gaiarin via samba wrote: >> Mandi! Rowland penny via samba >> In chel di` si favelave... >> >>> As I said, if 'lockoutTime' isn't set or it is set to '0', then the user >>> isn't locked out, anything else and it is, but I do not believe

Mandi! Rowland penny via samba In chel di` si favelave... > Do you mean apart from '$((${LOT} + ${LOD}))' should really be > '$((LOT+LOD))' ? Apart bashism, this seems not the point: root at vdcsv1:~# bash -vx /tmp/test LOT=1 + LOT=1 LOD=1 + LOD=1 TMPF=$((${LOT} + ${LOD})) + TMPF=2 echo $TMPF + echo 2 2 TMPF=$((LOT+LOD)) + TMPF=2 echo $TMPF + echo 2

On 04/12/2019 16:36, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > >> If you go here: http://www.selfadsi.org/extended-ad/user-unlock.htm >> It says: > So, seems to me that 'Lockout-Duration' is an 'unused option'... > From my understanding, it is supposed to work in the way you think it does, the

I've got a Samba 2.2.7a domain with an LDAP backend. It's been working for nearly 3 months now without much bother. By the way: Great work and thanks for all of the effort! I have been missing one minor thing from the setup since I moved away from NT 4: Password Expiration. In the past I have posted questions about this on the list and I've gotten two answers: "Wait for

Mandi! Rowland penny via samba In chel di` si favelave... > I think you are over thinking this ;-) I'm simply applying the policy... ;-) https://docs.microsoft.com/it-it/windows/win32/adschema/a-lockouttime say at the bottom: This attribute value is only reset when the account is logged onto successfully. This means that this value may be non zero, yet the account is not locked

On 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > I executed the command in two scenarios. > > Account 'user1' unlocked: > > root at gteste2:~# > root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b > "dc=testead,dc=gsurfnet,dc=com" -s sub > '(&(objectclass=user)(samaccountname=user1))' lockoutTime > # record 1 > dn:

On 01/08/16 18:27, Rowland penny wrote: > On 01/08/16 18:04, Anderson Hoffmann do Carmo wrote: >> Hi Rowland. >> >> The command (samba-tool user enable 'user') is used to enable a user >> account that has been disabled in AD, but it is not functional to >> unlock a >> user account that has been locked by wrong password. >> >> >>

Hi, Why you sp?cifie : smb passwd file = /etc/samba/smbpasswd pam password change = Yes If you use LDAP ? It's the interaction between LDAP and these parameter which cause the problem. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467

On 05/12/2019 10:36, Rowland penny via samba wrote: > On 05/12/2019 09:15, Andrew Bartlett via samba wrote: >> On Thu, 2019-12-05 at 09:44 +0100, Marco Gaiarin via samba wrote: >>> Mandi! Rowland penny via samba >>> ?? In chel di` si favelave... >>> >>>> As I said, if 'lockoutTime' isn't set or it is set to '0', then the

On 03/12/2019 16:51, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > >> Do you mean apart from '$((${LOT} + ${LOD}))' should really be >> '$((LOT+LOD))' ? > Apart bashism, this seems not the point: > > root at vdcsv1:~# bash -vx /tmp/test > LOT=1 > + LOT=1 > > LOD=1 > +

Hi All; I am looking for a good Outbound Dialer and to be practical with possibility to do modification on it, the outbound dialer should send the calls to the agent when the agent is logged in as long the agent is belong to the queue (or let us say the skill group of this campaign). Any one can guide me? If I can build this using the AMI, so I appreciate if anyone did it before me so I can use

Hi all, we have a problem with a reinvite sent by our SIP provider to change audio codec due to the recognition of a fax tone. After that the SIP call session has been established (INVITE and 200 OK) we have the following codec situation: UAC ASTERISK UAS | ASTERISK UAC PROVIDER g711 <----------------------> g711