similar to: samba's ldap

On Sunday, November 08, 2020 12:00 AM MST, Andrew Bartlett <abartlet at samba.org> wrote: > On Sun, 2020-11-08 at 06:45 +0000, Dan Egli via samba wrote: > > Since samba doesn't use openldap for AD DC mode, is it possible to directly read from/write to samba's LDAP from 3rd party programs? I want to ensure that I can keep user information consistent across multiple

Hey all. I started asking about this about a week ago, then got so sick I could hardly get out of bed. Now that I' m basically recovered(and no, it wasn't Covid, thank goodness), I want to pick up where left off. I'm about to provision the samba domain for my test setup. As long as that works, the next step is to ensure that information in Samba's LDAP database is properly

25.11.2015 10:21, Andrew Bartlett пишет: > On Mon, 2015-11-23 at 16:50 +0300, Yuriy Tabolin wrote: >> Hi all. >> I have samba 4.2.3 on freebsd 10.1 server. There are three DC and >> about >> 350 PC on domain. DCs have 3 CPU and 3GB RAM. Some servers with >> services >> like apache, exim, dovecot, etc use samba4 ldap (port 389) for user >>

Hi, I have setup samba 3.6.6 witch openldap (rfc2307bis schema). My problem is that samba do not recognise groups members from member attribure. when I setup members into memberuid atribute all works corect. how can I instruct samba to use member atribute? -- Alexandr Seidl

Hello people, i'm brasilian. I'm sorry for the erros... ok?! :-) Let's go! My company uses openldap-2.1.21. What is the version samba compatible with openldap-2.1.21?! I'm trying install samba-3.0.11, but it requires openldap-2.2.23. I don't want install the release openldap-2.2.23 for it. Thank you.

Hi i try to specify a sizelimit (as ldap client) when requesting an LDAP search on samba AD DC but samba ldap server does not return LDAP_SIZELIMIT_EXCEEDED 0x04 error code as openldap do. does anyone know if samba ldap server supports search size limit specified by the client? Thank you

Hi all. I have samba 4.2.3 on freebsd 10.1 server. There are three DC and about 350 PC on domain. DCs have 3 CPU and 3GB RAM. Some servers with services like apache, exim, dovecot, etc use samba4 ldap (port 389) for user authentication. Some times ago after adding some services to use ldap I found, that samba4 cannot serve all ldap requests. Every 10-30 minutes I see in DCs logs: dc1 kernel:

Good Day All first of all thank you for this mailing list, it's really great, as great is Samba :D I have a question regarding Samba4 and the possibility to delegate authentication to an external LDAP server using Cyrus SASL. Basically I have already successfully implemented an authentication delegation from an OpenLdap server (on CentOs) to another LDAP server (on AIX) via cyrus SASL.

Hi all! I've been working with openldap for many many years and I have found very usefull to turn debuging all the way on with loglevel -1 in slapd.conf to be able to inspect in the log the queries being sent to the server. I am now using samba 4.10.8 as a DC and a general purpose LDAP server and I havent found how to debug the queries that the server receives to try and figure out what might

Hi list, I am wondering if there is a theoretical maximum for an Active Directory forest, according to Samba or MS? My concern comes from this. We are piloting AD with Samba 4 at a couple of our schools. My thought was to eventually get the top-level forest hosted at our central office, then setup each school as a "site" with its own AD DC at the site, configured to use each

Hi, I have been using Samba3 (and 2) for years, with an openLDAP backend for authentication. This is working fine, my directory includes a number of local settings for my specific needs. Now I would like to move to Samba4. I understand that Samba4 comes with its own DNS and LDAP servers. By provisioning Samba4 with --dns-backend=NONE and including the necessary to my existing DNS zone, is

Hi, I found some discussion here in 2010 about allowing/disallowing anonymous ldap access in samba4, however, nothing much recent comes up. I see that my samba4 does not allow anonymous access. Is there a way to enable it in samba4, like the way we had it with samba3/openldap? (we restricted access to sensitive info, but allowed anon search access to many user details like mail addresses,

On Wed, 21 Feb 2018 15:26:26 +0300 Vladimir Skubriev <skubriev at cvisionlab.com> wrote: > You a sure. I have already configured openldap, which is workd as > expected with old smb server. > > net getlocalsid & net getdomainsid returns the same SID. > LDAP sambaDomainName=EXAMPLE has the same SID in attribute sambaSID. > > Also DIT has windows groups like Domain

Hi! Is there a way to use an external LDAP server with Samba4 (eg. openldap) to authenticate users or alternatively to sync Samba's internal LDAP with other services like Radius? My goal is to enter all user credentials to either an external or Samba4 internal LDAP and make Samba, Radius, etc. use it for authentication / as a master when synchronizing user data. I already tried: 1.

On 10/29/2020 6:13 PM, Jeremy Allison wrote: > > Dan, Rowland spends an inordinate amount of time on > our lists helping out people with Samba configurations > of all kinds. The least people can do is to be polite > when asking for help. > I was under the impression that I was being sarcastic/funny. If I didn't come across that way, then I am sorry. I certainly didn't

Hello, Has anyone got netgroups working with Samba 3.0.14a where the netgroups are stored in the LDAP directory? I'm using Solaris 9 and SUN's directory server v5.2. What I'm seeing is that samba goes through the motions of looking up a host in a netgroup, but no query is seen by the LDAP server or on the network and the host is never found in the netgroup. Any help would be

Hi Justin, Thank you for your answer, I had found this utility during my searches, and will probably try it. As you say, reversible + plaintext is far for optimal from a security point of view. Also, I would like to integrate the solution in a "packaged" distribution like for example Zentyal or UCS. But I'm happy to learn that this solution is viable, I wouldn't lose my time

Thank you, those links were indeed helpful. It appears to me that while JumpCloud.com touts it's Samba compatibility (including "Samba Schema support"), their's is an imperfect implementation. Because they do not leverage the Samba group objectclass they are hampering Samba's ability. The method they've used to implement groups does not allow those groups to be used by

On 19/11/24 02:29, Heinz H?lzl via samba wrote: > hi, > > I have to activate the thread again ... > > we keep having preformance problems on the DC, especially on Monday > morning when the PCs are switched on and the users log in. > > some ldap-searches take a very long time, sometimes even over 15 > seconds > > e.g: > > ldapsrv_SearchRequest: LDAP

Hi all, First, sorry for posting this mail in a Samba-list, I first posted it to ldap@umich.edu which should be a general LDAP discussion list and also to OpenLDAP mailinglist. So far I didn't got a single reply in any of those lists but that's probably because this issue is much more AD-related than plain LDAP. And we know that beside MS the Samba developers know most about AD :-) So