similar to: Old Password Still Usable After Password Changed

On Tue, 15 Oct 2024 16:02:19 +0300 Adam Abramson via samba <samba at lists.samba.org> wrote: > Hi, I would like to know when we change the user's password, his old > password can still be used within an hour as it is written here > https://learn.microsoft.com/ru-ru/troubleshoot/windows-server/windows-security/new-setting-modifies-ntlm-network-authentication > and this

this is an erroneous link, it was hanging on one of the sites, and I just copied it without even checking, I'm sorry, therefore, I would like to continue the dialogue. On Tue, Oct 15, 2024 at 4:10?PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 15 Oct 2024 16:02:19 +0300 > Adam Abramson via samba <samba at lists.samba.org> wrote: > > > Hi,

I was running samba 4.21 as a domain controller and now I see this situation , I have empty outbound neighbors, but if you look from the windows side, then this is the difference between windows controllers and samba, for some reason the repsTo attribute is not filled, for example, the configuration context, although windows controllers have both attributes fully filled, although they are the same

OK, I'm sending a screenshot specifically from win2019-2 . Looking at all the connections, they are of course displayed https://ibb.co/Qbz3PZz On Fri, Oct 11, 2024 at 5:36?PM James Atwell via samba < samba at lists.samba.org> wrote: > Thanks for the images, however I need to see your NTDS settings for server > WIN2019-2. If you open this, you should see automatically generated

Hi, James, yes, I set up sites through the sites and services tool. It's not that it's fully connected replication, but that the RepsTo attribute, under equal conditions with windows, is not filled on the samba side, which in turn entails that the outbound neighbors are not displayed on the samba side . But let me clarify that I even made each server (there is only one in each site) a

Adam, When you have one DC in a site, the sole DC automatically considers itself a bridgehead server to other DC?s once the site links have been setup. Should be no need to manually configure this. I see you have NTDS connections for WIN2019-2 and Samba on each DC. In theory you shouldn?t be having an issue with no outbound neighbors. What I would do is delete the automatically generated

Thanks for the images, however I need to see your NTDS settings for server WIN2019-2. If you open this, you should see automatically generated connections to servers in Default-First-Site-Name and Test-Samba sites. This assumes you have servers in Default-First-Site-Name. Otherwise you should just see the Samba server. -James From: Adam Abramson <abramsona30 at gmail.com> Sent:

in my case, there is exactly one controller in the site and therefore the attribute is not filled in. in your case, it seems to me that your repsFrom repsTo attributes are filled because there are 2 controllers in the site , but on the windows side, even when 1 controller is filled, both attributes are filled On Fri, Oct 11, 2024 at 4:44?PM James Atwell via samba < samba at lists.samba.org>

thanks for the video provided, I watched it, I didn't understand something very well, but still, as I understand it, in order for the sites to start communicating with each other, a linked site link is needed, and also if there is only one dc on the site, we tell him to act as breadgehead, which I did in the screenshots below, but this did not affect the creation of ntdsconnections, but as I

yes, this attribute was filled in for a while and then became empty again, but this is only when we do forced replication On Tue, Oct 15, 2024 at 3:02?PM James Atwell via samba < samba at lists.samba.org> wrote: > Adam, > > > > Using Windows tools for Samba administration can be a mixed bag at times. > My experience has been most features work just fine, but other times

here's what else I noticed, I'm performing replication forcibly through windows and I get this context in outbound, but after a while it will disappear again, also if you do reps to server from windows, there will also be a problem in the dialog box, I attached an error screen, it's a little alarming and it seems all the same Are there any problems https://ibb.co/VYWbvgJ

Hi Adam, I reviewed your images but those don?t appear to be from the Microsoft tool Active Directory Sites and Services. Have you used this tool specifically to configure your sites? Can you attach images from this tool on how you configured your sites? Specifically, the NTDS settings and subnets? -James From: Adam Abramson <abramsona30 at gmail.com> Sent: Friday, October 11,

Adam, Using Windows tools for Samba administration can be a mixed bag at times. My experience has been most features work just fine, but other times odd error messages seem to pop up for no reason. Could be what you?re experiencing when trying to synchronize naming context. One of your images shows the win2019-1 server as an outbound neighbor when previously there were none. I see you

Adam, While you?re confirming your sites and services setup. See the link for how I have my sites setup. I have sanitized some if it and it?s from a Samba only environment but should still be setup similarly for Samba or mixed environments. https://ibb.co/hZPJkxw I have 2 DC?s per site. The Site ?D? and Server ?D5? has outbound neighbors of ?D4? and S6? of site ?S?. Site ?S? if I

I forcibly added --add-ref, but it did not give results, outbound still does not appear, then I decided to do another trick, I went into the connection that exists between samba and win2019-2 and changed the replication option, set it on notification, this is the OVERRIDE_NOTIFY_DEFAULT flag, but this also did not give any results On Mon, Oct 14, 2024 at 5:48?PM James Atwell via samba < samba

do I understand correctly that samba cannot process the attribute and rolls back the changes, maybe Rowland will tell you On Tue, Oct 15, 2024 at 3:11?PM Adam Abramson <abramsona30 at gmail.com> wrote: > yes, this attribute was filled in for a while and then became empty again, > but this is only when we do forced replication > > On Tue, Oct 15, 2024 at 3:02?PM James Atwell via

Adam, The only other option I can think of is to force replication and creation of the attribute with samba-tool drs replicate. You can view this old thread https://lists.samba.org/archive/samba/2016-September/203164.html back when I had similar conversations on a Samba only environment. I will point out I was not aware that Windows servers and repadmin don?t display outbound neighbors like

yes, that's right, the display of outbound neighbors did not happen On Mon, Oct 14, 2024 at 3:48?PM James Atwell via samba < samba at lists.samba.org> wrote: > Does Samba still not show the win server as an outbound neighbor? > > > > > > From: Adam Abramson <abramsona30 at gmail.com> > Sent: Monday, October 14, 2024 8:44 AM > To: james.atwell365 at

Thanks a lot Rowland I hope we will fix this issue soon On Fri, Oct 11, 2024 at 1:14?PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 11 Oct 2024 13:06:40 +0300 > Adam Abramson <abramsona30 at gmail.com> wrote: > > > yes, above I have attached screenshots of testing from the windows > > side, which show the difference between the behavior

Hello all, as I promised some days ago here is NTLM (aka SPA, aka MSN) authentication support patchset. It contains common code in src/lib-ntlm directory, Samba compatible NTLM password scheme and authentication mechanism itself. All patches are against 1.0-test30. Please take a look. Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke at donpac.ru | PGP key: