similar to: LockoutTime will not reset

On Fri, 24 Jan 2025 13:27:49 -0600 Ham via samba <samba at lists.samba.org> wrote: > Yesterday one of my users was prompted to change his password (which > he did).? Today he tried to login and his account was locked.? I > first used the Active Directory Users and Computers tool on Windows > to unlock the account.? This appeared to accept the setting but did > not work and

On 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > I executed the command in two scenarios. > > Account 'user1' unlocked: > > root at gteste2:~# > root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b > "dc=testead,dc=gsurfnet,dc=com" -s sub > '(&(objectclass=user)(samaccountname=user1))' lockoutTime > # record 1 > dn:

Mandi! Rowland penny via samba In chel di` si favelave... I came back on this, because still some glitches happen. Yesterday I'm locked out. 'pdbedit -vL gaio' say me that account IS locked. But: > yes, Provided you use the right attribute to search on ;-) > Something like this will give you if/when the account was locked out: > ldbsearch -H

On 01/08/16 18:27, Rowland penny wrote: > On 01/08/16 18:04, Anderson Hoffmann do Carmo wrote: >> Hi Rowland. >> >> The command (samba-tool user enable 'user') is used to enable a user >> account that has been disabled in AD, but it is not functional to >> unlock a >> user account that has been locked by wrong password. >> >> >>

On Fri, 2019-12-06 at 12:22 +0000, Rowland penny via samba wrote: > On 06/12/2019 11:47, Marco Gaiarin via samba wrote: > > Mandi! Rowland penny via samba > > In chel di` si favelave... > > > > > You cannot create an ldap filter using the above, you would have > > > to filter > > > the result of the ldap search. > > > > I can

Mandi! Rowland penny via samba In chel di` si favelave... > As I said, if 'lockoutTime' isn't set or it is set to '0', then the user > isn't locked out, anything else and it is, but I do not believe that you can > set it to anything else but '0' manually, only the system can do this. > This is where 'lockoutDuration' comes in, the account

On 05/12/2019 09:15, Andrew Bartlett via samba wrote: > On Thu, 2019-12-05 at 09:44 +0100, Marco Gaiarin via samba wrote: >> Mandi! Rowland penny via samba >> In chel di` si favelave... >> >>> As I said, if 'lockoutTime' isn't set or it is set to '0', then the user >>> isn't locked out, anything else and it is, but I do not believe

Mandi! Rowland penny via samba In chel di` si favelave... > I think you are over thinking this ;-) I'm simply applying the policy... ;-) https://docs.microsoft.com/it-it/windows/win32/adschema/a-lockouttime say at the bottom: This attribute value is only reset when the account is logged onto successfully. This means that this value may be non zero, yet the account is not locked

I will test this! Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | 2016-08-01 16:39 GMT-03:00 Rowland penny <rpenny at samba.org>: > On 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > >> I executed the command in two scenarios. >> >> Account 'user1' unlocked: >> >> root at

Well I upgraded from 4.4.6 to 4.5.0 and discovered that one of my user accounts is completely borked. What is very strange is that everything in Samba looks okay. Here is the first problem symptom. The data is from the DC. total 80 drwxr-xr-x. 7 root root 4096 Oct 9 01:15 . drwx------+ 77 SAMDOM\prg-11868bg SAMDOM\domain users 20480 Oct 9 00:55

Le 20/07/2020 ? 10:15, Abby Spurdle a ?crit?: > It's possible to run R (or a c parent process) as a background process > via a named pipe, and then write script files to the named pipe. > However, the details depend on what shell you use. > > The last time I tried (which was a long time ago), I created a small c > program to run R, read from the named pipe from within c, then

Mandi! Rowland penny via samba In chel di` si favelave... > If you go here: http://www.selfadsi.org/extended-ad/user-unlock.htm > It says: So, seems to me that 'Lockout-Duration' is an 'unused option'... -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via

Dear James, Thanks for the input. Even increasing from 5 to 10, the amount of times to miss the password and lock the account (after changing, I wheeled a gpupdate / force), if you miss 3 times the account is locked. I changed smb.conf log level to 9. I tried to unlock the account using the samba-tool command line, but without success, because I can only unlock using the RSAT. I get these

On 04/12/2019 11:21, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > >> I think you are over thinking this ;-) > I'm simply applying the policy... ;-) > > https://docs.microsoft.com/it-it/windows/win32/adschema/a-lockouttime > > say at the bottom: > > This attribute value is only reset when the account is

Hi team, I'm running samba 3.0.4 on AIX 4.3.3 and HP-UX 11.00 without any problems except the following : On HP-UX 11.00, when I try to join a machine to a domain, it first insert all POSIX entries in the LDAP backend but rejects the junction. The machine account could not be found. Waiting for a while and relaunching the join command, the junction just works fine. Having exactly the same

Hi, Does anybody know of a way to free up some memory ? the command "rm" doesn't seem to do what I want... I thought that 'rm' function would free the memory used for the deleted object, but it doesn't seem to be the case, as I don't observe any change in the allocated memory for R in the windows task manager. I ask this question because sometimes I have

On 03/12/2019 14:40, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > > I came back on this, because still some glitches happen. > > > Yesterday I'm locked out. > > 'pdbedit -vL gaio' say me that account IS locked. But: > >> yes, Provided you use the right attribute to search on ;-) >> Something

I need to do some testing, but before to hit by head on a known wall, i ask here. My AD domain get used (via PAM/Winbind) to give access to some other dervice, most notably here dovecot. When password expire (or users change it) the MUA try the old password some times, then ask for a new password; users cleraly get scared, press randomly 'OK' or 'Cancel', but if they press 2-3

I have come across a few accounts (out of 300+) that seem to be locked that will not unlock. These accounts were migrated from S3. Can someone advise - what am I missing here? I've reset the password several times via RSAT, checking the "Unlock Account" checkbox, which has not helped. Resetting the user's password via smbpasswd gives me: pdb_try_account_unlock: Account dmscott

On 05/12/2019 10:36, Rowland penny via samba wrote: > On 05/12/2019 09:15, Andrew Bartlett via samba wrote: >> On Thu, 2019-12-05 at 09:44 +0100, Marco Gaiarin via samba wrote: >>> Mandi! Rowland penny via samba >>> ?? In chel di` si favelave... >>> >>>> As I said, if 'lockoutTime' isn't set or it is set to '0', then the