similar to: Samba4: programmatic account creation via LDAP (unicodePwd)

I was pointed to: http://web.vcs.u52.k12.me.us/linux/smbldap/ As an effective script to get samba/ldap configured for a PDC. It is written for Fedora 3 core or the K12LTSP distro. of course I discovered this after installing the Centos distro. Now it is decision time: stay with Centos and get this working or move the the K12 distro. This setup is for the small business network in my basement

I've implemented a patch to openssh which allows the PAM auth layer to detect if the PAM stack has changed the user name and then adjusts its internal data structures accordingly. (imagine a PAM stack that uses individual credentials to authenticate, but assigns the user to a role account). First, is the openssh community interested in this patch? Second, if there is interest in the patch,

Rowland Penny via samba schreef op 2024-10-28 13:55: > On Mon, 28 Oct 2024 13:37:27 +0100 > William David Edwards <wedwards at cyberfusion.nl> wrote: > >> Rowland Penny via samba schreef op 2024-10-28 12:50: >> > On Mon, 28 Oct 2024 12:17:02 +0100 >> > William David Edwards via samba <samba at lists.samba.org> wrote: >> > >> >> I

Hi, I'm tying to set user's LDAP passwords using LDAP. `samba-tool user setpassword` does so by setting the write-only `unicodePwd` attribute, but turning it into binary and Base64-encoding it first: ``` if not isinstance(password, str): pw = password.decode('utf-8') else: pw = password pw = ('"' + pw + '"').encode('utf-16-le')

Hello, I'm troubleshooting an old backup script that exports and imports users from a Samba database using `samba-tool`. It's implemented so that passwords are exported using "samba-tool user getpassword {username} --attributes=unicodePwd". On the import side, an LDIF file is created in the following format: ``` dn: CN={username},OU=Users,DC=example,DC=com changetype: modify

On Sun, 27 Oct 2024 13:58:56 +0100 William David Edwards via samba <samba at lists.samba.org> wrote: > Hi, > > I'm tying to set user's LDAP passwords using LDAP. > > `samba-tool user setpassword` does so by setting the write-only > `unicodePwd` attribute, but turning it into binary and > Base64-encoding it first: > > ``` > if not

On 05/01/2023 10:13, Edward Graham via samba wrote: > Hi, > > we sync our password from other system by directly setting unicodePwd in samba database file. We would like to drop the insecure hash stored in other system and replace it with something newer and more robust. > > Documentation on page

On Mon, 28 Oct 2024 13:37:27 +0100 William David Edwards <wedwards at cyberfusion.nl> wrote: > Rowland Penny via samba schreef op 2024-10-28 12:50: > > On Mon, 28 Oct 2024 12:17:02 +0100 > > William David Edwards via samba <samba at lists.samba.org> wrote: > > > >> I think I might've found a solution while debugging. > >> > >> To

On Thu, 28 Mar 2019 21:05:57 +0100 jean-yves boisiaud via samba <samba at lists.samba.org> wrote: > hello, > > I use Samba 4.9.5 on Linux Debian 9. > > I want to extract users' passwords. A lot of passwords are ok, some > are not. > > Example with a password returning an error : > # ldbsearch -H /var/lib/samba/private/sam.ldb '(primaryGroupID=513)'

Hi, we sync our password from other system by directly setting unicodePwd in samba database file. We would like to drop the insecure hash stored in other system and replace it with something newer and more robust. Documentation on page https://samba.tranquil.it/doc/en/samba_fundamentals/about_password_hash.html#propagating-a-password-change-from-samba-ad-to-an-openldap says "It is now

It works for us without problems. We would like to improve security though, so I'm looking for information whether it's possible to use different hash in samba. ________________________________ Od: samba <samba-bounces at lists.samba.org> za u?ivatele Rowland Penny via samba <samba at lists.samba.org> Odesl?no: ?tvrtek 5. ledna 2023 12:15 Komu: samba at lists.samba.org

No, I would (probably) not, but I consider samba better product and with it's open nature more versatile. Anyway, thank you for clarification. ________________________________ Od: samba <samba-bounces at lists.samba.org> za u?ivatele Rowland Penny via samba <samba at lists.samba.org> Odesl?no: ?tvrtek 5. ledna 2023 14:12 Komu: samba at lists.samba.org <samba at

On Mon, 28 Oct 2024 15:01:35 +0100 William David Edwards <wedwards at cyberfusion.nl> wrote: > > As mentioned before, I'm able to log in with a password set using > `userPassword` when `fUserPwdSupport` is enabled. > I have only been using Samba 4 for the last 12 years and I have never used the 'userPassword' attribute, I have only used the 'unicodePwd'

> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: > > ?On Sun, 27 Oct 2024 13:58:56 +0100 > William David Edwards via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> I'm tying to set user's LDAP passwords using LDAP. >> >> `samba-tool user setpassword` does so by

Rowland Penny via samba schreef op 2024-10-28 15:32: > On Mon, 28 Oct 2024 15:01:35 +0100 > William David Edwards <wedwards at cyberfusion.nl> wrote: >> >> As mentioned before, I'm able to log in with a password set using >> `userPassword` when `fUserPwdSupport` is enabled. >> > > I have only been using Samba 4 for the last 12 years and I have never

Rowland Penny via samba schreef op 2024-10-28 12:50: > On Mon, 28 Oct 2024 12:17:02 +0100 > William David Edwards via samba <samba at lists.samba.org> wrote: > >> I think I might've found a solution while debugging. >> >> To understand what I'm doing wrong with `unicodePwd`, I'm trying to >> get the LDAP request that LAM does, and compare it to

hello, I use Samba 4.9.5 on Linux Debian 9. I want to extract users' passwords. A lot of passwords are ok, some are not. Example with a password returning an error : # ldbsearch -H /var/lib/samba/private/sam.ldb '(primaryGroupID=513)' userPrincipalName unicodePwd .... # record 494 dn: CN=XXX,CN=Users,DC=YYY,DC=ZZZ,DC=fr unicodePwd:: wXQvJaSkn0gvg1POsY9Icw== uidNumber: 5110

On 05/01/2023 12:18, Edward Graham via samba wrote: > It works for us without problems. We would like to improve security though, so I'm looking for information whether it's possible to use different hash in samba. No, would you ask this question about Microsoft AD ? Rowland

Op 27-10-2024 om 15:31 schreef Rowland Penny via samba: > On Sun, 27 Oct 2024 15:08:14 +0100 > William Edwards <wedwards at cyberfusion.nl> wrote: > >>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba >>> <samba at lists.samba.org> het volgende geschreven: >>> >>> ?On Sun, 27 Oct 2024 13:58:56 +0100 >>> William David Edwards

On Sun, 27 Oct 2024 19:55:24 +0100 William David Edwards <wedwards at cyberfusion.nl> wrote: > Rowland Penny via samba schreef op 2024-10-27 15:31: > > On Sun, 27 Oct 2024 15:08:14 +0100 > > William Edwards <wedwards at cyberfusion.nl> wrote: > > > >> > >> > Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba > >> > <samba