Hi,
I would use ldapsearch to test, and not the samba tool ldbsearch. My
guess is that ldapsearch gives the same "stronger auth required".
Perhaps try using ssl/TLS?
A tip: there is a good repo for latest samba's on debian:
http://apt.van-belle.nl/
Good luck,
MJ
On 7/28/20 9:26 AM, Lothar Schilling wrote:
Hi everybody,
I am completely new to this group - and to LAM as well. Trying to get
rid of our Windows SBS domain controller I am building a new Samba 4
server dedicated only to domain controlling, Debian 10.4, Samba 4.9.5.
I'm doing this from scratch, following the textbooks. I've also setup
LAM as graphical interface for administration.
But once I try logging into the server's profile via that LAM interface
as Administrator, I get this: "LDAP error, server says: (8) Strong(er)
authentication required".
(1) "ldbsearch -H ldap://ldap.[my].[domain] "cn=Administrator" -k yes":
is working with the same password I would use in LAM
(2) Server profile settings in LAM
- TLS is deactivated
- Login: Fixed list, cn=Administrator,cn=users,dc=[my],dc=[domain]
(3) ldap.conf
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
BASE dc=[my],dc=[domain]
URI ldap://ldap.[my].[domain] ldap://ldap-master.[my].[domain]:666
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
# TLS certificates (needed for GnuTLS)
#TLS_CACERT /etc/ssl/certs/ca-certificates.crt
What am I doing wrong?
Help appreciated, thank you!
Lothar Schilling
_______________________________________________
Lam-public mailing list
Lam-public@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lam-public
_______________________________________________
Lam-public mailing list
Lam-public@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lam-public
