[Samba] Samba/LDAP appliance recommendation
Hi all, What's a good Samba+LDAP appliance these days for a small business? Currently I used a stock Ubuntu server and did all Samda/LDAP configuration manually. I'm looking for something that can allow my regular staff to use as well. 1. I tried most of the popular NAS distros, like FreeNAS, NAS4Free, OpenmediaVault, etc. Most of these NAS don't have an LDAP server built-in 2. I tried Openfiler, ClearOS and Zentyal which do have LDAP server built-in but I haven't gotten them to import my existing Samba/LDAP data yet. WIP. 3. I just discovered Artica NAS Appliance and Univention UCS, will be testing them this week. Do you guys know anything about these two distros? Sometimes I wonder if I even need LDAP, I migrated to LDAP before only to make it a little easier (though not by much) to edit samba account data (e.g. SID). I guess I'd like to have centralized authentication as well (clients include Windows, Mac OSX and Linux, maybe OpenVPN as well). Is there a simpler mode of centralized login operation? Or is LDAP the only viable solution? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, Today one of my users was asked to changed her password @ login again. I already commented out defaultMaxPasswordAge in /etc/smbldap-tools/smbldap.conf and ran smbldap-populate Any other ideas would be appreciated. Thanks, - Jeff On Thu, Oct 20, 2011 at 5:28 PM, Jeffrey Chan wrote: > Thanks for your response Aaron. I actually checked LDAP too already along > with pdbedit. > For the domain record, "sambaMaxPwdAge" is shown to be -1 as it should. > For each user, "sambaPasswordCanChange" is 0, "sambaPasswordLastSet" is the > correct password last changed time in epoch. There's no > "sambaPasswordMustChange" for user records. > > - Jeff > > > > On Fri, Oct 14, 2011 at 8:30 PM, Aaron E. wrote: >> >> Sounds like you've checked mostly all except your ldap backend... >> Check your LDAP DB for... (they will be in nix timestamp) >> >> sambaPasswordCanChange >> sambaPasswordLastSet >> sambaPasswordMustChange >> >> setup smbldap-tools package >> >> On 10/13/2011 11:00 PM, Jeffrey Chan wrote: >>> >>> I'm using OpenLDAP as backend. >>> >>> >>> On Wed, Oct 12, 2011 at 11:16 PM, Aaron E. wrote: >>> >>>> Just cuirous are you using pam or ldap backend? >>>> >>>> >>>> On 10/12/2011 09:22 AM, Marco Ciampa wrote: >>>> >>>>> On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: >>>>> >>>>>> Hi all, >>>>>> >>>>>> I've posted this a month ago but haven't gotten a reply. Can anyone >>>>>> please >>>>>> help? >>>>>> >>>>>> - Jeff >>>>>> >>>>>> >>>>>> >>>>>> On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan >>>>>> wrote: >>>>>> >>>>>> Hi all, >>>>>>> >>>>>>> Since a few months ago Samba ask each of our users to change password >>>>>>> at >>>>>>> log on every month and I have not been able to disable it. >>>>>>> >>>>>>> I found this page and follow the instructions: >>>>>>> >>>>>>> >>>>>>> http://playingwithsid.**blogspot.com/2010/12/change-** >>>>>>> >>>>>>> samba-password-expiry-setting.**html<http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html> >>>>>>> >>>>>>> The default ‘Password Must Change’ policy was set to never and >>>>>>> pdbedit >>>>>>> shows ‘Password Must Change: never’ for each user, yet the passwords >>>>>>> still >>>>>>> get expire once a month. >>>>>>> >>>>>>> Can anyone please give me some pointers? >>>>>>> >>>>>>> - Jeff >>>>>>> >>>>>> >>>>> Just a hint (maybe wrong...) >>>>> >>>>> obey pam restrictions = No >>>>> >>>>> ... >>>>> >>>>> >>>>> >>>> -- >>>> To unsubscribe from this list go to the following URL and read the >>>> instructions: >>>> https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba> >>>> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Thanks for your response Aaron. I actually checked LDAP too already along with pdbedit. For the domain record, "sambaMaxPwdAge" is shown to be -1 as it should. For each user, "sambaPasswordCanChange" is 0, "sambaPasswordLastSet" is the correct password last changed time in epoch. There's no "sambaPasswordMustChange" for user records. - Jeff On Fri, Oct 14, 2011 at 8:30 PM, Aaron E. wrote: > Sounds like you've checked mostly all except your ldap backend... > Check your LDAP DB for... (they will be in nix timestamp) > > sambaPasswordCanChange > sambaPasswordLastSet > sambaPasswordMustChange > > setup smbldap-tools package > > > On 10/13/2011 11:00 PM, Jeffrey Chan wrote: > >> I'm using OpenLDAP as backend. >> >> >> On Wed, Oct 12, 2011 at 11:16 PM, Aaron E. wrote: >> >> Just cuirous are you using pam or ldap backend? >>> >>> >>> On 10/12/2011 09:22 AM, Marco Ciampa wrote: >>> >>> On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: >>>> >>>> Hi all, >>>>> >>>>> I've posted this a month ago but haven't gotten a reply. Can anyone >>>>> please >>>>> help? >>>>> >>>>> - Jeff >>>>> >>>>> >>>>> >>>>> On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan >>>>> wrote: >>>>> >>>>> Hi all, >>>>> >>>>>> >>>>>> Since a few months ago Samba ask each of our users to change password >>>>>> at >>>>>> log on every month and I have not been able to disable it. >>>>>> >>>>>> I found this page and follow the instructions: >>>>>> >>>>>> >>>>>> http://playingwithsid.**blogsp**ot.com/2010/12/change-**<http://blogspot.com/2010/12/change-**> >>>>>> samba-password-expiry-setting.html<http://playingwithsid.** >>>>>> blogspot.com/2010/12/change-**samba-password-expiry-setting.**html<http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html> >>>>>> > >>>>>> >>>>>> >>>>>> The default ‘Password Must Change’ policy was set to never and pdbedit >>>>>> shows ‘Password Must Change: never’ for each user, yet the passwords >>>>>> still >>>>>> get expire once a month. >>>>>> >>>>>> Can anyone please give me some pointers? >>>>>> >>>>>> - Jeff >>>>>> >>>>>> >>>>> Just a hint (maybe wrong...) >>>> >>>> obey pam restrictions = No >>>> >>>> ... >>>> >>>> >>>> >>>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: >>> https://lists.samba.org/mailman/options/samba<https://lists.samba.org/**mailman/options/samba> >>> <https://**lists.samba.org/mailman/**options/samba<https://lists.samba.org/mailman/options/samba> >>> > >>> >>> > -- > To unsubscribe from this list go to the following URL and read the > instructions: > https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
I've commented out #defaultMaxPasswordAge months ago. I also used "pdbedit" and "net sam policy" to set "Maximum Password Age" to -1. When I run pdbedit -Lv on each user, it all says "Password Must Change: never". - Jeff On Wed, Oct 12, 2011 at 11:39 PM, upen wrote: > I also had similar issues. I remember if you change those settings in > configuration files, the new users will get the settings right but the > users created before that configuration change willl not be affected. > > One more thing to check is defaultMaxPasswordAge setting in > /etc/smbldap-tools/smbldap.conf file. What is it set to? > > I have commented out that entry in my SAMBA+LDAP setup. > > Thanks, > Up > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
I'm using OpenLDAP as backend. On Wed, Oct 12, 2011 at 11:16 PM, Aaron E. wrote: > Just cuirous are you using pam or ldap backend? > > > On 10/12/2011 09:22 AM, Marco Ciampa wrote: > >> On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: >> >>> Hi all, >>> >>> I've posted this a month ago but haven't gotten a reply. Can anyone >>> please >>> help? >>> >>> - Jeff >>> >>> >>> >>> On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan >>> wrote: >>> >>> Hi all, >>>> >>>> Since a few months ago Samba ask each of our users to change password at >>>> log on every month and I have not been able to disable it. >>>> >>>> I found this page and follow the instructions: >>>> >>>> >>>> http://playingwithsid.**blogspot.com/2010/12/change-** >>>> samba-password-expiry-setting.**html<http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html> >>>> >>>> The default ‘Password Must Change’ policy was set to never and pdbedit >>>> shows ‘Password Must Change: never’ for each user, yet the passwords >>>> still >>>> get expire once a month. >>>> >>>> Can anyone please give me some pointers? >>>> >>>> - Jeff >>>> >>> >> Just a hint (maybe wrong...) >> >> obey pam restrictions = No >> >> ... >> >> >> > -- > To unsubscribe from this list go to the following URL and read the > instructions: > https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, I've posted this a month ago but haven't gotten a reply. Can anyone please help? - Jeff On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan wrote: > Hi all, > > Since a few months ago Samba ask each of our users to change password at > log on every month and I have not been able to disable it. > > I found this page and follow the instructions: > > > http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html > > The default ‘Password Must Change’ policy was set to never and pdbedit > shows ‘Password Must Change: never’ for each user, yet the passwords still > get expire once a month. > > Can anyone please give me some pointers? > > - Jeff > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default 'Password Must Change' policy was set to never and pdbedit shows 'Password Must Change: never' for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default ‘Password Must Change’ policy was set to never and pdbedit shows ‘Password Must Change: never’ for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
