[Samba] Samba/LDAP appliance recommendation
Hi all, What's a good Samba+LDAP appliance these days for a small business? Currently I used a stock Ubuntu server and did all Samda/LDAP configuration manually. I'm looking for something that can allow my regular staff to use as well. 1. I tried most of the popular NAS distros, like FreeNAS, NAS4Free, OpenmediaVault, etc. Most of these NAS don't have an LDAP server built-in 2. I tried Openfiler, ClearOS and Zentyal which do have LDAP server built-in but I haven't gotten them to import my existing Samba/LDAP data yet. WIP. 3. I just discovered Artica NAS Appliance and Univention UCS, will be testing them this week. Do you guys know anything about these two distros? Sometimes I wonder if I even need LDAP, I migrated to LDAP before only to make it a little easier (though not by much) to edit samba account data (e.g. SID). I guess I'd like to have centralized authentication as well (clients include Windows, Mac OSX and Linux, maybe OpenVPN as well). Is there a simpler mode of centralized login operation? Or is LDAP the only viable solution? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, Today one of my users was asked to changed her password @ login again. I already commented out defaultMaxPasswordAge in /etc/smbldap-tools/smbldap.conf and ran smbldap-populate Any other ideas would be appreciated. Thanks, - Jeff On Thu, Oct 20, 2011 at 5:28 PM, Jeffrey Chan goofri...@gmail.com wrote: Thanks for your response Aaron. I actually checked LDAP too already along with pdbedit. For the domain record, sambaMaxPwdAge is shown to be -1 as it should. For each user, sambaPasswordCanChange is 0, sambaPasswordLastSet is the correct password last changed time in epoch. There's no sambaPasswordMustChange for user records. - Jeff On Fri, Oct 14, 2011 at 8:30 PM, Aaron E. ssures...@gmail.com wrote: Sounds like you've checked mostly all except your ldap backend... Check your LDAP DB for... (they will be in nix timestamp) sambaPasswordCanChange sambaPasswordLastSet sambaPasswordMustChange setup smbldap-tools package On 10/13/2011 11:00 PM, Jeffrey Chan wrote: I'm using OpenLDAP as backend. On Wed, Oct 12, 2011 at 11:16 PM, Aaron E.ssures...@gmail.com wrote: Just cuirous are you using pam or ldap backend? On 10/12/2011 09:22 AM, Marco Ciampa wrote: On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: Hi all, I've posted this a month ago but haven't gotten a reply. Can anyone please help? - Jeff On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Changoofri...@gmail.com wrote: Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.**blogspot.com/2010/12/change-** samba-password-expiry-setting.**htmlhttp://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default ‘Password Must Change’ policy was set to never and pdbedit shows ‘Password Must Change: never’ for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff Just a hint (maybe wrong...) obey pam restrictions = No ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Thanks for your response Aaron. I actually checked LDAP too already along with pdbedit. For the domain record, sambaMaxPwdAge is shown to be -1 as it should. For each user, sambaPasswordCanChange is 0, sambaPasswordLastSet is the correct password last changed time in epoch. There's no sambaPasswordMustChange for user records. - Jeff On Fri, Oct 14, 2011 at 8:30 PM, Aaron E. ssures...@gmail.com wrote: Sounds like you've checked mostly all except your ldap backend... Check your LDAP DB for... (they will be in nix timestamp) sambaPasswordCanChange sambaPasswordLastSet sambaPasswordMustChange setup smbldap-tools package On 10/13/2011 11:00 PM, Jeffrey Chan wrote: I'm using OpenLDAP as backend. On Wed, Oct 12, 2011 at 11:16 PM, Aaron E.ssures...@gmail.com wrote: Just cuirous are you using pam or ldap backend? On 10/12/2011 09:22 AM, Marco Ciampa wrote: On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: Hi all, I've posted this a month ago but haven't gotten a reply. Can anyone please help? - Jeff On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Changoofri...@gmail.com wrote: Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.**blogsp**ot.com/2010/12/change-**http://blogspot.com/2010/12/change-** samba-password-expiry-setting.htmlhttp://playingwithsid.** blogspot.com/2010/12/change-**samba-password-expiry-setting.**htmlhttp://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default ‘Password Must Change’ policy was set to never and pdbedit shows ‘Password Must Change: never’ for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff Just a hint (maybe wrong...) obey pam restrictions = No ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/sambahttps://lists.samba.org/**mailman/options/samba https://**lists.samba.org/mailman/**options/sambahttps://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
I'm using OpenLDAP as backend. On Wed, Oct 12, 2011 at 11:16 PM, Aaron E. ssures...@gmail.com wrote: Just cuirous are you using pam or ldap backend? On 10/12/2011 09:22 AM, Marco Ciampa wrote: On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: Hi all, I've posted this a month ago but haven't gotten a reply. Can anyone please help? - Jeff On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Changoofri...@gmail.com wrote: Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.**blogspot.com/2010/12/change-** samba-password-expiry-setting.**htmlhttp://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default ‘Password Must Change’ policy was set to never and pdbedit shows ‘Password Must Change: never’ for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff Just a hint (maybe wrong...) obey pam restrictions = No ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
I've commented out #defaultMaxPasswordAge months ago. I also used pdbedit and net sam policy to set Maximum Password Age to -1. When I run pdbedit -Lv on each user, it all says Password Must Change: never. - Jeff On Wed, Oct 12, 2011 at 11:39 PM, upen upendra.gan...@gmail.com wrote: I also had similar issues. I remember if you change those settings in configuration files, the new users will get the settings right but the users created before that configuration change willl not be affected. One more thing to check is defaultMaxPasswordAge setting in /etc/smbldap-tools/smbldap.conf file. What is it set to? I have commented out that entry in my SAMBA+LDAP setup. Thanks, Up -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, I've posted this a month ago but haven't gotten a reply. Can anyone please help? - Jeff On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Chan goofri...@gmail.com wrote: Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default ‘Password Must Change’ policy was set to never and pdbedit shows ‘Password Must Change: never’ for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default 'Password Must Change' policy was set to never and pdbedit shows 'Password Must Change: never' for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)
Hi all, Since a few months ago Samba ask each of our users to change password at log on every month and I have not been able to disable it. I found this page and follow the instructions: http://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html The default ‘Password Must Change’ policy was set to never and pdbedit shows ‘Password Must Change: never’ for each user, yet the passwords still get expire once a month. Can anyone please give me some pointers? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
