[Samba] Automated winbind domain join with kickstart

2013-06-05 Thread Luc Lalonde
Hello Folks,

Would anyone know if it is possible to automate the joining of a Linux machine 
to a Samba 4 domain using Kickstart?

It seems that it is not ready yet:

https://fedoraproject.org/wiki/Features/AnacondaRealmIntegration

We want to automate the installation of Linux winbind clients.   Anyone have a 
working solution?

Thank You!

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
If you are not paying for it, you're not the customer; you're the product being 
sold. (Andrew Lewis)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] GPO replication?

2013-05-14 Thread Luc Lalonde
Hello Folks,

I've successfully created a GPO for user logon scripts with Samba4...  However, 
the 'SYSVOL\domain\Policies' folder and contents is not replicated to the other 
DC's.

Is this normal?  It is working, but it seems that this is a 'single point of 
failure' for 'logon' scripts.

Thank You!

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
If you are not paying for it, you're not the customer; you're the product being 
sold. (Andrew Lewis)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Logon script via GPO

2013-05-13 Thread Luc Lalonde
Hello Folks,

I'm trying to get a logon script to execute via a GPO with Samba 4.0.5.

I used the Group Policy Editor that came with the Administration tools and 
linked a simple 'logon.bat' batch file to automatically mount a network share 
for a given 'OU=students'.

When I log in with a user that's in this container, it does not seem to execute 
the login script.   

Anyone have an idea why this isn't working?

Here's the Policy on the Samba4 server:

[root@foo Logon]# pwd
/usr/local/samba/var/locks/sysvol/foobar.com/Policies/{A9793D9B-1FCF-4F7E-BB12-33F9383F8B92}/User/Scripts/Logon

[root@foo Logon]# ls
logon.bat

I've done this before on a regular non-samba AD domain...   What's missing to 
get this to work?

Thank You!
-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
If you are not paying for it, you're not the customer; you're the product being 
sold. (Andrew Lewis)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Logon script via GPO

2013-05-13 Thread Luc Lalonde
Hello Chris,

Thanks for the hint... I looked in the client's event logs.   There was a 
permission problem accessing the 'Netlogon' share on the Samba4 server.

Problem solved, Thank You!

- Original Message -
From: Chris Rowson christopherrow...@gmail.com
Cc: samba@lists.samba.org
Sent: Monday, May 13, 2013 12:57:55 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Samba] Logon script via GPO

On 13 May 2013 17:38, Luc Lalonde luc.lalo...@polymtl.ca wrote:

 Hello Folks,

 I'm trying to get a logon script to execute via a GPO with Samba 4.0.5.

 I used the Group Policy Editor that came with the Administration tools
and linked a simple 'logon.bat' batch file to automatically mount a network
share for a given 'OU=students'.

 When I log in with a user that's in this container, it does not seem to
execute the login script.

 Anyone have an idea why this isn't working?

 Here's the Policy on the Samba4 server:

 [root@foo Logon]# pwd
 /usr/local/samba/var/locks/sysvol/
foobar.com/Policies/{A9793D9B-1FCF-4F7E-BB12-33F9383F8B92}/User/Scripts/Logon

 [root@foo Logon]# ls
 logon.bat

 I've done this before on a regular non-samba AD domain...   What's
missing to get this to work?

 Thank You!
 --
 Luc Lalonde, analyste
 -
 Département de génie informatique:
 École polytechnique de Montréal
 (514) 340-4711 x5049
 luc.lalo...@polymtl.ca
 -
 If you are not paying for it, you're not the customer; you're the product
being sold. (Andrew Lewis)
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

Any logs on the client machine? Just wonder if it's seeing the policy.
Also,  have you tried gpresult on the client?

Cheers,

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
If you are not paying for it, you're not the customer; you're the product being 
sold. (Andrew Lewis)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Winbind strip domain from username?

2013-04-16 Thread Luc Lalonde
Hello Geza,

Here's my 'smb.conf':

[global]
workgroup = FOO
realm = foo.example.com
netbios name = ROQUEFORT
server role = active directory domain controller
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, 
winbind, ntp_signd, kcc, dnsupdate
idmap config * : range = 16777216-33554431
template shell = /bin/bash
winbind offline logon = false
winbind enum users = yes
winbind enum groups = yes
obey pam restrictions = yes
template homedir = /usagers/%U
winbind use default domain = yes
map untrusted to domain = no


[netlogon]
path = /usr/local/samba/var/locks/sysvol/foo.example.com/scripts
read only = No

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No

Thanks for your help!

Cheers!

On 2013-04-16, at 12:09 AM, Gémes Géza g...@kzsdabas.hu wrote:

 2013-04-15 23:12 keltezéssel, Luc Lalonde írta:
 Hello Folks,
 
 This directive works with Samba3 but does not seem to work with Samba-4.0.5:
 
 winbind use default domain = Yes
 
 I want to get a username that does not contain the domain (GIGL).  Instead 
 here's what I get:
 
 [root@roquefort ~]# getent passwd | grep GIGL
 GIGL\Administrator:*:0:100::/usagers/%U:/bin/bash
 GIGL\Guest:*:302:303::/usagers/%U:/bin/bash
 GIGL\krbtgt:*:307:100::/usagers/%U:/bin/bash
 GIGL\dns-stilton:*:308:100::/usagers/%U:/bin/bash
 GIGL\testuser:*:309:100::/usagers/%U:/bin/bash
 GIGL\llalonde:*:310:100::/usagers/%U:/bin/bash
 
 How do I remove the 'GIGL\' from the username?  This is causing me problems 
 mounting the user's home directory at logon with 'PAM_MOUNT'
 
 What am I missing?
 
 Thank You!
 
 Please attach your smb.conf.
 
 Regards
 
 Geza Gemes
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] winbind use default domain = Yes (not working in 4.0.5)

2013-04-16 Thread Luc Lalonde
Hello folks,

Well it seems that I'm not the only one having this problem:

https://bugzilla.samba.org/show_bug.cgi?id=9780

I am able to bypass the problem with PAM_MOUNT by using '%(DOMAIN_USER)' 
instead of '%(USER).

Bye.


- Original Message -
From: Johan Hendriks jo...@double-l.nl
To: Luc Lalonde luc.lalo...@polymtl.ca
Cc: samba@lists.samba.org
Sent: Tuesday, April 16, 2013 8:27:30 AM GMT -05:00 US/Canada Eastern
Subject: RE: [Samba] Winbind strip domain from username?



Hello Folks,

This directive works with Samba3 but does not seem to work with Samba-4.0.5:

winbind use default domain = Yes

I want to get a username that does not contain the domain (GIGL).  Instead 
here's what I get:

[root@roquefort ~]# getent passwd | grep GIGL
GIGL\Administrator:*:0:100::/usagers/%U:/bin/bash
GIGL\Guest:*:302:303::/usagers/%U:/bin/bash
GIGL\krbtgt:*:307:100::/usagers/%U:/bin/bash
GIGL\dns-stilton:*:308:100::/usagers/%U:/bin/bash
GIGL\testuser:*:309:100::/usagers/%U:/bin/bash
GIGL\llalonde:*:310:100::/usagers/%U:/bin/bash

How do I remove the 'GIGL\' from the username?  This is causing me problems 
mounting the user's home directory at logon with 'PAM_MOUNT'

What am I missing?

Thank You!

--
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-

I had something similar, but i can not look what it was from where i am now, 
but i think i did change the %U in %u in my home share

regards
Johan

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Winbind strip domain from username?

2013-04-15 Thread Luc Lalonde
Hello Folks,

This directive works with Samba3 but does not seem to work with Samba-4.0.5:

winbind use default domain = Yes

I want to get a username that does not contain the domain (GIGL).  Instead 
here's what I get:

[root@roquefort ~]# getent passwd | grep GIGL
GIGL\Administrator:*:0:100::/usagers/%U:/bin/bash
GIGL\Guest:*:302:303::/usagers/%U:/bin/bash
GIGL\krbtgt:*:307:100::/usagers/%U:/bin/bash
GIGL\dns-stilton:*:308:100::/usagers/%U:/bin/bash
GIGL\testuser:*:309:100::/usagers/%U:/bin/bash
GIGL\llalonde:*:310:100::/usagers/%U:/bin/bash

How do I remove the 'GIGL\' from the username?  This is causing me problems 
mounting the user's home directory at logon with 'PAM_MOUNT'

What am I missing?

Thank You!

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba-tool modify users info?

2013-04-11 Thread Luc Lalonde
Hello,

I'm wondering if there's a plan for including the possibility of modifying user 
attributes (must-change-at_next-login, profile-path, home-drive, 
home-directory, etc)?

For the moment, it seems the only way to do this is when the user is created 
(samba-tool newuser) or by doing so via 'administrative tools' via a Windows 
machine.

Thank You!

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 LDAP NTLM password nightly injection

2013-04-09 Thread Luc Lalonde
Ok this works:


#!/usr/bin/env python

import sys

sys.path.insert(0, /usr/local/samba/lib64/python2.6/site-packages)
sys.path.insert(1, /usr/local/samba/lib/python2.6/site-packages)

from samba import Ldb, registry
from samba.param import LoadParm
from samba.provision import provision, FILL_FULL, ProvisioningError, 
setsysvolacl
from samba.samba3 import passdb
from samba.samba3 import param as s3param
from samba.dcerpc import lsa, samr, security
from samba.dcerpc.security import dom_sid
from samba.credentials import Credentials
from samba import dsdb
from samba.ndr import ndr_pack
from samba import unix2nttime

# Convert Hex to Byte string
def HexToByte( hexStr ):
bytes = []
hexStr = ''.join( hexStr.split( ) )
for i in range(0, len(hexStr), 2):
bytes.append( chr( int (hexStr[i:i+2], 16 ) ) )
return ''.join( bytes )

# Connect to samba4 backend
new_lp_ctx = s3param.get_context()
new_lp_ctx.load(/usr/local/samba/etc/smb.conf)
new_lp_ctx.set(private dir, /usr/local/samba/private)

s4_passdb = passdb.PDB(new_lp_ctx.get(passdb backend))

# Change testuser password
new_userdata = s4_passdb.getsampwnam(testuser)
new_userdata.nt_passwd = HexToByte(878D8014606CDA29677A44EFA1353FC7)
new_userdata.lanman_passwd = HexToByte(552902031BEDE9EFAAD3B435B51404EE)
s4_passdb.update_sam_account(new_userdata)


I was missing some module paths and the extra info for connecting to the LDB 
database...  Now I just have to generalize this procedure so that I can update 
the passwords every night like I do with Samba3-LDAP.

Andrew, thanks for the pointers.  I'm posting this in case it can help someone 
else.

- Original Message -
From: Luc Lalonde luc.lalo...@polymtl.ca
To: Andrew Bartlett abart...@samba.org
Cc: samba@lists.samba.org
Sent: Wednesday, March 27, 2013 7:38:05 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Samba] Samba 4 LDAP NTLM password nightly injection

Hello Andrew,

How would I convert the below base16 strings into raw bytes acceptable to this 
routine?  We presently inject the NTLM passwords directly into our LDAP 
database for Samba3.

Also, I can't seem to figure out the argument values for 'passdb.PDB'.  I tried 
'ldb', 'samba_dsdb'.

Thanks for your help!

On 2013-03-27, at 6:18 PM, Andrew Bartlett abart...@samba.org wrote:

 On Tue, 2013-03-26 at 11:10 -0400, Luc Lalonde wrote:
 Hello Andrew,
 
 I'm finally diving into this project...
 
 First off, my sysadmin stuff is mostly in Perl.  So my Python is rudimentary 
 at best.
 
 Here we go anyway...  I've looked at the 'upgrade.py' but I can't seem to 
 figure out how to connect to the Samba4 passwd database.
 
 In the script I see these lines:
 
 ###
 # Connect to samba4 backend
 s4_passdb = passdb.PDB(new_lp_ctx.get(passdb backend))
 
 
 I would appreciate a hint on how to connect to the database please.  Where 
 is the 'passdb' object referenced from?
 
 Once that's done, from what I understand, I should be able to change the 
 passwords directly:
 
 ###
 # Change foo-user password
 admin_userdata = s4_passdb.getsampwnam(foo-user)
 admin_userdata.nt_passwd = 878D8014606CDA29677A44EFA1353FC7
 admin_userdata.lanman_passwd = 552902031BEDE9EFAAD3B435B51404EE
 s4_passdb.update_sam_account(admin_userdata)
 ###
 
 Sort of.  Those values are not base16 strings, but raw bytes, but
 otherwise that looks pretty much right at a first glance. 
 
 Andrew Bartlett
 
 -- 
 Andrew Bartletthttp://samba.org/~abartlet/
 Authentication Developer, Samba Team   http://samba.org
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 LDAP NTLM password nightly injection

2013-03-28 Thread Luc Lalonde
Hello Andrew,

Would this work:

###
def HexToByte( hexStr ):
##
## Taken from ActiveState Code recipes:
## 
http://code.activestate.com/recipes/510399-byte-to-hex-and-hex-to-byte-string-conversion

bytes = []

hexStr = ''.join( hexStr.split( ) )

for i in range(0, len(hexStr), 2):
bytes.append( chr( int (hexStr[i:i+2], 16 ) ) )

return ''.join( bytes )

# Connect to samba4 backend
s4_passdb = passdb.PDB(samba4)

# Change foo-user password
admin_userdata = s4_passdb.getsampwnam(foo-user)
admin_userdata.nt_passwd = HextoByte(878D8014606CDA29677A44EFA1353FC7)
admin_userdata.lanman_passwd = HextoByte(552902031BEDE9EFAAD3B435B51404EE)
s4_passdb.update_sam_account(admin_userdata)
###

I'm trying to figure out how to connect to the local Samba4 database... What I 
have above 's4_passdb = passdb.PDB(samba4)' doesn't work.  I tried 'ldb', 
'samba_dsdb', and 'samba4' without success.

Any hints please?

Thanks!

- Original Message -
From: Andrew Bartlett abart...@samba.org
To: Luc Lalonde luc.lalo...@polymtl.ca
Cc: samba@lists.samba.org
Sent: Wednesday, March 27, 2013 6:18:15 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Samba] Samba 4 LDAP NTLM password nightly injection

On Tue, 2013-03-26 at 11:10 -0400, Luc Lalonde wrote:
 Hello Andrew,
 
 I'm finally diving into this project...
 
 First off, my sysadmin stuff is mostly in Perl.  So my Python is rudimentary 
 at best.
 
 Here we go anyway...  I've looked at the 'upgrade.py' but I can't seem to 
 figure out how to connect to the Samba4 passwd database.
 
 In the script I see these lines:
 
 ###
 # Connect to samba4 backend
 s4_passdb = passdb.PDB(new_lp_ctx.get(passdb backend))
 
 
 I would appreciate a hint on how to connect to the database please.  Where is 
 the 'passdb' object referenced from?
 
 Once that's done, from what I understand, I should be able to change the 
 passwords directly:
 
 ###
 # Change foo-user password
 admin_userdata = s4_passdb.getsampwnam(foo-user)
 admin_userdata.nt_passwd = 878D8014606CDA29677A44EFA1353FC7
 admin_userdata.lanman_passwd = 552902031BEDE9EFAAD3B435B51404EE
 s4_passdb.update_sam_account(admin_userdata)
 ###

Sort of.  Those values are not base16 strings, but raw bytes, but
otherwise that looks pretty much right at a first glance. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org



-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 LDAP NTLM password nightly injection

2013-03-27 Thread Luc Lalonde
Hello Andrew,

How would I convert the below base16 strings into raw bytes acceptable to this 
routine?  We presently inject the NTLM passwords directly into our LDAP 
database for Samba3.

Also, I can't seem to figure out the argument values for 'passdb.PDB'.  I tried 
'ldb', 'samba_dsdb'.

Thanks for your help!

On 2013-03-27, at 6:18 PM, Andrew Bartlett abart...@samba.org wrote:

 On Tue, 2013-03-26 at 11:10 -0400, Luc Lalonde wrote:
 Hello Andrew,
 
 I'm finally diving into this project...
 
 First off, my sysadmin stuff is mostly in Perl.  So my Python is rudimentary 
 at best.
 
 Here we go anyway...  I've looked at the 'upgrade.py' but I can't seem to 
 figure out how to connect to the Samba4 passwd database.
 
 In the script I see these lines:
 
 ###
 # Connect to samba4 backend
 s4_passdb = passdb.PDB(new_lp_ctx.get(passdb backend))
 
 
 I would appreciate a hint on how to connect to the database please.  Where 
 is the 'passdb' object referenced from?
 
 Once that's done, from what I understand, I should be able to change the 
 passwords directly:
 
 ###
 # Change foo-user password
 admin_userdata = s4_passdb.getsampwnam(foo-user)
 admin_userdata.nt_passwd = 878D8014606CDA29677A44EFA1353FC7
 admin_userdata.lanman_passwd = 552902031BEDE9EFAAD3B435B51404EE
 s4_passdb.update_sam_account(admin_userdata)
 ###
 
 Sort of.  Those values are not base16 strings, but raw bytes, but
 otherwise that looks pretty much right at a first glance. 
 
 Andrew Bartlett
 
 -- 
 Andrew Bartletthttp://samba.org/~abartlet/
 Authentication Developer, Samba Team   http://samba.org
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 LDAP NTLM password nightly injection

2013-03-26 Thread Luc Lalonde
Hello Andrew,

I'm finally diving into this project...

First off, my sysadmin stuff is mostly in Perl.  So my Python is rudimentary at 
best.

Here we go anyway...  I've looked at the 'upgrade.py' but I can't seem to 
figure out how to connect to the Samba4 passwd database.

In the script I see these lines:

###
# Connect to samba4 backend
s4_passdb = passdb.PDB(new_lp_ctx.get(passdb backend))


I would appreciate a hint on how to connect to the database please.  Where is 
the 'passdb' object referenced from?

Once that's done, from what I understand, I should be able to change the 
passwords directly:

###
# Change foo-user password
admin_userdata = s4_passdb.getsampwnam(foo-user)
admin_userdata.nt_passwd = 878D8014606CDA29677A44EFA1353FC7
admin_userdata.lanman_passwd = 552902031BEDE9EFAAD3B435B51404EE
s4_passdb.update_sam_account(admin_userdata)
###

Is that right?

Cheers.

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-

- Original Message -
From: Andrew Bartlett abart...@samba.org
To: Luc Lalonde luc.lalo...@polymtl.ca
Cc: samba@lists.samba.org
Sent: Tuesday, December 11, 2012 10:22:21 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Samba] Samba 4 LDAP NTLM password nightly injection

On Tue, 2012-12-11 at 21:48 -0500, Luc Lalonde wrote:
 Hello Folks,
 
 In pour present Samba-3 setup we update user passwords in our LDAP backend.  
 We only have access to the encrypted NTLM passwords and use Perl scripts to 
 do this.
 
 Beyond importing the user database with the 'Classic upgrade' method, will we 
 be able to adapt our Perl scripts so that we can keep updating the internal 
 Samba-4 database with the encrypted passwords as we did with Samba-3?
 
 We've been using Samba for many years now and very much appreciate all the 
 work done by the Samba team.  Congrats on getting Samba-4 to stable status!

Yes, you can continue to do that.  The best approach would be to set it
via the ldb python bindings, specifying the
DSDB_CONTROL_PASSWORD_HASH_VALUES_OID control and unicodePwd, or via the
python or C passdb API.  

One approach you could code from is how we set the administrator
password during the 'classicupgrade' script in
source4/scripting/python/samba/upgrade.py.  

Give that a go, but if you need more clues I'm very happy to help out. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba AD DC with BIND DNS on separate server

2013-02-25 Thread Luc Lalonde
Hello Folks,

I see from the documentation that it is possible to use BIND9 as a drop-in 
replacement for the internal SAMBA4 DNS service...

However, I would like to know if I can keep the BIND9 DNS server on a seperate 
server from de one that SAMBA4 is running on (AD DC).

If this is possible, how would one go about achieving this?

I've got an existing DNS infrastructure that I do not necessarily change in a 
big way... 

Thank You!

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba 4 LDAP NTLM password nightly injection

2012-12-11 Thread Luc Lalonde
Hello Folks,

In pour present Samba-3 setup we update user passwords in our LDAP backend.  We 
only have access to the encrypted NTLM passwords and use Perl scripts to do 
this.

Beyond importing the user database with the 'Classic upgrade' method, will we 
be able to adapt our Perl scripts so that we can keep updating the internal 
Samba-4 database with the encrypted passwords as we did with Samba-3?

We've been using Samba for many years now and very much appreciate all the work 
done by the Samba team.  Congrats on getting Samba-4 to stable status!

Thank You!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Unable to join Samba PDC with version 3.6.5 (works with 3.3.15)

2012-06-14 Thread Luc Lalonde
Hello Folks,

I am unable to join any linux Samba clients to my Samba-3.6.5 PDC with clients 
running 3.4.x, 3.5.x, or 3.6.x versions.   However, 3.3.x works fine and so do 
my Windows clients.

When I do a 'net rpc join' I get a 'successfuly joined domain' message with say 
3.6.5, but I am unable to authenticate on the domain thereafter.

Any clues?  I can send the configurations (smb.conf) of the server and client 
if it can help solve this mystery.  I suspect I'm just missing a configuration 
directive on the client side... but I can't seem to find any reference in the 
documentation.

On the Samba-3.6.5 PDC, we're using a LDAP backend.

Thanks in advance! 

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] WinXP DFS problems, debugging with dfsutil.exe

2003-03-20 Thread Luc Lalonde
Hello Johan,

I'm having the same problems with DFS and WinXP clients since I upgraded 
 to 2.2.8.

I tried to clear the cache on the client side with dfsutil.exe that 
comes with the Win2000 SP2 but to no avail.

Can anyone else confirm this problem?

It's also strange that on the WinXP clients the version of the samba 
server is still registered as a previous version (2.2.6 or 2.2.7).

Cheers.
--
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
[EMAIL PROTECTED]
-
War is good for business, invest your son!
-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] MSDFS problems with WinXP clients (after 2.2.8 upgrade)

2003-03-17 Thread Luc Lalonde
Hello Folks,

I seem to be having problems with MSDFS links with SAMBA-2.2.8 for 
Windows XP clients.  However, Windows 2000 clients are working fine with 
2.2.8 (link not found).

Is there anyone else getting this behaviour?  I have to say that 
everything else seems to work fine for all Windows clients.

Thanks.

--
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
[EMAIL PROTECTED]
-
War is good for business, invest your son!
-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] perl module for creating nt/lm password hash from cleartext

2002-10-15 Thread Luc Lalonde

Hello Folks,

Would anyone know if there exists a Perl module that can be used for 
creating the NT and LM passwords from clear text?

Thanks in advance.

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnque de Montréal
(514) 340-4711 x5049
[EMAIL PROTECTED]
-
To *you* I'm an atheist; to God, 
I'm the Loyal Opposition.
-


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba