Re: [Samba] missing libgnutls.so.26

2013-04-09 Thread Luis Angel Fernandez Fernandez
Could it be that he has some kind of mess with LD_LIBRARY_PATH. Maybe at
compile time, Samba was able to find everything it's needed but then, at
run time, it can't find the needed libraries despite they're installed
somewhere. I'm saying that because I'm pretty sure this happened to me O:-)


2013/4/9 Andrew Bartlett abart...@samba.org

 On Mon, 2013-04-08 at 20:25 -0700, Phil Quesinberry wrote:
  Hi Andrew,
 
  Many, many thanks and sorry about that... I was somewhat lost while
 writing
  the post myself, I was trying to distill all of the different things I
 had
  tried down into useful information but I somehow missed the mark.
 
  After I had posted the message, I manually did a configure of Samba's
  private copy of Python and then did a make uninstall to let it do some
  housecleaning.  After doing that, I was then able to compile Samba
  successfully without passing any flags but I'm still getting a libgnutls
  error when attempting to execute pdbedit and the same error as before
 with
  samba-tool.
 
  I pulled down and applied your patch against master but it didn't seem to
  have any effect.  I did another build with the install_with_python script
  but am still getting the same errors:
 
  [root@Server1 samba4]# pdbedit
  pdbedit: error while loading shared libraries: libgnutls.so.26: cannot
 open
  shared object file: No such file or directory
  [root@Server1 samba4]# samba-tool
  Traceback (most recent call last):
File /usr/local/samba/bin/samba-tool, line 33, in module
  from samba.netcmd.main import cmd_sambatool
File /usr/local/samba/lib/python2.6/site-packages/samba/__init__.py,
  line 50, in module
  from samba._ldb import Ldb as _Ldb
  ImportError: libgnutls.so.26: cannot open shared object file: No such
 file
  or directory

 Between building Samba and running it you have removed libgnutls.

 Andrew Bartlett

 --
 Andrew Bartletthttp://samba.org/~abartlet/
 Authentication Developer, Samba Team   http://samba.org


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba




-- 
Linkedin profile (http://es.linkedin.com/in/lafdez)
G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
Twitter (@lafdez @_lafdez_)
Identi.ca (@lafdez)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] AD DC LDAP support for the 'password change' extended operation

2013-02-07 Thread Luis Angel Fernandez Fernandez
2013/2/6 Andrew Bartlett abart...@samba.org


 I can help on this part of the question:  No, the extended operation is
 not supported - it remains a wishlist item that one of our developers
 was working on at some point, but has not progressed beyond that.


  First of all, thank you for your answer.

  I think I don't understand what's happening with my setup then. Using
this ldapadmin (http://www.ldapadmin.org/index.html) client I could create
a password for one dn I made up
(CN=luisangel.fernandez,OU=alisys.net,OU=dominios,DC=aliratiun,DC=tic).
Does ldapadmin use any other extension to change the password?

  And do you have any idea what could I have been changed so it's not
working anymore? I know, it's a weird question, but I don't know what else
to do.

  Using wireshark I get an STATUS_CONNECTION_REFUSED as response to a NT
Create AndX request with \samr as path. I get that just before ldapadmin
shows a dialog saying that RPC server is unavailable. And in samba logs
nothing seems wrong.


-- 
Linkedin profile (http://es.linkedin.com/in/lafdez)
G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
Twitter (@lafdez @_lafdez_)
Identi.ca (@lafdez)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Internal LDAP problem

2013-02-06 Thread Luis Angel Fernandez Fernandez
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_VERSION
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
ldb: Added timed event ltdb_callback: 0xb5cd408
ldb: Added timed event ltdb_timeout: 0xb5cd468
ldb: Destroying timer event 0xb5cd468 ltdb_timeout
ldb: Ending timer event 0xb5cd408 ltdb_callback

[... Many of those ...]

Mandatory SMB signing enabled!
SMB signing enabled!
sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of
[] 02 D0 C8 FB BD 69 94 9C.i..
[] B3 46 BE 26 A3 7F 0F CA.F.
Seen valid packet, so turning signing on
Seen valid packet, so marking signing as 'seen valid'
switch message SMBtconX (task_id 0.88)
sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of
[] 55 5D E8 D4 4F 28 D2 38U]..O(.8
[] DC 8F EF AD FF 7C D6 A5.|..
switch message SMBntcreateX (task_id 0.88)
sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of
[] 81 B7 63 3D BD 37 9E 72..c=.7.r
Terminating connection - 'ldapsrv_call_loop: tstream_read_pdu_blob_recv() -
NT_STATUS_CONNECTION_DISCONNECTED'
imessaging: cleaning up /usr/local/samba/private/smbd.tmp/msg/msg.0.86
single_terminate: reason[ldapsrv_call_loop: tstream_read_pdu_blob_recv() -
NT_STATUS_CONNECTION_DISCONNECTED]




2013/2/5 Luis Angel Fernandez Fernandez laff...@gmail.com

 I forgot to mention I'm using Samba 4.0.0.

 I'd appreciate any help here since I can't figure it out and I don't know
 where else I can look at.


 2013/2/4 Luis Angel Fernandez Fernandez laff...@gmail.com

   Hi!

   I'm trying to use the internal LDAP provided by Samba4 to store mail
 domains used by SOGo. I have two sets of users. Those used by Samba and
 created through samba-tool and those created under some ou I have made
 up. A few days ago I was able to change the latter users passwords using
 ldapadmin (a windows LDAP client) but today I am not. When I try to
 change a password I get an error message like RPC server unavailable.

   And I have another problem with LDAP. I have to use ldapadmin to change
 users' password because ldappasswd gives me this error:

 ldappasswd -d4 -h 192.168.0.137 cn=juan.lapuerta,ou=alisys.net
 ,dc=aliratiun,dc=tic
 ldap_build_search_req ATTRS: supportedSASLMechanisms
 SASL/GSSAPI authentication started
 SASL username: administra...@aliratiun.tic
 SASL SSF: 56
 SASL data security layer installed.
 Result: Protocol error (2)
 Additional info: Extended Operation(1.3.6.1.4.1.4203.1.11.1) not supported

   But I think I read somewhere that that extended operation is supported.

   Thanks in advance.

   Regards,

 --
 Linkedin profile (http://es.linkedin.com/in/lafdez)
 G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
 Twitter (@lafdez @_lafdez_)
 Identi.ca (@lafdez)




 --
 Linkedin profile (http://es.linkedin.com/in/lafdez)
 G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
 Twitter (@lafdez @_lafdez_)
 Identi.ca (@lafdez)




-- 
Linkedin profile (http://es.linkedin.com/in/lafdez)
G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
Twitter (@lafdez @_lafdez_)
Identi.ca (@lafdez)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Internal LDAP problem

2013-02-05 Thread Luis Angel Fernandez Fernandez
I forgot to mention I'm using Samba 4.0.0.

I'd appreciate any help here since I can't figure it out and I don't know
where else I can look at.


2013/2/4 Luis Angel Fernandez Fernandez laff...@gmail.com

   Hi!

   I'm trying to use the internal LDAP provided by Samba4 to store mail
 domains used by SOGo. I have two sets of users. Those used by Samba and
 created through samba-tool and those created under some ou I have made
 up. A few days ago I was able to change the latter users passwords using
 ldapadmin (a windows LDAP client) but today I am not. When I try to
 change a password I get an error message like RPC server unavailable.

   And I have another problem with LDAP. I have to use ldapadmin to change
 users' password because ldappasswd gives me this error:

 ldappasswd -d4 -h 192.168.0.137 cn=juan.lapuerta,ou=alisys.net
 ,dc=aliratiun,dc=tic
 ldap_build_search_req ATTRS: supportedSASLMechanisms
 SASL/GSSAPI authentication started
 SASL username: administra...@aliratiun.tic
 SASL SSF: 56
 SASL data security layer installed.
 Result: Protocol error (2)
 Additional info: Extended Operation(1.3.6.1.4.1.4203.1.11.1) not supported

   But I think I read somewhere that that extended operation is supported.

   Thanks in advance.

   Regards,

 --
 Linkedin profile (http://es.linkedin.com/in/lafdez)
 G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
 Twitter (@lafdez @_lafdez_)
 Identi.ca (@lafdez)




-- 
Linkedin profile (http://es.linkedin.com/in/lafdez)
G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
Twitter (@lafdez @_lafdez_)
Identi.ca (@lafdez)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Internal LDAP problem

2013-02-04 Thread Luis Angel Fernandez Fernandez
  Hi!

  I'm trying to use the internal LDAP provided by Samba4 to store mail
domains used by SOGo. I have two sets of users. Those used by Samba and
created through samba-tool and those created under some ou I have made
up. A few days ago I was able to change the latter users passwords using
ldapadmin (a windows LDAP client) but today I am not. When I try to
change a password I get an error message like RPC server unavailable.

  And I have another problem with LDAP. I have to use ldapadmin to change
users' password because ldappasswd gives me this error:

ldappasswd -d4 -h 192.168.0.137 cn=juan.lapuerta,ou=alisys.net
,dc=aliratiun,dc=tic
ldap_build_search_req ATTRS: supportedSASLMechanisms
SASL/GSSAPI authentication started
SASL username: administra...@aliratiun.tic
SASL SSF: 56
SASL data security layer installed.
Result: Protocol error (2)
Additional info: Extended Operation(1.3.6.1.4.1.4203.1.11.1) not supported

  But I think I read somewhere that that extended operation is supported.

  Thanks in advance.

  Regards,

-- 
Linkedin profile (http://es.linkedin.com/in/lafdez)
G+ profile (https://plus.google.com/u/0/115320207805121303027/about)
Twitter (@lafdez @_lafdez_)
Identi.ca (@lafdez)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba