Re: [Samba] sambaPwdMustChange not synced on PDC from BDC

2009-09-01 Thread Michael Ströder
nogenetics nogenetics wrote:
 On Fri, Aug 28, 2009 at 10:25 AM, nogenetics nogenetics 
 nnogenet...@gmail.com wrote:
 I have a PDC/BDC samba/ldap environment.
 PDC:
 samba 3.0.24
 slapd 2.3.30

 BDC:
 samba 3.2.5
 slapd 2.4.11

 Ldap replication is working fine, but I have noticed two issues

 1- when a windows user change password on BDC, sambaPwdMustChange and
 sambaPwdCanChange is not synced on PDC
 (using ldap passwd sync = yes and unix password sync = no)

 2- when using 'net sam set pwdmustchange'  on PDC, sambaPwdMustChange is
 not synced on BDC

 Anyone can point me what's wrong?

 About issue 1-  , I can use unix password sync = yes and ldap passwd sync =
 no (using smbldap-passwd) as workaround, but windows user get that annoying
 warning message (decode_pw_buffer-incorrect-password-length topic).  Is
 there a way to avoid this warning message?
 This is a issue many users are experiencing.

 Thanks in advance for your time


 Bump!
 No hints?

How are you sure you don't run into OpenLDAP replication problems? The
OpenLDAP versions you're running are quite old. slapd 2.3.x is not actively
supported anymore. There also were interop issues fixed regarding replication
between 2.3.x and 2.4.x and numerous syncrepl fixes for 2.4.x. You should
definitely upgrade your OpenLDAP installations.

Ciao, Michael.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Request for feedback

2009-07-24 Thread Michael Ströder
Charles Marcus wrote:
 On 7/22/2009 7:21 PM, Felix Miata wrote:
 What size limit should we observe for messages to this list?

 1) 64 KBytes
 2) 128 KBytes
 3) 256 KBytes
 4) 512 KBytes
 5) 1 MByte
 6) 2 MBytes
 7) Any size
 
 None of the above. 20k should be more than enough. Those who wish to share
 more should upload it somewhere and provide a URL to the upload in their list
 mail so that those who actually care about that particular large item can
 load it when they choose, and likely in a browser instead of an email agent.
 Offers to email large attachments privately could be encouraged as well.
 
 I don't know about 20k, but I definitely don't see the need to allow
 large attachments on a large mailing list like this...

The caveat is that things are not archived completely then. URLs get
invalid over time.

 What I would love to find is an easy to install/configure/use mail
 server add-on that would strip off all attachments over a configured
 size (in our business we deal with a lot of large attachments - I have
 to allow a max of 50MB), and drop them on a filesystem, and add a link
 to the email then pass the email on to its destination.

This does not work correctly with signed e-mails I guess.

Ciao, Michael.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please translate M$ speak: create a new organizational unit

2009-05-18 Thread Michael Ströder
Miguel Medalha wrote:
 
 I am a bit new to Samba PDC.  When a M$ tech article says:
 Use Active Directory Users and Computers to create a new
 organizational unit (OU).  What does this mean in Samba PDC talk?
 Please translate.

 That is LDAP terminology, not MS's.

Hmm, yes and no. In MS AD a OU means a little bit more than in pure LDAP.
In AD you create a OU
1. to delegate the administration of a subset of users, groups and
computers  and
2. to attach a group policy to a subset of users and computers.

This will be relevant for Samba4.

Ciao, Michael.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba