[389-users] Re: import userRoot: Skipping entry "XXXXXXXXXXX" which has no parent, ending at line 0 of file "(bulk import)"

2019-03-07 Thread Alberto Viana
Hi Guys, Recently I had the same issue and I copied the database backup from one server to another and used ldif2db.pl to import it and worked fine. After that, the replication works fine. Hope that helps you. On Wed, Mar 6, 2019 at 5:24 PM Jason Jenkins wrote: > Thanks. I'll give that a try.

[389-users] Syncing DS 389's userPassword with Samba 4's sambaNTPassword

2019-03-07 Thread Janet Houser
Hi Folks, I'm running DS-389 (version: 1.3.7.5 ; Build: 2018.178.1311) on a Cent OS 7 (vs. 7.6.1810) system. I've been working through creating a Samba 4 server and using LDAP authentication to my DS-389 server.   I've managed to get through most everything but I'm running  into an issue

[389-users] Syncing DS 389's userPassword with Samba 4's sambaNTPassword

2019-03-07 Thread Janet H
Hi Folks, I'm running DS-389 (version: 1.3.7.5 ; Build: 2018.178.1311) on a Cent OS 7 (vs. 7.6.1810) system. I've been working through creating a Samba 4 server and using LDAP authentication to my DS-389 server. I've managed to get through most everything but I'm running into an issue

[389-users] Re: Syncing DS 389's userPassword with Samba 4's sambaNTPassword

2019-03-07 Thread William Brown
> On 8 Mar 2019, at 07:11, Janet H wrote: > > I want to be able to change the LDAP password (userPassword) and have that > then update the sambaNTPassword. > > I have been googling for days and ran across the suggestion to use the > smbkrb5pwd overlay but that looks specific to openldap and

[389-users] Re: Syncing DS 389's userPassword with Samba 4's sambaNTPassword

2019-03-07 Thread William Brown
> On 8 Mar 2019, at 14:50, Gordon Messmer wrote: > > On 3/7/19 1:11 PM, Janet H wrote: >> I want to be able to change the LDAP password (userPassword) and have that >> then update the sambaNTPassword. > > > I believe FreeIPA (which is built on 389 DS) will do that when you install it >

[389-users] Re: Syncing DS 389's userPassword with Samba 4's sambaNTPassword

2019-03-07 Thread Gordon Messmer
On 3/7/19 9:17 PM, William Brown wrote: It uses the ipaNTHash field, and I don’t know if it’s in a samba compatible format. Samba with IPA uses krb5 for security generally rather than reading the NT hash IIRC. It must be a compatible format, because I have a Samba server that authenticates

[389-users] Re: Syncing DS 389's userPassword with Samba 4's sambaNTPassword

2019-03-07 Thread Gordon Messmer
On 3/7/19 1:11 PM, Janet H wrote: I want to be able to change the LDAP password (userPassword) and have that then update the sambaNTPassword. I believe FreeIPA (which is built on 389 DS) will do that when you install it with "--setup-adtrust" This document might be sufficient: