Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Marc Grimme
Am 16.10.2012 23:40, schrieb Simo Sorce: > On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: >> On 10/16/2012 05:21 AM, Simo Sorce wrote: >>> On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: > On Mon, 2012-10-15 at 14:15 +0200, Marc Grimm

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Simo Sorce
On Tue, 2012-10-16 at 14:51 -0700, Nathan Kinder wrote: > On 10/16/2012 02:40 PM, Simo Sorce wrote: > > On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: > >> On 10/16/2012 05:21 AM, Simo Sorce wrote: > >>> On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: > Am 15.10.2012 15:50, schr

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Nathan Kinder
On 10/16/2012 02:40 PM, Simo Sorce wrote: On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Simo Sorce
On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: > On 10/16/2012 05:21 AM, Simo Sorce wrote: > > On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: > >> Am 15.10.2012 15:50, schrieb Simo Sorce: > >>> On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: > Am 14.10.2012 23:14, schrieb

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Nathan Kinder
On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Simo Sorce
On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: > Am 15.10.2012 15:50, schrieb Simo Sorce: > > On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: > >> Am 14.10.2012 23:14, schrieb Simo Sorce: > >>> On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: > >>> Right I am ok with sambaPwdMustC

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Marc Grimme
Am 15.10.2012 15:50, schrieb Simo Sorce: > On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: >> Am 14.10.2012 23:14, schrieb Simo Sorce: >>> On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: >>> Right I am ok with sambaPwdMustChange not being set. That's all good. >>> What about sambaPwdLas

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-15 Thread Rob Crittenden
Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I am ok with sambaPwdMustChange not being set. That's all good. What about sambaPwdLastSet ? Not set when a user is created new. When I change the password: sambaPwdLastSet: 0

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-15 Thread Simo Sorce
On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: > Am 14.10.2012 23:14, schrieb Simo Sorce: > > On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: > > Right I am ok with sambaPwdMustChange not being set. That's all good. > > What about sambaPwdLastSet ? > Not set when a user is created new.

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-15 Thread Marc Grimme
Am 14.10.2012 23:14, schrieb Simo Sorce: > On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: > Right I am ok with sambaPwdMustChange not being set. That's all good. > What about sambaPwdLastSet ? Not set when a user is created new. When I change the password: sambaPwdLastSet: 0 Not working with

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-14 Thread Simo Sorce
On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: > After me switching to > ldap passwd sync = only > I cannot see it changing the values if already set. > But for new users it might not be set. As I have some without these > attributes set. > If I create a new user (say tuser2) as follows: >

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Rob Crittenden
Marc Grimme wrote: Am 12.10.2012 16:19, schrieb Simo Sorce: On Fri, 2012-10-12 at 13:20 +0200, Marc Grimme wrote: Am 11.10.2012 18:12, schrieb Simo Sorce: On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the Ker

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Marc Grimme
Am 12.10.2012 16:19, schrieb Simo Sorce: > On Fri, 2012-10-12 at 13:20 +0200, Marc Grimme wrote: >> Am 11.10.2012 18:12, schrieb Simo Sorce: >>> On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the Kerberos

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Simo Sorce
On Fri, 2012-10-12 at 13:20 +0200, Marc Grimme wrote: > Am 11.10.2012 18:12, schrieb Simo Sorce: > > On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: > >> On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: > >>> > >> No they are integrated in the Kerberos Domain of IPA but not joined to > >>

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Simo Sorce
On Fri, 2012-10-12 at 09:38 -0400, Dmitri Pal wrote: > >> Can you check if the use has the attribute sambaPwdMustChange set ? > > Should we open a ticket to manage this attribute? I thought I had a reason why it wasn't needed, but I may be wrong. I want to make sure it is/isn't but if you want t

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Dmitri Pal
On 10/12/2012 07:20 AM, Marc Grimme wrote: > Am 11.10.2012 18:12, schrieb Simo Sorce: >> On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: >>> On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: >>> No they are integrated in the Kerberos Domain of IPA but not joined to >>> the samba domain. >>>

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Marc Grimme
Am 11.10.2012 18:12, schrieb Simo Sorce: > On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: >> On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: >>> >> No they are integrated in the Kerberos Domain of IPA but not joined to >> the samba domain. >>> Ok. Sorry I'm using ldap passwd sync=Yes Is

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Simo Sorce
On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: > On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: > > On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: > >> On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: > >> They are changing their passwords via ssh, sssd (kpasswd underneath) or >

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Marc Grimme
On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: > On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: >> On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: >> They are changing their passwords via ssh, sssd (kpasswd underneath) or >> directly over kpasswd. >> >> BTW: What would be the recommen

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Simo Sorce
On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: > On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: > > On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: > >> Hello together, > >> we are running IPA on RHEL6.3 for quite some time. > >> We are also using IPA to provide the LDAP backend fo

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Marc Grimme
On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: > On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: >> Hello together, >> we are running IPA on RHEL6.3 for quite some time. >> We are also using IPA to provide the LDAP backend for our samba >> configuration. >> Normally everything is running

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-10 Thread Simo Sorce
On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: > Hello together, > we are running IPA on RHEL6.3 for quite some time. > We are also using IPA to provide the LDAP backend for our samba > configuration. > Normally everything is running quite ok. > > But from time to time some people inform me