Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-17 Thread Marc Grimme
Am 16.10.2012 23:40, schrieb Simo Sorce: On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Marc Grimme
Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I am ok with sambaPwdMustChange not being set. That's all good. What about sambaPwdLastSet ? Not

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Simo Sorce
On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I am ok with sambaPwdMustChange not

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Nathan Kinder
On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Simo Sorce
On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce:

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Nathan Kinder
On 10/16/2012 02:40 PM, Simo Sorce wrote: On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo Sorce: On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-16 Thread Simo Sorce
On Tue, 2012-10-16 at 14:51 -0700, Nathan Kinder wrote: On 10/16/2012 02:40 PM, Simo Sorce wrote: On Tue, 2012-10-16 at 14:22 -0700, Nathan Kinder wrote: On 10/16/2012 05:21 AM, Simo Sorce wrote: On Tue, 2012-10-16 at 10:06 +0200, Marc Grimme wrote: Am 15.10.2012 15:50, schrieb Simo

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-15 Thread Marc Grimme
Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I am ok with sambaPwdMustChange not being set. That's all good. What about sambaPwdLastSet ? Not set when a user is created new. When I change the password: sambaPwdLastSet: 0 Not working with

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-15 Thread Simo Sorce
On Mon, 2012-10-15 at 14:15 +0200, Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I am ok with sambaPwdMustChange not being set. That's all good. What about sambaPwdLastSet ? Not set when a user is created new. It

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-15 Thread Rob Crittenden
Marc Grimme wrote: Am 14.10.2012 23:14, schrieb Simo Sorce: On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: Right I am ok with sambaPwdMustChange not being set. That's all good. What about sambaPwdLastSet ? Not set when a user is created new. When I change the password: sambaPwdLastSet:

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-14 Thread Simo Sorce
On Fri, 2012-10-12 at 16:47 +0200, Marc Grimme wrote: After me switching to ldap passwd sync = only I cannot see it changing the values if already set. But for new users it might not be set. As I have some without these attributes set. If I create a new user (say tuser2) as follows: # ipa

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Marc Grimme
Am 11.10.2012 18:12, schrieb Simo Sorce: On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the Kerberos Domain of IPA but not joined to the samba domain. Ok. Sorry I'm using ldap passwd sync=Yes Is that wrong?

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Dmitri Pal
On 10/12/2012 07:20 AM, Marc Grimme wrote: Am 11.10.2012 18:12, schrieb Simo Sorce: On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the Kerberos Domain of IPA but not joined to the samba domain. Ok. Sorry I'm

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Simo Sorce
On Fri, 2012-10-12 at 09:38 -0400, Dmitri Pal wrote: Can you check if the use has the attribute sambaPwdMustChange set ? Should we open a ticket to manage this attribute? I thought I had a reason why it wasn't needed, but I may be wrong. I want to make sure it is/isn't but if you want to

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Simo Sorce
On Fri, 2012-10-12 at 13:20 +0200, Marc Grimme wrote: Am 11.10.2012 18:12, schrieb Simo Sorce: On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the Kerberos Domain of IPA but not joined to the samba

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Marc Grimme
Am 12.10.2012 16:19, schrieb Simo Sorce: On Fri, 2012-10-12 at 13:20 +0200, Marc Grimme wrote: Am 11.10.2012 18:12, schrieb Simo Sorce: On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the Kerberos Domain of IPA

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-12 Thread Rob Crittenden
Marc Grimme wrote: Am 12.10.2012 16:19, schrieb Simo Sorce: On Fri, 2012-10-12 at 13:20 +0200, Marc Grimme wrote: Am 11.10.2012 18:12, schrieb Simo Sorce: On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: No they are integrated in the

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Marc Grimme
On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: Hello together, we are running IPA on RHEL6.3 for quite some time. We are also using IPA to provide the LDAP backend for our samba configuration. Normally everything is running quite ok.

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Simo Sorce
On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: Hello together, we are running IPA on RHEL6.3 for quite some time. We are also using IPA to provide the LDAP backend for our samba

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Marc Grimme
On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: They are changing their passwords via ssh, sssd (kpasswd underneath) or directly over kpasswd. BTW: What would be the recommended way to

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Simo Sorce
On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: They are changing their passwords via ssh, sssd (kpasswd underneath) or

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-10 Thread Simo Sorce
On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: Hello together, we are running IPA on RHEL6.3 for quite some time. We are also using IPA to provide the LDAP backend for our samba configuration. Normally everything is running quite ok. But from time to time some people inform me that