[K12OSN] Re: ldap sucess!!! AND webmin

Fri Jul 28 19:55:53 UTC 2006

Sorry guys I might have spoken too soon about the webmin ldap module.
Now that I have a windows machine in the domain I see a problem.  all
users created with clear passwords with the batch fille or the form
get sambaNTPassword: set.   all users created with pre-encrypted
passwords with the batch file or the form do not get sambaNTPassword:
set.   here's examples of two users  if anyone with more experience
has any idea what's going on:

pre-encrypted:

[root at ascldap sbin]# ./smbldap-usershow test2 | sort
cn: test2
dn: uid=test2,ou=Users,dc=ascensionschoolnyc,dc=org
gecos: test2
gidNumber: 525
homeDirectory: /home/test2
loginShell: /bin/bash
objectClass: posixAccount,shadowAccount,top,inetOrgPerson,sambaSamAccount
sambaAcctFlags: [UD         ]
sambaHomeDrive: X:
sambaHomePath: \\ASCENSION-PDC\homes\test2
sambaLMPassword: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
sambaLogonScript: startup.bat
sambaNTPassword: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
sambaPrimaryGroupSID: S-1-5-21-1453257060-3969185860-1897528768-2050
sambaProfilePath: \\ASCENSION-PDC\profiles\test2
sambaSID: S-1-5-21-1453257060-3969185860-1897528768-2356
shadowLastChange: 13357
sn: test2
uidNumber: 678
uid: test2
userPassword: {crypt}$1$27757942$AA6YK9nJTlqNGPo2S9d3d/

----------------------------------------------
clear:

[root at ascldap sbin]# ./smbldap-usershow smbtest71 | sort
cn: testun
dn: uid=smbtest71,ou=Users,dc=ascensionschoolnyc,dc=org
gecos: testun
gidNumber: 525
homeDirectory: /home/smbtest71
loginShell: /bin/bash
objectClass: posixAccount,shadowAccount,top,inetOrgPerson,sambaSamAccount
sambaAcctFlags: [U          ]
sambaHomeDrive: X:
sambaHomePath: \\ASCENSION-PDC\homes\smbtest71
sambaLMPassword: 01FC5A6BE7BC6929AAD3B435B51404EE
sambaLogonScript: startup.bat
sambaNTPassword: 0CB6948805F797BF2A82807973B89537
sambaPrimaryGroupSID: S-1-5-21-1453257060-3969185860-1897528768-2050
sambaProfilePath: \\ASCENSION-PDC\profiles\smbtest71
sambaPwdCanChange: 1154107610
sambaPwdLastSet: 1154107610
sambaSID: S-1-5-21-1453257060-3969185860-1897528768-4802
shadowLastChange: 13357
sn: smbtest71
uidNumber: 1901
uid: smbtest71
userPassword: {crypt}ORkhmM4BUAWgQ

any ideas?

Thanks!
Peter

On 7/15/06, Peter Hartmann <ascensiontech at gmail.com> wrote:
> Ok, so the one time I decide not to do a media check THREE out of 5
> discs fail. but all md5sums pass.  And no matter how many I burn them
> they always fail.  NFS install is my new friend that's for sure.  Also
> the new webmin-1.290-1 has the samba create user part fixed with
> create users from batch file. One thing I noticed: with creating users
> with pre encrypted passwords, it would only work if you set the module
> to use {crypt}.  Thank you guys for all the help.  Sorry to put you
> through all that idiocy.  Chuck I'm definitely interested in what you
> do to manipulate all this stuff.
>
>
> Thanks,
> Peter
>
>
> On 7/14/06, cliebow at midmaine.com <cliebow at midmaine.com> wrote:
> > Boy im glad i dont have to use smbldap-tools any longer..it is so much
> > clearer what is going on without them.......
> >
> > > I notice the the -a has a long - before the a. Might that have
> > > something to do with it?
> > >
> > > On 15/07/06, David Trask <dtrask at vcsvikings.org> wrote:
> > >> hmmm...worked fine for me....I did
> > >>
> > >>  ./smbldap-groupadd -a -g 527 testusers
> > >>
> > >> Nonetheless...this time do this and report back (do it exactly like
> > >> below)
> > >>
> > >> cd /opt/IDEALX/sbin
> > >> ./smbldap-groupadd -a -g 525 students
> > >>
> > >> let me know what happen....may make no difference, but that's what I
> > >> did...so let's eliminate from there.
> > >>
> > >>
> > >> "Support list for opensource software in schools." <k12osn at redhat.com>
> > >> on
> > >> Fri Jul 14 2006 at 15:31 +0000 wrote:
> > >> >Hey guys,  so here's what's going on with this fresh install.  I think
> > >> >I may have found a clue to a problem.
> > >> >
> > >> >[root at ascldap samba]# /opt/IDEALX/sbin/smbldap-groupadd –a –g 525
> > >> students
> > >> >[root at ascldap samba]# /opt/IDEALX/sbin/smbldap-groupadd –a –g 526
> > >> teachers
> > >> >/opt/IDEALX/sbin/smbldap-groupadd: group –a exists
> > >> >[root at ascldap samba]# net groupmap list
> > >> >Domain Admins (S-1-5-21-1653893-93114141-1052929415-512) -> Domain
> > >> Admins
> > >> >Domain Users (S-1-5-21-1653893-93114141-1052929415-513) -> Domain Users
> > >> >Domain Guests (S-1-5-21-1653893-93114141-1052929415-514) -> Domain
> > >> Guests
> > >> >Domain Computers (S-1-5-21-1653893-93114141-1052929415-515) -> Domain
> > >> >Computers
> > >> >Administrators (S-1-5-32-544) -> Administrators
> > >> >Account Operators (S-1-5-32-548) -> Account Operators
> > >> >Print Operators (S-1-5-32-550) -> Print Operators
> > >> >Backup Operators (S-1-5-32-551) -> Backup Operators
> > >> >Replicators (S-1-5-32-552) -> Replicators
> > >> >
> > >> >
> > >> >Is it trying to say that in the first command that I created a groupe
> > >> >name "-a" ?  I've tried smbldap-userdel -a and "-a" but it says
> > >> >unknown option.  For the record I don't have guid 526 already.
> > >> >
> > >> >
> > >> >Once again getent group shows this mysterious group named
> > >> >\E2\80\93a:x:10000: for the user that I just created with
> > >> >smbldap-useradd.
> > >> >
> > >> >
> > >> >excerpt-------
> > >> >
> > >> >admin4:x:500:
> > >> >Domain Admins:x:512:root
> > >> >Domain Users:x:513:test9
> > >> >Domain Guests:x:514:
> > >> >Domain Computers:x:515:
> > >> >Administrators:x:544:
> > >> >Account Operators:x:548:
> > >> >Print Operators:x:550:
> > >> >Backup Operators:x:551:
> > >> >Replicators:x:552:
> > >> >\E2\80\93a:x:10000:
> > >> >
> > >> >
> > >> >Intuition is telling me that my smbldap-tools are messed up but I'm
> > >> >not sure to check that.
> > >> >
> > >> >I posted the results of the tests at test.ascensionschoolnyc.org/ldap.
> > >> >
> > >> >What the heck going on?  I swear I did a COMPLETE format.
> > >> >
> > >> >
> > >> >Thanks,
> > >> >Peter
> > >> >
> > >> >_______________________________________________
> > >> >K12OSN mailing list
> > >> >K12OSN at redhat.com
> > >> >https://www.redhat.com/mailman/listinfo/k12osn
> > >> >For more info see <http://www.k12os.org>
> > >>
> > >>
> > >>
> > >> David N. Trask
> > >> Technology Teacher/Director
> > >> Vassalboro Community School
> > >> dtrask at vcsvikings.org
> > >> (207)923-3100
> > >>
> > >>
> > >> _______________________________________________
> > >> K12OSN mailing list
> > >> K12OSN at redhat.com
> > >> https://www.redhat.com/mailman/listinfo/k12osn
> > >> For more info see <http://www.k12os.org>
> > >>
> > >
> > >
> > > --
> > > Please note my new email address-
> > > krsnendu108 at gmail.com
> > >
> > > _______________________________________________
> > > K12OSN mailing list
> > > K12OSN at redhat.com
> > > https://www.redhat.com/mailman/listinfo/k12osn
> > > For more info see <http://www.k12os.org>
> > >
> >
> >
> > _______________________________________________
> > K12OSN mailing list
> > K12OSN at redhat.com
> > https://www.redhat.com/mailman/listinfo/k12osn
> > For more info see <http://www.k12os.org>
> >
>