Change samba password

[muzzol]

hi,

can i customize the way passwords are changed?

im using LDAP for SSO with lot of services and i need samba synchronization. it would be nice to change passwords from egroupware.

i’ve done some tests and changing passwords works right for LDAP. is there, for example, a way to execute a script after password is changed?

regards,

muzzol

[Jerry_Ruhe]

unix/samba sync is part of the smb.conf
Id suggest checking the ‘Samba 3 by example’ manual. It explains it in there
much better then I could.
Just so you know it is indeed possible… I do it on my system, works
without a hitch.

Jer

hi,

can i customize the way passwords are changed?

im using LDAP for SSO with lot of services and i need samba
synchronization.
it would be nice to change passwords from egroupware.

i’ve done some tests and changing passwords works right for LDAP. is
there,
for example, a way to execute a script after password is changed?

regards,

muzzol

–
View this message in context:
http://www.nabble.com/change-samba-password-tp14505865s3741p14505865.html
Sent from the egroupware-users mailing list archive at Nabble.com.

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[muzzol]

unix/samba sync is part of the smb.conf
Id suggest checking the ‘Samba 3 by example’ manual. It explains it in there
much better then I could.
Just so you know it is indeed possible… I do it on my system, works
without a hitch.

i know there’s ways to sync ldap/unix passwords when samba password changes, but i want to do the oposite. as far as i know samba only updates passwords when its own password is changed (via smbpasswd), but is not monitoring changes on the unix side.

[Jerry_Ruhe]

Ever since I have used LDAP in the backend Ive always used smbldap-passwd
for changing user passwords.

Perhaps these few lines of the PDC smb.conf may help:

—snip—
add user script = /usr/sbin/smbldap-useradd -m '%u’
delete user script = /usr/sbin/smbldap-userdel '%u’
add group script = /usr/sbin/smbldap-groupadd -p '%g’
delete group script = /usr/sbin/smbldap-groupdel '%g’
add user to group script = /usr/sbin/smbldap-groupmod -m ‘%u’ '%g’
delete user from group script = /usr/sbin/smbldap-groupmod -x ‘%u’ '%g’
set primary group script = /usr/sbin/smbldap-usermod -g ‘%g’ '%u’
add machine script = /usr/sbin/smbldap-useradd -w '%u’
ldap passwd sync = Yes
unix password sync = Yes
passwd program = /usr/sbin/smbldap-passwd -u %u
passwd chat = Newpassword* %n\n Retypenewpassword %n\n
—snip—

Jer

Jerry Ruhe wrote:

unix/samba sync is part of the smb.conf
Id suggest checking the ‘Samba 3 by example’ manual. It explains it in
there
much better then I could.
Just so you know it is indeed possible… I do it on my system, works
without a hitch.

i know there’s ways to sync ldap/unix passwords when samba password
changes,
but i want to do the oposite. as far as i know samba only updates
passwords
when its own password is changed (via smbpasswd), but is not monitoring
changes on the unix side.

–
View this message in context:
http://www.nabble.com/change-samba-password-tp14505865s3741p14506928.html
Sent from the egroupware-users mailing list archive at Nabble.com.

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[muzzol]

Ever since I have used LDAP in the backend Ive always used smbldap-passwd
for changing user passwords.

Perhaps these few lines of the PDC smb.conf may help:

i think i didnt explain my problem correctly.

i want users to change their password through egroupware (Preferences -> change password).

if i do that ldap password is changed, but only ldap, not samba. i supose the cange is pushed directly into ldap.

that configuration you gave me only allows to update ldap passwords once samba password is changed.

does that make any sense to you?

[Jerry_Ruhe]

ah ha… now i get ya.
let me try my system and see what happens.

j

Jerry Ruhe wrote:

Ever since I have used LDAP in the backend Ive always used smbldap-passwd
for changing user passwords.

Perhaps these few lines of the PDC smb.conf may help:

i think i didnt explain my problem correctly.

i want users to change their password through egroupware (Preferences ->
change password).

if i do that ldap password is changed, but only ldap, not samba. i supose
the cange is pushed directly into ldap.

that configuration you gave me only allows to update ldap passwords once
samba password is changed.

does that make any sense to you?

–
View this message in context:
http://www.nabble.com/change-samba-password-tp14505865s3741p14507108.html
Sent from the egroupware-users mailing list archive at Nabble.com.

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[Marco_Gaiarin-3]

Mandi! muzzol
In chel dì si favelave…

does that make any sense to you?

…have you leooked at ‘sambaadmin’ module? It is rather suboptimal and
undocumented, but seems do what you want, clearly if you put all the
data on LDAP.

I say ‘suboptimal’ because a full fledged system will take into account
also password expiration, and sync expiration between samba, egw and
POSIX.

Now i’m using the converse, i use windows to setup password, and a
script that sync password expiration from Samba to egw (and posix, of
course).
But on another installation the ‘remote’ user are preminant, so a full
working password management in egw will be really a benefit.

Some hint/info from developers for future release in this?

–
Il Re di Spagna fece vela, verso l’isola incantata
pero` quell’isola non c’era,
e mai nessuno l’ha trovata (F. Guccini)

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[decibel83]

Now i’m using the converse, i use windows to setup password, and a
script that sync password expiration from Samba to egw (and posix, of
course).

Hi Marco! Could you send us this script?
It would be very useful for us. Is it released as GPL?

Ciao Marco! Potresti mandarci questo script?
Sarebbe molto utile. E’ rilasciato in GPL?

Thank you very much!
Bye.

[Marco_Gaiarin-3]

Mandi! decibel83
In chel dì si favelave…

Hi Marco! Could you send us this script?
It would be very useful for us. Is it released as GPL?

…it is rather an hack then a real script, and it is tailored on
PHPGroupWare that i use at work, that use a different LDAP schema, so
could be that some modification have to be done.

It is GPL, but i’ll send you in private mail, say me if someone else
need it.

–
…coraggio liberisti, buttate giu’ le carte
tanto ci sarasempre chi paghera le spese
in questo benedetto assurdo bel paese. (F. Guccini)

---

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[shri-4]

SITUATION I AM TRAPPED IN IS SOMEWHAT RELATED TO THIS THREAD, SO POSTING HERE. PLEASE ADVICE.

My configuration.

We use egroupware, on fallback of ldap->sql mode authentication.
LDAP is for employees .

So if employees ldap login matches, account gets created and let them login,puts them in employees(defaultgroup).
& for Customers account :i have created manually in linux & database. (pwd same at both place)

Now the situation is customers want to change their password, but if they do,they lose access to the imap server. May be because no one changes pwd on linux for them.

So basically looking some setup that on successful password change on egroupware i want to execute a script on linux server that sets the same password for that user.

Please suggest a solution & guide if missing something basic.

Thank you.