Samba4 & Ldap

[Andrew Bartlett]

On Tue, 2012-07-17 at 15:46 +0200, miquel wrote:
> we are testing integration samba4 withopenam (old opensso), and arise
> some questions:
> 
> - The error codes from samba4, not follow the same sintax that AD error
> codes:
> 
> for the same error:
> /_Samba4:_
> Enter LDAP Password:
> ldap_bind: Invalid credentials (49)
>         additional info: Simple Bind Failed: NT_STATUS_PASSWORD_MUST_CHANGE
> 
> _AD_
> Enter LDAP
> Password:                                                                                                                                        
> 
> ldap_bind: Invalid credentials (49)
>         additional info: 80090308: LdapErr: DSID-0C0903A9, comment:
> AcceptSecurityContext error, data 773, v1db1/
> 
> is desirable that samba4  ldap had the same error format as AD ?

Patches welcome (otherwise, please file a bug)

> - It's possible to change samba4 password (ldap, kerberos and nt, all
> sync) from samba4 ldap using ldapmodify ?

Yes, there is only one password in Samba4.  These are just different
interfaces to the same password.  Use 'userPassword' or 'unicodePwd' in
the same way you would against AD. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org