[Samba] LDAP Extended attributes and dsheuristics

Ben Curtis samba at nosolutions.com
Tue May 30 15:23:52 UTC 2023


Hi all,

I can only find posts about extended attributes from ~10 years ago, so
I figured I'd ask this here. I get the following error when trying to
change passwords on my Samba 4.7 AD via LDAP:

```
ldap_exop_passwd(): Passwd modify extended operation failed: Extended
Operation(1.3.6.1.4.1.4203.1.11.1) not supported
```

Is this feature (1.3.6.1.4.1.4203.1.11.1) still not supported? Also, I
have tried setting dsHeuristics for iutem 9 (fUserPwdSupport) to 1
with:

```
samba-tool forest directory_service dsheuristics 000000001
```

But there doesn't seem to be a way to get it to reset to "default
value" (empty). Any ideas how I would do that?

Thanks,
Ben


More information about the samba mailing list