Prev: Samba and Cups - number of copies
Next: [Samba] PAM with Samba
From: Gaiseric Vandal on 16 Mar 2010 13:00
On 03/16/2010 09:38 AM, Vincent Zakofski wrote:
> Hello,
>
> I'm using samba with ldap backend and I would like to know if there's a way
> to add a second password to a user account.
> I need this to work in the user environment without asking him his password.
> If it's not possible, is there a way to test the user environment without a
> user intervention?
>
> Thanks for your help.
>
I would think the simplest thing would probably be to use a GUI LDAP
browser (you could use the command line ldap tools) to copy the user's
password to a text file for backup, change the password to something you
know, then copy the old password back when done.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Vincent Zakofski on 19 Mar 2010 05:30
Ok that could do the trick but I don't find it so handy.
My idea was to create a common second password for each user after it was
created in the ldap database.
This password would only be known by the sysadmin and allow him to log in
without any modification to the user environment when it's needed.

In short: I would like to create one login with 2 passwords.
Password A would only be known by the user.
Password B only known by the sysadmin.

In this way the sysadmin can avoid to ask password A of the user if he must
work in his environment.

2010/3/16 Gaiseric Vandal <gaiseric.vandal(a)gmail.com>

> On 03/16/2010 09:38 AM, Vincent Zakofski wrote:
>
>> Hello,
>>
>> I'm using samba with ldap backend and I would like to know if there's a
>> way
>> to add a second password to a user account.
>> I need this to work in the user environment without asking him his
>> password.
>> If it's not possible, is there a way to test the user environment without
>> a
>> user intervention?
>>
>> Thanks for your help.
>>
>>
> I would think the simplest thing would probably be to use a GUI LDAP
> browser (you could use the command line ldap tools) to copy the user's
> password to a text file for backup, change the password to something you
> know, then copy the old password back when done.
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Zoolook on 19 Mar 2010 08:10
2010/3/19 Vincent Zakofski <vlamsdoem(a)gmail.com>:

> In this way the sysadmin can avoid to ask password A of the user if he must
> work in his environment.


Hm, don't do that unless you have your user's written permission.
Depending on where you live, you could get into legal trouble.

We ask the password to our users and after we did whatever we wanted
to do on the account, we simply ask them to change the password so
they know we won't mess with their information.

Anyway, if really really really really really really really want to
mess with users' info without they knowing, you could setup LDAP to
store clear-text passwords, and configure samba to sync unix
passwords. Then simple read userpassword attribute from ldap.

HTH,
Norberto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: Samba and Cups - number of copies
Next: [Samba] PAM with Samba