AFP548 Changing the world one server at a time.

A-bomb

Forum Replies Created

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • in reply to: 10.4.8 Intel – AD, Samba kerberos machine password #368470
    A-bomb
    Participant

    rrathnam,

    I had some of those exact issues, these tips will help you:
    1) the kerb password should be listed below the long string “\01\04\00\00\00\00\00\05\…”
    2) put the script in /usr/bin to make the ‘command not found’ error go away

    I get this too every time when run: (maybe this is preventing me from getting a true successful run?)
    “The domain/default pair of (DirectoryService/ActiveDirectory, AD Computer Password) does not exist”

    I still end up with “\00” as the new password, even with what looks like a successful run, SMB AD auth still doesn’t work

    Where are Schoun & Joel when we need them 😯

    in reply to: 10.4.8 Intel – AD, Samba kerberos machine password #368453
    A-bomb
    Participant

    Dearest Gods,

    I ran this, got the password:
    sudo tdbdump /var/db/samba/secrets.tdb

    I created this with TextWrangler and saved it in /usr/bin as a executable file:
    #!/usr/bin/expect -f
    #Hack to change samba machine password non-interactively
    set machinepw [lindex $argv 0]
    spawn net -f changesecretpw
    expect “password:”
    send “$machinepw\r”
    expect eof

    I ran this:
    sudo changesecret $(defaults read /Library/Preferences/DirectoryService/ActiveDirectory “AD Computer Password”| /usr/bin/tr -d “< >” | /usr/bin/xxd -r -p)

    I ran this again but the output was simply “\00” for the password:
    sudo tdbdump /var/db/samba/secrets.tdb

    Rebooted but the password stayed as “\00”

    Please, please tell me what I’m doing wrong, even if you feel the need to state the very obvious like creating the script
    😐

Viewing 2 posts - 1 through 2 (of 2 total)