Hi, On my SuSE 10.1 linux server, I have successfully joined an AD server (which I setup) and am able to create users and groups etc.. on the ADS using the net command. My problem is I cannot (or at least I don't know how) to add/remove users to groups on the AD from my linux box. Is it possible to do this as I can't seem to find any literature on this? I am running samba (and client) version 3.0.22. If anyone has any other ideas on how to manipulate group memberships from Linux on an AD server, that would be also greatly appreciated. Thanks, //Norbert
Felipe Augusto van de Wiel
2006-Sep-29 15:41 UTC
[Samba] net command and modifying groups in AD
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/21/2006 06:02 AM, Norbert Furlani escreveu:> Hi, > > On my SuSE 10.1 linux server, I have successfully joined an AD server > (which I setup) and am able to create users and groups etc.. on the ADS > using the net command. My problem is I cannot (or at least I don't know > how) to add/remove users to groups on the AD from my linux box. Is it > possible to do this as I can't seem to find any literature on this? I am > running samba (and client) version 3.0.22. > > If anyone has any other ideas on how to manipulate group memberships > from Linux on an AD server, that would be also greatly appreciated.I don't think it is possible in Samba3 (but I think it is possible in Samba4). The main point is that usually you are just a member server in AD, which means read-only (and access to change pre-defined options). AD is a LDAP Server, so, you could use some binding and commands to change it directly, but I don't think you could use regular samba commands to change group membership.> Thanks, > //NorbertKind regards, - -- Felipe Augusto van de Wiel <felipe@paranacidade.org.br> Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHT5vCj65ZxU4gPQRAkRZAJ9COgcGqwKv+VoXB+OPOPU03pdkBgCfbKgt bic/4WKuG2/nwVlcrtUzPGw=qT1Y -----END PGP SIGNATURE-----