2016-06-14 11:18 GMT+02:00 Rowland penny <rpenny at samba.org>:
> On 14/06/16 09:50, mathias dufresne wrote:
>
>>
>>
>> 2016-06-13 18:27 GMT+02:00 Rowland penny <rpenny at samba.org
<mailto:
>> rpenny at samba.org>>:
>>
>> On 13/06/16 13:13, mathias dufresne wrote:
>>
>> I loved to find out how to achieve that.
>>
>> I did looked for information, all I found was that:
>>
>>
https://social.technet.microsoft.com/Forums/en-US/3e184d10-09e3-4eab-9131-6694b86879f8/modify-default-value-of-loginshell-attribute?forum=winserverDS
>>
>> Unfortunately it seems to list all users (I don't know
these
>> MS commands
>> but "Get-AdUser -Filter"...) then sending that list
to
>> something to modify
>> received users list ("Set-AdObject -Replace
>> @{unixhomedirectory='/bin/sh','bin/bash'}"
and
>> https://technet.microsoft.com/en-us/library/ee617215.aspx).
>>
>>
>> You could always use ldbmodify on the Samba4 DC and the attribute
>> you need to change for the users login shell is
'loginShell' :-)
>>
>>
>> Yep, MS doc, the dude who wrote that made a mistake, he tried to help
at
>> least.
>>
>
> And you passed the mistake on Mathias ! I was trying to help by pointing
> this out and giving a known working way of changing the contents of the
> 'loginShell' attribute.
>
And I knew what I was doing. If strings some reader is not able to notice
that "unixhomedirectory" is more certainly related to UNIX Home
Directory
than to login shell, I can't do anything for him.
>
>
>
>>
>> I would have looked into AD schema and configuration DIT (or
>> naming
>> context?) but first I did a grep on Samba's source tree
>> looking for
>> "/bin/sh" string but that strnig seems to be used for
running
>> commands and
>> shebangs only, I could easily have missed something anyway.
>>
>>
>> Try reading
>>
>>
/usr/local/samba/share/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt
>> Note: the path to your copy may vary.
>>
>>
>> I thought schemas were descriptions of attributes and classes, not
places
>> to set values. As I could be wrong, I used grep to read that file:
>> cat `locate MS-AD_Schema_2K8_R2_Attributes.txt` | grep sh -w -> no
>> answer, "sh" (as word) is not present in that file.
>> There is still a chance it is written in configuration DIT but as the
>> same grep was done during the week-end on the whole Samba 4.4.4 source
tree
>> without findind more relevant traces of "sh" word, I'm
now suspecting the
>> client is the one managing that.
>>
>
> So you think you will find the content of something that is set on windows
> in the Samba source code ?
No. I tried to find out if it was set from client side or from server side.
> Windows ADUC default content for the 'loginShell' attribute is
'/bin/sh'.
How do you know that for sure? Have you a lilnk to pass to us? Anything to
share your knowledge?
> The Samba default content for the 'loginShell' attribute is '
' ,
Reading that I would understand there is some code to have some default.
> yes that's right, there isn't one!
>
And that the default value is an empty string.
Did you really meant that? In any case, what make you affirm that? Again,
some link to help us ? To share your knowledge with us?
> You are also correct, 'sh' isn't in the the list of Attributes,
because it
> is the content of an attribute, not an attribute.
Useless and obvious, as usual.
> The file I pointed you to, is a list of all the attributes you can use on
> a Samba 4 AD DC, there is a similar file that contains all the
> objectclasses.
>
Useless and obvious, as usual.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>