samba - Dec 2017 - ADUC missing msNPAllowDialin and need vpn advice for ad setup.

On Thu, 14 Dec 2017 12:23:43 +0100
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Hai Rowland, 
> 
> 
> Even that msNPAllowDialin is a standard attribute, its not in my AD
> anymore, at least not within the users fields. I think in time this
> disapert wil fixing things.. This setup is running and upgraded as of
> samba 4.1. but thank for that info, reading that after my lunch. 
> 
> If i have more questions, i'll mail again. 
> Thanks! 
> 
> Greetz, 
> 
> Louis
> 
Go and have a look in:
 /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt

Rowland

Louis,
Take a look here:
https://windowsexplored.com/2012/10/23/installing-active-directory-and-all-those-other-little-tabs-in-windows-7-you-know-the-ones-you-used-to-have-in-windows-xp/

At the bottom of the page it tells you how to set the msNPAllowDialin attribute
using Advanced  Features of ADUC and the Attribute Editor tab despite the
missing Dial-In tab.

If you want to restore the Dial-In tab, the Microsoft have a workaround:
https://support.microsoft.com/en-us/help/975448/the-dial-in-tab-is-not-available-in-the-active-directory-users-and-com

But you need access to a Windows Server 2008, which you may not have available.

HTH,

Roy
> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland
> Penny via samba
> Sent: 14 December 2017 11:38
> To: samba at lists.samba.org
> Subject: Re: [Samba] ADUC missing msNPAllowDialin and need vpn advice for
ad
> setup.
> 
> On Thu, 14 Dec 2017 12:23:43 +0100
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
> 
> > Hai Rowland,
> >
> >
> > Even that msNPAllowDialin is a standard attribute, its not in my AD
> > anymore, at least not within the users fields. I think in time this
> > disapert wil fixing things.. This setup is running and upgraded as of
> > samba 4.1. but thank for that info, reading that after my lunch.
> >
> > If i have more questions, i'll mail again.
> > Thanks!
> >
> > Greetz,
> >
> > Louis
> >
> 
> Go and have a look in:
>  /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt
> 
> Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Hai Roy, 

Thanks for the reply. 

The first link, i've tried that already. 
In these steps: 
1.Open ADUC or dsa.msc.
2.Go to View and check option for Advanced Features.
3.Right-click the user account and go to the Attribute Editor tab.
4.Locate and select the msNPAllowDialin attribute.
5.Select edit and change the value to the desired value

Im missing msNPAllowDailin. 

Tried that from a Win 7, samba domain joined, nothing.
Tried that from a Win 2008R2, Not samba domain joined, again nothing. 

After adding the Dail-in tab enable on my management pc (win7) im getting:
Dail-in Page error: 
 Could not load the Dail-in profile for this user because: undefined errror.  

And this is on every user. 

The second link, i've also tried that also, but tried also some extra
things.
Now the following happens, i used workaround 2. 
>From the win2008R2, accessing its own, the win2008R2 AD, Dail-in tab is
there, and everything looks ok.
Now i connect to the Samba AD, Dail-in tab is gone, but no errors. 
Now i connect from my Win7 ( with the from 2008R2 added files to enable the
dailin tab, error:
 Could not load the Dail-in profile for this user because: undefined errror.  

Rowland, do you know a way to validate my AD against
/usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt
Im really not crazy, ;-) maybe sometimes a bit, but not now ;-) 
Or a nifty search/edit, this is one i cant figure out. 

I suspect this is a left over from an AD error about 2 years ago. 
samba-tool fixed that but i think this is a left over, just not sure about it. 

So anyone any other tips? 

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roy 
> Eastwood via samba
> Verzonden: donderdag 14 december 2017 13:13
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] ADUC missing msNPAllowDialin and need 
> vpn advice for ad setup.
> 
> Louis,
> Take a look here:
> https://windowsexplored.com/2012/10/23/installing-active-direc
tory-and-all-those-other-little-tabs-in-windows-7-you-know-the->
ones-you-used-to-have-in-windows-xp/
> 
> At the bottom of the page it tells you how to set the 
> msNPAllowDialin attribute using Advanced  Features of ADUC 
> and the Attribute Editor tab despite the missing Dial-In tab.
> 
> If you want to restore the Dial-In tab, the Microsoft have a 
> workaround: 
> https://support.microsoft.com/en-us/help/975448/the-dial-in-ta
> b-is-not-available-in-the-active-directory-users-and-com  
> 
> But you need access to a Windows Server 2008, which you may 
> not have available.
> 
> HTH,
> 
> Roy
> 
> > -----Original Message-----
> > From: samba [mailto:samba-bounces at lists.samba.org] On 
> Behalf Of Rowland
> > Penny via samba
> > Sent: 14 December 2017 11:38
> > To: samba at lists.samba.org
> > Subject: Re: [Samba] ADUC missing msNPAllowDialin and need 
> vpn advice for ad
> > setup.
> > 
> > On Thu, 14 Dec 2017 12:23:43 +0100
> > "L.P.H. van Belle via samba" <samba at
lists.samba.org> wrote:
> > 
> > > Hai Rowland,
> > >
> > >
> > > Even that msNPAllowDialin is a standard attribute, its 
> not in my AD
> > > anymore, at least not within the users fields. I think in 
> time this
> > > disapert wil fixing things.. This setup is running and 
> upgraded as of
> > > samba 4.1. but thank for that info, reading that after my lunch.
> > >
> > > If i have more questions, i'll mail again.
> > > Thanks!
> > >
> > > Greetz,
> > >
> > > Louis
> > >
> > 
> > Go and have a look in:
> >  /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt
> > 
> > Rowland
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Readin : https://wiki.samba.org/index.php/Samba_AD_schema_extensions 

Is it an option to make an ldiff for the  msNPAllowDialin  and others on that
Dail-in Tab.
Im looking at the automount example. 
Hints tips? 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> L.P.H. van Belle via samba
> Verzonden: donderdag 14 december 2017 13:44
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] ADUC missing msNPAllowDialin and need 
> vpn advice for ad setup.
> 
> Hai Roy, 
> 
> Thanks for the reply. 
> 
> The first link, i've tried that already. 
> In these steps: 
> 1.Open ADUC or dsa.msc.
> 2.Go to View and check option for Advanced Features.
> 3.Right-click the user account and go to the Attribute Editor tab.
> 4.Locate and select the msNPAllowDialin attribute.
> 5.Select edit and change the value to the desired value
> 
> Im missing msNPAllowDailin. 
> 
> Tried that from a Win 7, samba domain joined, nothing.
> Tried that from a Win 2008R2, Not samba domain joined, again nothing. 
> 
> After adding the Dail-in tab enable on my management pc 
> (win7) im getting:
> Dail-in Page error: 
>  Could not load the Dail-in profile for this user because: 
> undefined errror.  
> 
> And this is on every user. 
> 
> The second link, i've also tried that also, but tried also 
> some extra things. 
> Now the following happens, i used workaround 2. 
> 
> From the win2008R2, accessing its own, the win2008R2 AD, 
> Dail-in tab is there, and everything looks ok. 
> Now i connect to the Samba AD, Dail-in tab is gone, but no errors. 
> Now i connect from my Win7 ( with the from 2008R2 added files 
> to enable the dailin tab, error:
>  Could not load the Dail-in profile for this user because: 
> undefined errror.  
> 
> Rowland, do you know a way to validate my AD against 
> /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt
> Im really not crazy, ;-) maybe sometimes a bit, but not now ;-) 
> Or a nifty search/edit, this is one i cant figure out. 
> 
> I suspect this is a left over from an AD error about 2 years ago. 
> samba-tool fixed that but i think this is a left over, just 
> not sure about it. 
> 
> So anyone any other tips? 
> 
> Greetz, 
> 
> Louis
> 
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roy 
> > Eastwood via samba
> > Verzonden: donderdag 14 december 2017 13:13
> > Aan: samba at lists.samba.org
> > Onderwerp: Re: [Samba] ADUC missing msNPAllowDialin and need 
> > vpn advice for ad setup.
> > 
> > Louis,
> > Take a look here:
> > https://windowsexplored.com/2012/10/23/installing-active-direc
> tory-and-all-those-other-little-tabs-in-windows-7-you-know-the
> -> ones-you-used-to-have-in-windows-xp/
> > 
> > At the bottom of the page it tells you how to set the 
> > msNPAllowDialin attribute using Advanced  Features of ADUC 
> > and the Attribute Editor tab despite the missing Dial-In tab.
> > 
> > If you want to restore the Dial-In tab, the Microsoft have a 
> > workaround: 
> > https://support.microsoft.com/en-us/help/975448/the-dial-in-ta
> > b-is-not-available-in-the-active-directory-users-and-com  
> > 
> > But you need access to a Windows Server 2008, which you may 
> > not have available.
> > 
> > HTH,
> > 
> > Roy
> > 
> > > -----Original Message-----
> > > From: samba [mailto:samba-bounces at lists.samba.org] On 
> > Behalf Of Rowland
> > > Penny via samba
> > > Sent: 14 December 2017 11:38
> > > To: samba at lists.samba.org
> > > Subject: Re: [Samba] ADUC missing msNPAllowDialin and need 
> > vpn advice for ad
> > > setup.
> > > 
> > > On Thu, 14 Dec 2017 12:23:43 +0100
> > > "L.P.H. van Belle via samba" <samba at
lists.samba.org> wrote:
> > > 
> > > > Hai Rowland,
> > > >
> > > >
> > > > Even that msNPAllowDialin is a standard attribute, its 
> > not in my AD
> > > > anymore, at least not within the users fields. I think in 
> > time this
> > > > disapert wil fixing things.. This setup is running and 
> > upgraded as of
> > > > samba 4.1. but thank for that info, reading that after my
lunch.
> > > >
> > > > If i have more questions, i'll mail again.
> > > > Thanks!
> > > >
> > > > Greetz,
> > > >
> > > > Louis
> > > >
> > > 
> > > Go and have a look in:
> > >  
> /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt
> > > 
> > > Rowland
> > > 
> > > --
> > > To unsubscribe from this list go to the following URL and read
the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>