On 2020-04-01 05:51, Rowland penny via samba wrote:> On 01/04/2020 09:23, Rowland penny via samba wrote: >> On 01/04/2020 08:23, Rowland penny via samba wrote: >> On 31/03/2020 >> 22:48, David Kowis via samba wrote: >>> Howdy! >>> >>>> I'm setting up a domain controller, and things are going >>> >>>> wonderfully, but I'm running into a strange problem, only some >>> >>>> groups will display using the `samba-tool group show` command. >>> >>>> >>> <snip> root at vorador:~# samba-tool group addmembers videos dkowis >>> Added members to group videos root at vorador:~# samba-tool group >>> list | grep videos videos root at vorador:~# samba-tool group show >>> videos ERROR: Unable to find group "videos" root at vorador:~# >>> samba-tool user show dkowis | grep videos memberOf: >>> CN=videos,CN=Users,DC=dark,DC=kow,DC=is </snip> >>> >>> The group exists, I can add members to it, and those users show >>> this membership. >>> >>> I can only "show" some groups: >>> >>> <snip> root at vorador:~# samba-tool group list | egrep >>> "Administrators|Domain Users" Administrators Domain Users >>> root at vorador:~# samba-tool group show "Administrators" ERROR: >>> Unable to find group "Administrators" root at vorador:~# samba-tool >>> group show "Domain Users" dn: CN=Domain >>> Users,CN=Users,DC=dark,DC=kow,DC=is objectClass: top >>> objectClass: group cn: Domain Users description: All domain users >>> </snip> >>> >>> I'm hoping someone here canhelp me understand why some groups >>> show up using show, and some do not. I'd really like to be able >>> to see the group details, especially for the "videos" group, as >>> it'll have GID and Unix details. >>> >>> Thanks! >>> >> Strange, what version of Samba is this ? >> >> Rowland >> >> >> > No, it isn't strange, it appears (in my opinion) to be using the > wrong search filter :-( > > it uses this filter: > > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I think it should just be this: > > filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % > ldb.binary_encode(groupname))) > > The first targets a specific type of group, mine targets all groups. > > Rowland > > > Er, no it doesn't :-(> > It should be : > > ??????? filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % > ?????????????????? ldb.binary_encode(groupname)) > > RowlandI think that means it's a bug in samba-tool? Do I need to file a thing in a place? Thanks!
On 02/04/2020 05:42, David Kowis via samba wrote:> On 2020-04-01 05:51, Rowland penny via samba wrote: >> On 01/04/2020 09:23, Rowland penny via samba wrote: >>> On 01/04/2020 08:23, Rowland penny via samba wrote:? >> On >>> 31/03/2020 22:48, David Kowis via samba wrote: >>> Howdy! >>> >>>>> I'm setting up a domain controller, and things are going >>> >>>>> wonderfully, but I'm running into a strange problem, only some >>> >>>>> groups will display using the `samba-tool group show` command. >>> >>>>> >>> <snip> root at vorador:~# samba-tool group addmembers videos >>>>> dkowis >>> Added members to group videos root at vorador:~# >>>>> samba-tool group >>> list | grep videos videos root at vorador:~# >>>>> samba-tool group show >>> videos ERROR: Unable to find group >>>>> "videos" root at vorador:~# >>> samba-tool user show dkowis | grep >>>>> videos memberOf: >>> CN=videos,CN=Users,DC=dark,DC=kow,DC=is >>>>> </snip> >>> >>> The group exists, I can add members to it, and >>>>> those users show >>> this membership. >>> >>> I can only "show" >>>>> some groups: >>> >>> <snip> root at vorador:~# samba-tool group list >>>>> | egrep >>> "Administrators|Domain Users" Administrators Domain >>>>> Users >>> root at vorador:~# samba-tool group show "Administrators" >>>>> ERROR: >>> Unable to find group "Administrators" root at vorador:~# >>>>> samba-tool >>> group show "Domain Users" dn: CN=Domain >>> >>>>> Users,CN=Users,DC=dark,DC=kow,DC=is objectClass: top >>> >>>>> objectClass: group cn: Domain Users description: All domain users >>>>> >>> </snip> >>> >>> I'm hoping someone here can > help me > understand why some groups >>> show up using show, and some do not. > I'd really like to be able >>> to see the group details, especially > for the "videos" group, as >>> it'll have GID and Unix details. >>> > >>> Thanks! >>> >> Strange, what version of Samba is this ? >> >> > Rowland >> >> >> > No, it isn't strange, it appears (in my opinion) to > be using the > wrong search filter :-( > > it uses this filter: > > > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > > (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I > think it should just be this: > > filter = > ("(&(objectCategory=group)(sAMAccountName=%s))" % > > ldb.binary_encode(groupname))) > > The first targets a specific type > of group, mine targets all groups. > > Rowland > > > Er, no it doesn't > :-( >> >> It should be : >> >> ??????? filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % >> ?????????????????? ldb.binary_encode(groupname)) >> >> Rowland > > I think that means it's a bug in samba-tool? Do I need to file a thing > in a place? > > Thanks! > >No, I will prepare a patch this morning and submit it to samba-technical. Rowland
On 02/04/2020 07:25, Rowland penny via samba wrote:> On 02/04/2020 05:42, David Kowis via samba wrote: >> On 2020-04-01 05:51, Rowland penny via samba wrote: >>> On 01/04/2020 09:23, Rowland penny via samba wrote: >>>> On 01/04/2020 08:23, Rowland penny via samba wrote:? >> On >>>> 31/03/2020 22:48, David Kowis via samba wrote: >>> Howdy! >>> >>>>>> I'm setting up a domain controller, and things are going >>> >>>>>> wonderfully, but I'm running into a strange problem, only some >>>>>> >>> groups will display using the `samba-tool group show` >>>>>> command. >>> >>> <snip> root at vorador:~# samba-tool group >>>>>> addmembers videos dkowis >>> Added members to group videos >>>>>> root at vorador:~# samba-tool group >>> list | grep videos videos >>>>>> root at vorador:~# samba-tool group show >>> videos ERROR: Unable to >>>>>> find group "videos" root at vorador:~# >>> samba-tool user show >>>>>> dkowis | grep videos memberOf: >>> >>>>>> CN=videos,CN=Users,DC=dark,DC=kow,DC=is </snip> >>> >>> The group >>>>>> exists, I can add members to it, and those users show >>> this >>>>>> membership. >>> >>> I can only "show" some groups: >>> >>> <snip> >>>>>> root at vorador:~# samba-tool group list | egrep >>> >>>>>> "Administrators|Domain Users" Administrators Domain Users >>> >>>>>> root at vorador:~# samba-tool group show "Administrators" ERROR: >>> >>>>>> Unable to find group "Administrators" root at vorador:~# samba-tool >>>>>> >>> group show "Domain Users" dn: CN=Domain >>> >>>>>> Users,CN=Users,DC=dark,DC=kow,DC=is objectClass: top >>> >>>>>> objectClass: group cn: Domain Users description: All domain users >>>>>> >>> </snip> >>> >>> I'm hoping someone here can >> help me >> understand why some groups >>> show up using show, and some do not. >> I'd really like to be able >>> to see the group details, especially >> for the "videos" group, as >>> it'll have GID and Unix details. >>> >> >>> Thanks! >>> >> Strange, what version of Samba is this ? >> >> >> Rowland >> >> >> > No, it isn't strange, it appears (in my opinion) >> to be using the > wrong search filter :-( > > it uses this filter: > >> > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > >> (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I >> think it should just be this: > > filter = >> ("(&(objectCategory=group)(sAMAccountName=%s))" % > >> ldb.binary_encode(groupname))) > > The first targets a specific type >> of group, mine targets all groups. > > Rowland > > > Er, no it >> doesn't :-( >>> >>> It should be : >>> >>> ??????? filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % >>> ?????????????????? ldb.binary_encode(groupname)) >>> >>> Rowland >> >> I think that means it's a bug in samba-tool? Do I need to file a >> thing in a place? >> >> Thanks! >> >> > No, I will prepare a patch this morning and submit it to samba-technical. > > Rowland > > >OK, bug report filed: https://bugzilla.samba.org/show_bug.cgi?id=14335 Patch sent to samba-technical. Rowland