On 02/04/2020 07:25, Rowland penny via samba wrote:> On 02/04/2020 05:42, David Kowis via samba wrote:
>> On 2020-04-01 05:51, Rowland penny via samba wrote:
>>> On 01/04/2020 09:23, Rowland penny via samba wrote:
>>>> On 01/04/2020 08:23, Rowland penny via samba wrote:? >>
On
>>>> 31/03/2020 22:48, David Kowis via samba wrote: >>>
Howdy! >>>
>>>>>> I'm setting up a domain controller, and things are
going >>>
>>>>>> wonderfully, but I'm running into a strange
problem, only some
>>>>>> >>> groups will display using the `samba-tool
group show`
>>>>>> command. >>> >>> <snip> root at
vorador:~# samba-tool group
>>>>>> addmembers videos dkowis >>> Added members to
group videos
>>>>>> root at vorador:~# samba-tool group >>> list |
grep videos videos
>>>>>> root at vorador:~# samba-tool group show >>>
videos ERROR: Unable to
>>>>>> find group "videos" root at vorador:~#
>>> samba-tool user show
>>>>>> dkowis | grep videos memberOf: >>>
>>>>>> CN=videos,CN=Users,DC=dark,DC=kow,DC=is </snip>
>>> >>> The group
>>>>>> exists, I can add members to it, and those users show
>>> this
>>>>>> membership. >>> >>> I can only
"show" some groups: >>> >>> <snip>
>>>>>> root at vorador:~# samba-tool group list | egrep
>>>
>>>>>> "Administrators|Domain Users" Administrators
Domain Users >>>
>>>>>> root at vorador:~# samba-tool group show
"Administrators" ERROR: >>>
>>>>>> Unable to find group "Administrators" root at
vorador:~# samba-tool
>>>>>> >>> group show "Domain Users" dn:
CN=Domain >>>
>>>>>> Users,CN=Users,DC=dark,DC=kow,DC=is objectClass: top
>>>
>>>>>> objectClass: group cn: Domain Users description: All
domain users
>>>>>> >>> </snip> >>> >>>
I'm hoping someone here can
>> help me
>> understand why some groups >>> show up using show, and some do
not.
>> I'd really like to be able >>> to see the group details,
especially
>> for the "videos" group, as >>> it'll have GID
and Unix details. >>>
>> >>> Thanks! >>> >> Strange, what version of
Samba is this ? >> >>
>> Rowland >> >> >> > No, it isn't strange, it
appears (in my opinion)
>> to be using the > wrong search filter :-( > > it uses this
filter: >
>> > filter =
("(&(sAMAccountType=%d)(sAMAccountName=%s))" % >
>> (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > >
I
>> think it should just be this: > > filter =
>> ("(&(objectCategory=group)(sAMAccountName=%s))" % >
>> ldb.binary_encode(groupname))) > > The first targets a specific
type
>> of group, mine targets all groups. > > Rowland > > > Er,
no it
>> doesn't :-(
>>>
>>> It should be :
>>>
>>> ??????? filter =
("(&(objectCategory=group)(sAMAccountName=%s))" %
>>> ?????????????????? ldb.binary_encode(groupname))
>>>
>>> Rowland
>>
>> I think that means it's a bug in samba-tool? Do I need to file a
>> thing in a place?
>>
>> Thanks!
>>
>>
> No, I will prepare a patch this morning and submit it to samba-technical.
>
> Rowland
>
>
>
OK, bug report filed: https://bugzilla.samba.org/show_bug.cgi?id=14335
Patch sent to samba-technical.
Rowland