samba - Aug 2024 - samba-tool user add - weird resulting

Dne 2024.08.14 09:48, Rowland Penny via samba napsal:
> On Wed, 14 Aug 2024 09:24:03 +0200
> Franta Hanzlik via samba <samba at lists.samba.org> wrote:
> 
>> When creating AD user using 'samba-tool user add <username>
...',
>> there are switches for some human name parts specification:
>>   --surname=SURNAME          User's surname
>>   --given-name=GIVEN_NAME    User's given name
>>   --initials=INITIALS        User's initials
>> 
>> and samba-tool (or Samba daemon itself?) assembles other (LDB)
>> attributes from them:
>> 
>> dn :          as "$GIVEN_NAME $INITIALS
$SURNAME,OU=...,DC=..."
>> displayName : as "$GIVEN_NAME $INITIALS $SURNAME"
>> name :        as "$GIVEN_NAME $INITIALS $SURNAME"
>> 
>> Despite that the insertion of initials into any of the derived
>> attributes seems stupid to me, would like to have the values ??of
>> these attributes different.
> 
> A Samba AD DC tries its best to emulate what a Windows DC does and this
> is what a Windows DC does if you supply the users initials. I you do
> not want the user accounts created with the initials, then do not
> supply them.
> 
>> Is this somehow possible?
>> Doesn't samba-tool have any hidden switches for this?
> 
> No, you an see all the switches with 'samba-tool used add --help'
> 
> Rowland
-- 
Rowland, thank you for response.
But I still think there's nothing stopping Samba from being better
than Windows at this, and introducing some switches like
   --displayname
   --commonname
   --name
   --exclude-initials-in-dn
or something similar.

After all, what are the various attributes displayName/cn/name for, if
they cannot be entered when creating a user.
--
Franta Hanzl?k

Lu?n? 502           Linux/Unix/LAN/Internet       Tel: +420-372-222302
33209 ?t?novice    e-mail:franta at hanzlici.cz      Fax: +420-372-222302
Czech Republic        http://hanzlici.cz/         GSM: +420-604-117319
Tento mail neobsahuje viry, byl odesl?n z opera?n?ho syst?mu Linux

On Wed, 14 Aug 2024 11:05:23 +0200
Franta Hanzlik via samba <samba at lists.samba.org> wrote:
> Rowland, thank you for response.
> But I still think there's nothing stopping Samba from being better
> than Windows at this, and introducing some switches like
>   --displayname
>   --commonname
>   --name
>   --exclude-initials-in-dn
> or something similar.
> 
> After all, what are the various attributes displayName/cn/name for, if
> they cannot be entered when creating a user.
>
OK, the 'commonname' or 'cn' is also part of the users
'dn' or RDN and
the 'name' must also be the same as the 'cn'. You can use
whatever you
like for the 'username' when creating a user, but whatever is used will
also populate the 'cn', 'name', 'sAMAccountName' and
'distinguishedName' attributes.

You can also use the '--use-username-as-cn' to force the use of the
username for the 'cn' (and hence the other attributes).

There is nothing stopping you writing your own script around
'samba-tool user add' to first create the user (using samba-tool) and
then modify it to your purposes, though I struggle to understand why
you would want to.

Rowland