search for: aduc

Hi, My tests on DC server and File/print server have some problem with account management... user access right on home share is very strange. if we use ADUC and home share (not homes) for new user, it work. All howto in samba's wiki ask administrator to use windows tools for manage users and groups and share like home share so... I know that is possible to add unix tab on aduc (already done). adding and view unix data is OK, but my question is w...

On 13/06/16 08:22, Daniel Thielking wrote: > That already works and we use RFC2307. We also create user account > with ADUC. But every time we create a user with ADUC we have to change > the attribute /bin/sh to /bin/tcsh because /bin/sh seems to be the > default value for this attribute. I want to know how to change this > default value to /bin/tcsh so that we don't need to change it every > time w...

This topic may have been discussed many times, sorry to repeat here. I have been trying various combinations of adding test users via ADUC. The first three (3) added fine. Then the strange began. Many, many W10 client re-starts throughout these process to make client capture any changes from servers. In one case, create the user, give him/her a password. Login from W10 client. Logout of W10 client. Return to ADUC, add profile path. B...

Hi, In our samba3 days, we provided a homedirectory like \\filehost\username. Now, with samba4 / ADUC using "\\filehost\username" gives the error: "the home folder could not be created because: the network name cannot be found". We have a little root preexec scripts creates the directory and sets permissions, so ADUC only needs to accept the "\\filehost\username",...

I am using a Samba 4.1.16 as an Active Directory domain controller. After a lot of time complaining to myself that my users' properties sheet in ADUC did not contain the Unix Attributes tab, it finally occurred to me that I should look again into Windows 7 >> Control Panel >> Programs and Features >> Turn Windows Features on and off. Lo and behold, there it is: under Remote Server Administration Tools >> Role Admini...

Am 2017-02-02 um 11:25 schrieb Rowland Penny via samba: > If you use the Unix Attributes tab on ADUC, these are the attributes > that are used, but ADUC has the code to use them, samba-tool doesn't! I (try to) see it from the user perspective: I as user want to create users that work in all my ADS-domain, on all of my samba-domain-member-servers, with as little overhead or additional admi...

Hello list, I am using the Microsoft ADUC (Active Directory Users & Computers) tool from the RSAT suite for creating and modifying my domain users. I am aware of the "copy" functionality which really is very nice to use. Unfortunately I am missing two important actions during the user-creation process which I try to describe:...

...tes (the only ones I have edited), that it had something to do with this particular group. Digging some more I realise that the access group for the home share is with scope Domain Local and is not enumerated with winbind (getent group). This access group 'FileAcc-Home' was created with ADUC, so I first thought that that was creating this problem. So I deleted it and recreated it with samba-tool not paying attention to that it was created with scope Global (default in MS AD DS). And it worked: $ ssh -Y davor at dc1 davor at dc1's password: Welcome to Ubuntu 12.04.4 LTS (GNU/Lin...

Hello everybody, if I use Microsoft's Active Directory & Users tool to add a home drive mapping to a users profile, I encounter the problem that ADUC tool cannot create automatically the home directory for the desired user. ADUC tool fails with the message, that the share cannot be accessed. My smb.conf contains: [global] template homedir = /data1/homes/%ACCOUNTNAME [homes] browseable = no read only = no When user "johndo...

Actually, I do/did leave the domain in the normal Windows way. But the (former) domain member computer still always show both in ADUC and samba-tool group listmembers "Domain Computers". So, I normally do a 2nd step by deleting the computer with ADUC. After doing so the computer no longer shows with samba-tool group listmembers "Domain Computers". I was simply looking for a way to do this 2nd step with sam...

...to simply run "rsync --numeric-ids" to copy the content of those old shares over to the new shares server. I'd have to use "--numeric-ids" since winbind will make the users visible to linux as "SADOM+user" instead of simply "user". However, if I use ADUC and activate the "Unix Attributes" (selecting a "NIS Domain" to do so) for a user, the uidNumber, uid, and loginShell attributes get overwritten. The uidNumber visible via winbind and ldapsearch changes to something in the "10000-20000" range, uid changes to the Wi...

Hi all, is there a simple way to do certain ADUC-operations using the command line in Samba 4.1.9? samba-tool doesn't seem to cover all operations. The operations I'd require are: Assigning a user to an OU and modifying some of the users attributes, like the home directory, UNIX attributes, etc. Kind regards, Andreas

We have a couple Samba4 AD domains we've implemented and I've noticed a difference between how users look when created via ADUC versus samba-tool. Created via ADUC, the following extra attributes are added: msSFU30Name: bilbo msSFU30NisDomain: netdirect unixHomeDirectory: /home/bilbo unixUserPassword: ABCD!efgh12345$67890 Created via samba-tool, the following extra attributes are added: objectClass: posixAccount uid: bilb...

...t; > Am 12. Februar 2015 22:12:45 MEZ, schrieb Miguel Medalha > <miguelmedalha at sapo.pt>: >> >> I am using a Samba 4.1.16 as an Active Directory domain controller. >> >> After a lot of time complaining to myself that my users' properties >> sheet in ADUC did not contain the Unix Attributes tab, it finally >> occurred to me that I should look again into Windows 7 >> Control Panel >> Programs and Features >> Turn Windows Features on and off. Lo and >> behold, there it is: under Remote Server Administration Tools >&gt...

...> Samba Version is 4.4.4 compiled from source no extra options chosen. > > > OK, if you are logging into a domain member, then you need to use RFC2307 attributes, see here: https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member I take it you are creating the users with ADUC, if you use samba-tool on the DC, you can add the required attributes when you create a new user, type 'samba-tool user create --help' in a terminal on the DC for more info. Rowland

...efinitely did not last night. I don't know if there is normally a time delay between creating a new group and it becoming visible to UNIX? The first group appeared immediately; the second one (created seconds after the first) definitely didn't. Last night I also checked the other DCs (using ADUC) and they all had both groups visible. I've just checked my samba config and I am using "server services = -dns +winbind -winbindd" on this DC, together with sssd for user/group resolution on my DC (and bind9 for DNS).. so perhaps any time delay could be explained by something inside...

...to this, that > Samba creates i.e. it changes '[homes]' to the username and connects to > that. This is working for me on a Debian 4.1.17 DC just as it has always > done on a member server, I just never tried it before. This is what we observe, yes. The only problem with this that ADUC autocreation does NOT work with this, rather unfortunate. If someone knowns of a way to make ADUC NOT create the homdir, we would like to know. The preexec in smb.conf does it, and ADUC should simply accept whatever we type for homedir. MJ

If you use windows ADUC, i do recommend to this on Win7PC. Because thats the only way (for now) that automaticly sets the last used UID/GID +1 for the next user. - Create user in ADUC - If backend AD is used (as your do) set UID/GID and Homedir (the linux path) and shell - Now add userHome and userProfile in ADUC...

On 13/06/16 11:12, lists wrote: > Hi Rowland, > > On 13-6-2016 9:46, Rowland penny wrote: >> Use ADUC and change the shell every time you add Unix attributes to a >> user (note: the latest ADUC doesn't have the Unix attributes tabs) > Latest ADUC does not have this? So, are you saying that in the future > we will no longer be able to use ADUC like we currently do? From what I hav...

...opinion (and you are not going to like this), the best way to > change a computer name is to walk to the computer, leave the domain, > change computer name, reboot and then rejoin the domain :-( > > Rowland > Thanks Rowland. I have tried but I needed to delete the computer object in ADUC between leave and rejoin to make the new name effective in ADUC. Maybe another solution is to mix both : 1) change the name via windows 2) rename with ldbrename This way all ldap attributes are changed. The concerned database is private/sam.ldb right ? Not very satisfying anyway ... > >...