search for: binary_encod

...t; >> Rowland >> >> >> > No, it isn't strange, it appears (in my opinion) to be using the > wrong search filter :-( > > it uses this filter: > > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I think it should just be this: > > filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % > ldb.binary_encode(groupname))) > > The first targets a specific type of group, mine targets all groups. > > Rowland > > > Er, no it do...

...t; > Rowland > > > No, it isn't strange, it appears (in my opinion) to be using the wrong search filter :-( it uses this filter: ??????? filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % ????????????????? (ATYPE_SECURITY_GLOBAL_GROUP, ?????????????????? ldb.binary_encode(groupname))) I think it should just be this: ??????? filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % ?????????????????? ldb.binary_encode(groupname))) The first targets a specific type of group, mine targets all groups. Rowland

This is the case for this user too... Could it be that Samba is trying to work with the old SID??? Le 2017-04-26 à 10:47, Dale Renton via samba a écrit : > On Tue, Apr 25, 2017 at 3:31 PM, Luc Lalonde via samba < > samba at lists.samba.org> wrote: > >> The user exists in AD: >> >> - I can see the user using 'wbinfo', 'samba-tool user list'

...itor and find this line: def add_remove_group_members(self, groupname, members, It should be around line 240 Go down to about line 270, where you should find these two lines: expression="(|(sAMAccountName=%s)(CN=%s))" % ( ldb.binary_encode(member), ldb.binary_encode(member)), attrs=[]) Change them to: expression="(sAMAccountName=%s)" % ( ldb.binary_encode(member)), attrs=[]) You should then be able to add your user to the group: root at dc1:~# samb...

...gt;> Rowland >> >> >> > No, it isn't strange, it appears (in my opinion) to be using the > wrong search filter :-( > > it uses this filter: > > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I think it should just be this: > > filter = ("(&(objectCategory=group)(sAMAccountName=%s))" % > ldb.binary_encode(groupname))) > > The first targets a specific type of group, mine targets all groups. > > Rowland > > > Er, no i...

...d >> >> >> > No, it isn't strange, it appears (in my opinion) to > be using the > wrong search filter :-( > > it uses this filter: > > > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > > (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I > think it should just be this: > > filter = > ("(&(objectCategory=group)(sAMAccountName=%s))" % > > ldb.binary_encode(groupname))) > > The first targets a specific type > of group, mine targets all groups. > > Rowland &gt...

...gt;> >> > No, it isn't strange, it appears (in my opinion) >> to be using the > wrong search filter :-( > > it uses this filter: > >> > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > >> (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I >> think it should just be this: > > filter = >> ("(&(objectCategory=group)(sAMAccountName=%s))" % > >> ldb.binary_encode(groupname))) > > The first targets a specific type >> of group, mine targets all groups. >...

...t; Are you up to trying something ? > > If so, first find a Samba python file 'samdb.py' this is usually in > this directory path 'python2.x/site-packages/samba/' > > Backup your original file, then open the original in an editor and find > this line: > > ldb.binary_encode(member), ldb.binary_encode(member)), attrs=[]) > > In my copy it is line 271 under 'def add_remove_group_members(self, > groupname, members,' > > Change it to: > > member, member), attrs=[]) > > Make sure the characters start at the same place as they do now. &gt...

On Tue, 30 May 2017 09:22:59 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > All I can think of is, you have a user with 'sAMAccountName=username' > and another with 'CN=username', this could lead to 'len(targetmember)' > being 2 > OK, I can confirm my thoughts, if I run: ldbsearch -H /usr/local/samba/private/sam.ldb -b

> Do you have users in /etc/passwd ? I only have original debian system users > If so, are you trying to add one of these users to an AD group ? no

...g ? >> >> If so, first find a Samba python file 'samdb.py' this is usually in >> this directory path 'python2.x/site-packages/samba/' >> >> Backup your original file, then open the original in an editor and find >> this line: >> >> ldb.binary_encode(member), ldb.binary_encode(member)), attrs=[]) >> >> In my copy it is line 271 under 'def add_remove_group_members(self, >> groupname, members,' >> >> Change it to: >> >> member, member), attrs=[]) >> >> Make sure the characters start a...

The user exists in AD: - I can see the user using 'wbinfo', 'samba-tool user list' - I can add the user to a group with 'Active Directory Users and Computers' in Windows 2008R2 - It's seems impossible to use 'samba-tool group addmembers foogroup foouser' I looked at the user's attributes but can't find anything different from any other user that

Howdy! I'm setting up a domain controller, and things are going wonderfully, but I'm running into a strange problem, only some groups will display using the `samba-tool group show` command. <snip> root at vorador:~# samba-tool group addmembers videos dkowis Added members to group videos root at vorador:~# samba-tool group list | grep videos videos root at vorador:~# samba-tool

...n') > > Could the "ê" be a problem or the length of the string ? The issue is that this script was never tested with non-ascii names. Each instance of "(distinguishedName=%s) % user_dn in the script needs to be updated to be: "(distinguishedName=%s)" % ldb.binary_encode(user_dn) Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

I made a try translating the group names one by one in the setup/provision_users.ldif file. The first groups went OK but when I translate "Incoming Forest Trust Builders" by "Générateurs d'approbations de forêt entrante", I get this error from the script : Traceback (most recent call last): File "source4/scripting/bin/samba_upgradeprovision", line 1714, in

...n') > > Could the "ê" be a problem or the length of the string ? The issue is that this script was never tested with non-ascii names. Each instance of "(distinguishedName=%s) % user_dn in the script needs to be updated to be: "(distinguishedName=%s)" % ldb.binary_encode(user_dn) Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

> > Okay ... looks like this time it worked as expected in the first try. > > You sure about that ? > You used samba-tool to add the SPN with 'NFS', yet the SPN's are shown > with 'nfs'. > This could just be down to using 'net to create the keytab, try > 'samba-tool domain exportkeytab /etc/krb5.keytab' instead Since AD comes from the