search for: get_admins

Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: > From what you have posted it doesn't, but when you do get then working, > you need to understand that EA's and ACL's can work together or > independently. > If 'acl_xattr:ignore system acls = yes' is set, they work > independently, if it isn't, they work together, see 'man > vfs_acl_xattr'

...//dc1 '(samaccountname=Domain Admins)' >> -UAdministrator >> >> [..] >> >> # returned 3 records >> # 0 entries >> # 3 referrals >> > > I wonder if someone (for whatever reason) has renamed Domain Admins ? > > Create a script 'get_admins.sh' > > Containing this: > > #!/bin/bash > > DC=$1 > PASS=$2 > DOM=$3 > > DOMSID=$(ldbsearch -U Administrator --password="$PASS" -H ldap://"$DC" \ > "(&(objectclass=domain)(name=$DOM))" objectSid | grep objectSid |...

...I think: no -> > > # ldbsearch -H ldap://dc1 '(samaccountname=Domain Admins)' > -UAdministrator > > [..] > > # returned 3 records > # 0 entries > # 3 referrals > I wonder if someone (for whatever reason) has renamed Domain Admins ? Create a script 'get_admins.sh' Containing this: #!/bin/bash DC=$1 PASS=$2 DOM=$3 DOMSID=$(ldbsearch -U Administrator --password="$PASS" -H ldap://"$DC" \ "(&(objectclass=domain)(name=$DOM))" objectSid | grep objectSid | \ awk '{print $NF}') ldbsearch -U Adm...

...trator > >> > >> [..] > >> > >> # returned 3 records > >> # 0 entries > >> # 3 referrals > >> > > > > I wonder if someone (for whatever reason) has renamed Domain > > Admins ? > > > > Create a script 'get_admins.sh' > > > > Containing this: > > > > #!/bin/bash > > > > DC=$1 > > PASS=$2 > > DOM=$3 > > > > DOMSID=$(ldbsearch -U Administrator --password="$PASS" -H > > ldap://"$DC" \ "(&(objectclass=domain)(n...