search for: loginshel

Hello everybody, I am trying to set the homeDirectory and loginShel of my users in the samba user database from the command line interface (no webgui stuff) See the attachment for the smb.conf The samba users are in a ldapsam:editposix openldap database. They show with getent passwd and getent group or ldapsearch -x. # both do not work usermod --shell /bin/bash...

...easy to create the .default shell for each user using a simple script I can run on a machine that has power broker but I am wondering what others have done to allow users to pick their shell using samba to authenticate? What are the downsides of doing it the way I did it? is there a way to use the loginShell provided by rfc2307 that I haven't found documented in samba? I'm using samba version 4.1.6 if that makes a difference. I could probably find a way to upgrade if there is support in newer versions.

Thank you Rowland for looking at it. I did read the wiki here https://wiki.samba.org/index.php/Idmap_config_ad that is how I got as far as I did; that and the idmap_ad man page. I could not find how to use the loginShell is there a variable I can use for it in the template or an option to set to use it? loginShell and unixHomedir are not mentioned on the wiki that I could find. I'm good with the templated homedir but curious how to use the unixHomedir. It seems that the schema_mode = rfc2307 is the default as...

On 05/12/15 02:47, Jeff Sadowski wrote: > Thank you Rowland for looking at it. > I did read the wiki here > https://wiki.samba.org/index.php/Idmap_config_ad that is how I got as > far as I did; that and the idmap_ad man page. I could not find how to > use the loginShell is there a variable I can use for it in the > template or an option to set to use it? loginShell and unixHomedir are > not mentioned on the wiki that I could find. I'm good with the > templated homedir but curious how to use the unixHomedir. It seems > that the schema_mode = rf...

Hi Rowland, Sorry, migration using BIND9_DLZ gives the same result Not sure if the following from the migration is of a concern Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-1812465911-3034, ((21, 'Element loginShell has empty attribute in ldb message ()!')) Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-1812465911-3040, ((21, 'Element loginShell has empty attribute in ldb message ()!')) Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-181...

...9999 # Use template settings for login shell and home directory winbind nss info = template template shell = /nfs/homes/%U/.default_shell template homedir = /nfs/homes/%U Though as you seem to be using uidNumber & gidNumber attributes, you could also store the loginShell and unixHomedir in AD as well. Rowland > allowing users to pick their shell using > ln -s /bin/bash ~/.default_shell > or > ln -s /bin/tcsh ~/.default_shell > ... > > It will be easy to create the .default shell for each user using a simple > script I can run on a machine...

...t; On 13/06/16 13:13, mathias dufresne wrote: > >> I loved to find out how to achieve that. >> >> I did looked for information, all I found was that: >> >> https://social.technet.microsoft.com/Forums/en-US/3e184d10-09e3-4eab-9131-6694b86879f8/modify-default-value-of-loginshell-attribute?forum=winserverDS >> >> Unfortunately it seems to list all users (I don't know these MS commands >> but "Get-AdUser -Filter"...) then sending that list to something to modify >> received users list ("Set-AdObject -Replace >> @{unixhomedire...

I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy). I intend to get user & group info from MsActiveDirectory. However, when I type: getent passwd somerandomuser I get the uid and gid for the user, as recorded in the msad schema by virtue of sfu, but the homedir and loginshell that are returned are like what "winbind nss info = template" would return by default: /home/MYDOMAIN/somerandomuser /bin/false Even though the msad attributes msSFU30HomeDirectory and msSFU30LoginShell are set, and differ from those defaults. Any idea why this is? With debugging s...

...eff Sadowski wrote: > > Thank you Rowland for looking at it. > I did read the wiki here > https://wiki.samba.org/index.php/Idmap_config_ad that is how I > got as far as I did; that and the idmap_ad man page. I could > not find how to use the loginShell is there a variable I can > use for it in the template or an option to set to use it? > loginShell and unixHomedir are not mentioned on the wiki that > I could find. I'm good with the templated homedir but curious > how to use the unixHomedir. It see...

...$cmd = `$LDAPMODIFY -D $ADMINDN -w $ADMINPASS -x -f updateidpool.ldif`; } sub GetShadowLast () { my ($pwdlastset, $i); $pwdlastset = `date +%s`; chomp ($pwdlastset); $i = int($pwdlastset); return $i; } sub SetupLDAPEntry { my ($userdn, $username, $uidnum, $gidnum, $gecos, $homedir, $loginshell, $shadowlast, $shadowmax, $shadowwarning) = @_; my $entry = "dn: $userdn objectclass: top objectclass: account objectclass: posixAccount objectclass: shadowAccount cn: $username uid: $username uidNumber: $uidnum gidNumber: $gidnum gecos: $gecos homeDirectory: $h...

Hi Guys, Setup: Versions: Samba: 4.6.7 Bind9: 9.10.3 Firewall disabled AD Provision: Migrated from samba 3 to 4 using classic upgrade. samba-tool domain classicupgrade --dbdir=/var/lib/samba.PDC/dbdir --realm=TEST.LOCAL --dns-backend=BIND9_FLATFILE /etc/samba.PDC/smb.PDC.conf The following was the section in regards to the upgrade Processing section

...withi get the following. getent passwd testswi SWI\testswi:*:10000:100:testswi:/home/SWI/testswi:/bin/false I want to change /bin/false to a other value /bin/bash I tried many things to change the value. 1. ldbedit -e vim -H /var/lib/samba/private/sam.ldb samaccountname=testswi i added "loginShell = /bin/bash" and got ---------------------------------------------------------------------------------------------------------------------------- # record 1 dn: CN=testswi,OU=Benutzer,OU=SWI,DC=swi,DC=local objectClass: top objectClass: person objectClass: organizationalPerson objectClass: u...

...e: > On 05/12/15 02:47, Jeff Sadowski wrote: > >> Thank you Rowland for looking at it. >> I did read the wiki here https://wiki.samba.org/index.php/Idmap_config_ad >> that is how I got as far as I did; that and the idmap_ad man page. I could >> not find how to use the loginShell is there a variable I can use for it in >> the template or an option to set to use it? loginShell and unixHomedir are >> not mentioned on the wiki that I could find. I'm good with the templated >> homedir but curious how to use the unixHomedir. It seems that the >> sche...

...Change: 2147483647 sambaHomePath: \\GIMLI\homes sambaHomeDrive: H: sambaProfilePath: \\GIMLI\profiles\ sambaPrimaryGroupSID: S-1-5-21-2178396160-3634057995-2524863810-512 sambaLMPassword: XXX sambaNTPassword: XXX sambaAcctFlags: [U ] sambaSID: S-1-5-21-2178396160-3634057995-2524863810-2996 loginShell: /bin/false gecos: Netbios Domain Administrator structuralObjectClass: inetOrgPerson entryUUID: bab346fa-2520-1029-981f-fa6c5a9a0b92 creatorsName: cn=Manager,dc=united-securities,dc=com createTimestamp: 20050309195402Z entryCSN: 20050309195402Z#000005#00#000000 modifiersName: cn=Manager,dc=united-...

...Thank you Rowland for looking at it. >>> I did read the wiki here >>> https://wiki.samba.org/index.php/Idmap_config_ad that is how I >>> got as far as I did; that and the idmap_ad man page. I could >>> not find how to use the loginShell is there a variable I can >>> use for it in the template or an option to set to use it? >>> loginShell and unixHomedir are not mentioned on the wiki that >>> I could find. I'm good with the templated homedir but curious >>> ho...

On 07/12/15 18:49, Jeff Sadowski wrote: > But that doesn't work for me. As I am saying > If I set it like that I only see 7 domain users with getent passwd > experimenting I see if I set > > idmap config * : range = 2000-7999 > idmap config DOMAIN:range = 8000-99999 > > I see all my users. > > which is really odd because all my users have uids above 10000 >

...On 13/06/16 13:13, mathias dufresne wrote: > > I loved to find out how to achieve that. > > I did looked for information, all I found was that: > https://social.technet.microsoft.com/Forums/en-US/3e184d10-09e3-4eab-9131-6694b86879f8/modify-default-value-of-loginshell-attribute?forum=winserverDS > > Unfortunately it seems to list all users (I don't know these > MS commands > but "Get-AdUser -Filter"...) then sending that list to > something to modify > received users list ("Set-AdObjec...

...s Domain Supports file replication in a domain objectClass: posixGroup gidNumber: 228 cn: Replicator dn: uid=testuser1,ou=People,dc=test,dc=org objectClass: top objectClass: account objectClass: posixAccount cn: testuser1 uid: testuser1 uidNumber: 1000 gidNumber: 100 homeDirectory: /home/testuser1 loginShell: /bin/bash gecos: User description: User userPassword: {SSHA}nweYN3EWGI4R9HhMLND0++RxfgzJraBx dn: uid=testuser2,ou=People,dc=test,dc=org objectClass: top objectClass: account objectClass: posixAccount cn: testuser2 uid: testuser2 uidNumber: 1001 gidNumber: 100 homeDirectory: /home/testuser2 login...

...> >> Thank you Rowland for looking at it. >> I did read the wiki here >> https://wiki.samba.org/index.php/Idmap_config_ad that is how I >> got as far as I did; that and the idmap_ad man page. I could >> not find how to use the loginShell is there a variable I can >> use for it in the template or an option to set to use it? >> loginShell and unixHomedir are not mentioned on the wiki that >> I could find. I'm good with the templated homedir but curious >> how to use the uni...

...path = /var/lib/samba/sysvol >> read only = No >> ------------------------------------------------------------ >> >> There is still something I don't understand: >> "wbinfo -i some.user" does not show configured homeDirectory nor >> loginShell >> nor for gidNumber >> For loginShell it displays "/bin/false" rather than configured "/bin/bash" >> For homeDirectory it displays "/home/AD.DOMAIN/some.user" rather >> configured >> "/home/some.user" >> For gidNumber it...