search for: search_filt

...c00 > dns-dc01 > > Am I doing something wrong? The system that you ary trying to use for OpenShift does not know about primary group memberships, as these are not recorded as DN links. Inside that samba-tool group listmembers command we work around that by using this filter: search_filter = ("(|(primaryGroupID=%s)(memberOf=%s))" % (rid, group_sid_dn)) You may need to contribute logic upstream to OpenShift to learn about how groups work in AD, or (if secure) forgo primary group memberships. Andrew Bartlett -- Andrew Bartlett...

...I doing something wrong? > > The system that you ary trying to use for OpenShift does not know about > primary group memberships, as these are not recorded as DN links. > > Inside that samba-tool group listmembers command we work around that by > using this filter: > search_filter = ("(|(primaryGroupID=%s)(memberOf=%s))" % > (rid, group_sid_dn)) > > You may need to contribute logic upstream to OpenShift to learn about > how groups work in AD, or (if secure) forgo primary group memberships. > > Andrew Bartlett > &gt...

Hello All, I am currently changing my samba linux clients (Debian) from sssd binding to winbind. With sssd I had all sudo rules within the samba active directory. The configuration was based on: https://lists.samba.org/archive/samba/2016-April/199402.html Is there some guideline like the one mentioned available/has someone already experience with this for winbind based clients? Within the

On 21/08/2020 21:40, vincent at cojot.name wrote: > On Fri, 21 Aug 2020, Rowland penny via samba wrote: > >> This works for me: >> >> rowland at devstation:~$ sudo ldapsearch -H >> ldaps://dc01.samdom.example.com -D 'SAMDOM\Administrator' -w >> 'xxxxxxxxxx' -b 'dc=samdom,dc=example,dc=com' >>