search for: targetmember

> Do you have users in /etc/passwd ? I only have original debian system users > If so, are you trying to add one of these users to an AD group ? no

> > > All I can think of is, you have a user with > > > 'sAMAccountName=username' and another with 'CN=username', this > > > could lead to 'len(targetmember)' being 2 yeah, that's the point I created my users with : samba-tool user add user password --use-username-as-cn > OK, I think I have a fix, find 'samdb.py' on your DC, open it in your > favourite editor and find this line: > You should then be able to add your user to t...

On Tue, 30 May 2017 09:22:59 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > All I can think of is, you have a user with 'sAMAccountName=username' > and another with 'CN=username', this could lead to 'len(targetmember)' > being 2 > OK, I can confirm my thoughts, if I run: ldbsearch -H /usr/local/samba/private/sam.ldb -b dc=samdom,dc=example,dc=com -s sub "(|(sAMAccountName=rowland)(CN=rowland))" I get: # record 1 dn: CN=Rowland Penny,CN=Users,DC=samdom,DC=example,DC=com CN: Rowland Penny...

...a samba <samba at lists.samba.org> wrote: > > > > > > All I can think of is, you have a user with > > > > > > > > > > 'sAMAccountName=username' and another with 'CN=username', this > > > > > could lead to 'len(targetmember)' being 2 > > > > yeah, that's the point > > I created my users with : samba-tool user add user password > > --use-username-as-cn > > > > > OK, I think I have a fix, find 'samdb.py' on your DC, open it in > > > your favourite editor...

The user exists in AD: - I can see the user using 'wbinfo', 'samba-tool user list' - I can add the user to a group with 'Active Directory Users and Computers' in Windows 2008R2 - It's seems impossible to use 'samba-tool group addmembers foogroup foouser' I looked at the user's attributes but can't find anything different from any other user that

...t; On Tue, 30 May 2017 09:22:59 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > > All I can think of is, you have a user with > > 'sAMAccountName=username' and another with 'CN=username', this > > could lead to 'len(targetmember)' being 2 > > > > OK, I can confirm my thoughts, if I run: > > ldbsearch -H /usr/local/samba/private/sam.ldb -b > dc=samdom,dc=example,dc=com -s sub > "(|(sAMAccountName=rowland)(CN=rowland))" > > I get: > > # record 1 > dn: CN=Rowland Penny...