search for: upnsuffixes

...eans (on a Samba DC, at > least) the same thing. > If you need an email attribute that doesn't match the UPN, use on of the > email attributes that AD provides. Are you sure about making this change to the documentation. The attribute being added is the not single-valued UPN-Suffixes (uPNSuffixes) rather than the single-valued User-Principal-Name (userPrincipalName), despite this thread repeatedly saying "change" the UPN. It appears from the Microsoft documentation that the suffixes (multiple allowed) provide a mapping to the UPN, rather than change it, and one of the named securi...

Hi! The command "samba-tool testparm -v" returns "template homedir = /home/%WORKGROUP%/%ACCOUNTNAME%". Is there other variables that can be used? It is possible to add one or more uPNSuffixes to Samba 4 AD DC to alter the userPrincipalName. Both on the "domain" level (cn=uPNSuffixes,cn=Partitions,...) and on OU-level (cn=uPNSuffixes,ou=example.org,dc=...) But is it possible to return the dns domain part, %UPNSUFFIXES%, in winbind? And use it for domain separated paths to home...

...; > > If you need an email attribute that doesn't match the UPN, use on > > > of the email attributes that AD provides. > > > Are you sure about making this change to the documentation. The > > attribute being added is the not single-valued UPN-Suffixes > > (uPNSuffixes) rather than the single-valued User-Principal-Name > > (userPrincipalName), despite this thread repeatedly saying "change" > > the UPN. > > ... actually, am okay with change to documentation, but not with > characterization of what OP is doing. In the blog post he wa...

...at > > least) the same thing. > > If you need an email attribute that doesn't match the UPN, use on of the > > email attributes that AD provides. > Are you sure about making this change to the documentation. The attribute being added is the not single-valued UPN-Suffixes (uPNSuffixes) rather than the single-valued User-Principal-Name (userPrincipalName), despite this thread repeatedly saying "change" the UPN. ... actually, am okay with change to documentation, but not with characterization of what OP is doing. In the blog post he was only setting a upnSuffix, and not...

...n-Windows machines? Where can I enter "user at example.com" for a domain named "ad.example.com" and confirm that things work as expected? In other words, how would one go about discovering a potential Samba deficiency (compared to Windows) in this regard? I see one reference to uPNSuffixes in source4 [2], and it appears that the 'net' command even appears to support provide an --add-upn-suffix option [3]. [1] https://docs.microsoft.com/en-us/windows/desktop/AD/naming-properties [2] https://gitlab.com/samba-team/samba/blob/d1c2fe8907/source4/dsdb/common/util_trusts.c#L925 [3]...