similar to: Bulk add users and rfc2307 attributes questions

Hi Rowland, On Wed, 2 Aug 2017, Rowland Penny via samba wrote: > On Tue, 1 Aug 2017 23:23:25 -0400 (EDT) > Tom Diehl via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> I am currently testing a self compiled 4.7.0rc3 AD DC and a samba >> member server acting as a file server. I have them configured to use >> rfc2307 attributes so that the samba

On Tue, 1 Aug 2017 23:23:25 -0400 (EDT) Tom Diehl via samba <samba at lists.samba.org> wrote: > Hi, > > I am currently testing a self compiled 4.7.0rc3 AD DC and a samba > member server acting as a file server. I have them configured to use > rfc2307 attributes so that the samba users can access the shares on > the member server. Everything seems to be working as

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

Thank again for your help ! 2018-01-12 21:26 GMT+01:00 Rowland Penny <rpenny at samba.org>: > The problem is, you are thinking in the wrong direction ;-) > If you give a user a uidNumber, or a group a gidNumber, these will be > used instead of the xidNumbers found in idmap.ldb, you do not need to > alter idmap.ldb at all. > The way ADUC works, is by using a couple of

On Mon, 15 Jan 2018 16:18:57 +0100 Kacper Wirski via samba <samba at lists.samba.org> wrote: > Hello, > I understand the OP, I was asking some time ago similar question, but > it was in relation to samba domain member. I couldn't get backend: ad > to work for machine accounts, so i switched to idmap: rid and it > solved everything. I tried manually adding UID and GID to

Greetings, Rowland Penny! >>>>> Ok, good. >>>>> Now, how can I get RFC2307 attributes populated automatically upon >>>>> users or >>>>> groups creation? >>>> You can't :-( >>>> I'm experimenting with >>>> https://github.com/laotse/SambaPosix >>>> but it's quite buggy (at least

El 09/04/15 a les 16:20, Rowland Penny ha escrit: > On 09/04/15 14:58, Luca Olivetti wrote: >> El 09/04/15 a les 14:57, Andrey Repin ha escrit: >>>> Using the RFC2307 attributes, you will get the same ID number on every >>>> Unix machine, whereas if you use the 'rid' backend, whilst you should >>>> get the same ID on each Unix machine, you will

Am 03.11.20 um 17:46 schrieb Rowland penny via samba: > On 03/11/2020 16:24, basti via samba wrote: >> Hello, >> is there a way to get the last uidNumber from ldap. >> >> I can do a ldapsearch like: >> >> ldapsearch -h samdom.example.com -D "administrator at samdom.example.com" >> -w "changeit"? -b

On Tue, 2018-05-29 at 21:00 +0100, Rowland Penny via samba wrote: > On Tue, 29 May 2018 15:50:44 -0400 > lingpanda101 via samba <samba at lists.samba.org> wrote: > > > Hello, > > > > I'm developing a script to create a user and pass along all the > > necessary unix attributes required. I'm successful except when I go > > to increment

Hello, I'm using rfc2307 to enable Unix attributes on my DC's. Recently when adding a user and attempting to add a UID with the RSAT, I receiving the following error. 'Duplicate UID. Assign a uniqueUID.' How do I list all users and their UID? I tried using 'pdbedit' and wbinfo. Pdbedit appears to list the XID's and wbinfo needs me to specify a user name. I

Hello,     I'm developing a script to create a user and pass along all the necessary unix attributes required. I'm successful except when I go to increment msSFU30MaxUidNumber or msSFU30MaxGidNumber. I'm not sure how to use ldbedit to script this process. Any guidance would be great. Thanks. - James

Am 2017-10-10 um 09:57 schrieb Rowland Penny via samba: > On Tue, 10 Oct 2017 09:19:11 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> >> The admin there created a group via RSAT. >> And that group was not visible/usable on the DM server. > > It wouldn't be if the group was created as just a windows group. How to

Am 2017-02-01 um 14:49 schrieb Rowland Penny via samba: > If you just run 'samba-tool user create testuser' you will get a user > without a uidNumber. See example5 from 'samba-tool user create --help' > for how to create a user with a uidNumber, but there is a gotcha, you > will need to track the next uidNumber or gidNumber yourself. yes, we figured that out and

On Wed, 30 May 2018 10:33:55 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > So, in AD LDAP lingo, a 'modify' is not atomic, and a 'delete/add' > > > yes? > > Ahem, i meant: > > So, in AD LDAP lingo, a 'replace' is not atomic, and a

Greetings, Rowland Penny! >>> You are using python, which to me is a very big snake, so I bash it :-D >>> I just use these two functions in a bash script: >>> # Finds the next useable user uidNumber or group gidNumber >>> # Input : $1 >>> # $1 : msSFU30MaxUidNumber or msSFU30MaxGidNumber >>> # Output : the first free uidNumber or gidNumber

Hello, is there a way to get the last uidNumber from ldap. I can do a ldapsearch like: ldapsearch -h samdom.example.com -D "administrator at samdom.example.com" -w "changeit" -b "DC=samdom,DC=example,DC=com" -x -LLL "(uidNumber=*)" uidNumber | grep -Po "(?<=uidNumber: )([0-9]{4})" | sort | tail -n1 But there is no guarantee that the last

That explains why there is so little information on ldb and sqlite. From my pov sqlite just seemed interesting, as it has a well known syntax and the ability to embedd a transparent logic layer. As there is no effort to use sqlite (or sql) in the future , I just burried that path. As for compability I would strongly suggest to stay where Microsoft left off, before killing the "UNIX

I have a test setup of samba 4.1.6 under ubuntu 14.04. When I do the query shown at https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Check_if_NIS_Extensions_are_installed_in_your_Directory it shows I have the ypServ30 container installed. If I change this query to -s sub then I find 3 entries in that subtree (see [1] below) However the full schema in

Rowland, How are you selecting you UID to store in the AD uidNumber attribute? I initially thought UID could be pulled from the last set of digits from SID, ut this does not appear to be what others are doing :( What are you using determine the UID number??? Thanks

Am 2017-02-01 um 15:32 schrieb Rowland Penny via samba: > You don't need to do that, there are a couple of attributes (which you > will probably not have) which will store the next uid & gidNumber. > these are 'msSFU30MaxUidNumber' & 'msSFU30MaxGidNumber' and they > should/can be here: > dn: >