similar to: Scripting the next UID/GID number to use

On Tue, 2018-05-29 at 21:00 +0100, Rowland Penny via samba wrote: > On Tue, 29 May 2018 15:50:44 -0400 > lingpanda101 via samba <samba at lists.samba.org> wrote: > > > Hello, > > > > I'm developing a script to create a user and pass along all the > > necessary unix attributes required. I'm successful except when I go > > to increment

Greetings, Rowland Penny! >>>>> Ok, good. >>>>> Now, how can I get RFC2307 attributes populated automatically upon >>>>> users or >>>>> groups creation? >>>> You can't :-( >>>> I'm experimenting with >>>> https://github.com/laotse/SambaPosix >>>> but it's quite buggy (at least

El 09/04/15 a les 16:20, Rowland Penny ha escrit: > On 09/04/15 14:58, Luca Olivetti wrote: >> El 09/04/15 a les 14:57, Andrey Repin ha escrit: >>>> Using the RFC2307 attributes, you will get the same ID number on every >>>> Unix machine, whereas if you use the 'rid' backend, whilst you should >>>> get the same ID on each Unix machine, you will

Greetings, Rowland Penny! >>> You are using python, which to me is a very big snake, so I bash it :-D >>> I just use these two functions in a bash script: >>> # Finds the next useable user uidNumber or group gidNumber >>> # Input : $1 >>> # $1 : msSFU30MaxUidNumber or msSFU30MaxGidNumber >>> # Output : the first free uidNumber or gidNumber

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

Am 03.11.20 um 17:46 schrieb Rowland penny via samba: > On 03/11/2020 16:24, basti via samba wrote: >> Hello, >> is there a way to get the last uidNumber from ldap. >> >> I can do a ldapsearch like: >> >> ldapsearch -h samdom.example.com -D "administrator at samdom.example.com" >> -w "changeit"? -b

Thank again for your help ! 2018-01-12 21:26 GMT+01:00 Rowland Penny <rpenny at samba.org>: > The problem is, you are thinking in the wrong direction ;-) > If you give a user a uidNumber, or a group a gidNumber, these will be > used instead of the xidNumbers found in idmap.ldb, you do not need to > alter idmap.ldb at all. > The way ADUC works, is by using a couple of

Hello, I'm using rfc2307 to enable Unix attributes on my DC's. Recently when adding a user and attempting to add a UID with the RSAT, I receiving the following error. 'Duplicate UID. Assign a uniqueUID.' How do I list all users and their UID? I tried using 'pdbedit' and wbinfo. Pdbedit appears to list the XID's and wbinfo needs me to specify a user name. I

On Mon, 15 Jan 2018 16:18:57 +0100 Kacper Wirski via samba <samba at lists.samba.org> wrote: > Hello, > I understand the OP, I was asking some time ago similar question, but > it was in relation to samba domain member. I couldn't get backend: ad > to work for machine accounts, so i switched to idmap: rid and it > solved everything. I tried manually adding UID and GID to

Am 2017-10-10 um 09:57 schrieb Rowland Penny via samba: > On Tue, 10 Oct 2017 09:19:11 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> >> The admin there created a group via RSAT. >> And that group was not visible/usable on the DM server. > > It wouldn't be if the group was created as just a windows group. How to

Why only Domain Users and Domain Admins? I can't follow. But a good idea you've had. So a script can possibly be run on every DC the same. I will check and verify. What about built-in objects like system? These are not available in ADUC if my memory doesn't fail now. Will there be a problem when other built-in objects get a rfc gid/uid. E.g. for now wbinfo resolves uid 0 for

Am 2017-02-01 um 14:49 schrieb Rowland Penny via samba: > If you just run 'samba-tool user create testuser' you will get a user > without a uidNumber. See example5 from 'samba-tool user create --help' > for how to create a user with a uidNumber, but there is a gotcha, you > will need to track the next uidNumber or gidNumber yourself. yes, we figured that out and

Hi, I am currently testing a self compiled 4.7.0rc3 AD DC and a samba member server acting as a file server. I have them configured to use rfc2307 attributes so that the samba users can access the shares on the member server. Everything seems to be working as expected. The problem I am facing is I need to add about 150 users. Once the initial load of users is added I want to use the rsat tools

Hi Rowland, On Wed, 2 Aug 2017, Rowland Penny via samba wrote: > On Tue, 1 Aug 2017 23:23:25 -0400 (EDT) > Tom Diehl via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> I am currently testing a self compiled 4.7.0rc3 AD DC and a samba >> member server acting as a file server. I have them configured to use >> rfc2307 attributes so that the samba

Hello, is there a way to get the last uidNumber from ldap. I can do a ldapsearch like: ldapsearch -h samdom.example.com -D "administrator at samdom.example.com" -w "changeit" -b "DC=samdom,DC=example,DC=com" -x -LLL "(uidNumber=*)" uidNumber | grep -Po "(?<=uidNumber: )([0-9]{4})" | sort | tail -n1 But there is no guarantee that the last

That explains why there is so little information on ldb and sqlite. From my pov sqlite just seemed interesting, as it has a well known syntax and the ability to embedd a transparent logic layer. As there is no effort to use sqlite (or sql) in the future , I just burried that path. As for compability I would strongly suggest to stay where Microsoft left off, before killing the "UNIX

The reason why is that simple: the other admin only knows the windows world and that's why it's gonna be risky regarding file services when he creates new users or groups and forgets about the Unix tab. My personal hope is that samba will one day set rfc ids automatically so that these windows guys won't have to care. E.g. it could be an option when provisioning a new domain. It would

On Wed, 30 May 2018 10:33:55 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > So, in AD LDAP lingo, a 'modify' is not atomic, and a 'delete/add' > > > yes? > > Ahem, i meant: > > So, in AD LDAP lingo, a 'replace' is not atomic, and a

Am 2017-02-01 um 15:32 schrieb Rowland Penny via samba: > You don't need to do that, there are a couple of attributes (which you > will probably not have) which will store the next uid & gidNumber. > these are 'msSFU30MaxUidNumber' & 'msSFU30MaxGidNumber' and they > should/can be here: > dn: >

>What is wrong with the Samba wiki, what didn't go exactly like the wiki ? https://wiki.samba.org/index.php/Maintaining_Unix_Attributes_in_AD_using_ADUC Well take this wiki that I'm trying to follow to add the AD uid/gid to the objects. It's helpful and confusing, but maybe because I'm just not informed enough. I got the property pages to show in AD Users & Computers,